Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier: ohmwUZI5moJFQ0A3FDbfICCW22+luKrBbHeYoFDMdX8=
Subject key identifier: A2:AD:24:6F:71:B4:CD:43:50:53:F8:A1:C9:39:27:B0:F2:A5:0A:44
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 019F8F7F3802173F165366BD05ADB99B97D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number: 18D2
Signing time: Thu 23 Jul 2026 15:01:47 +0000
Manifest this update: Thu 23 Jul 2026 15:01:47 +0000
Manifest next update: Fri 24 Jul 2026 15:01:47 +0000
Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: m3SHyIcHfzGoP6TC98H1gSXyvCyvPJ7ljHWoTqtp288=)
2: nnin_fNl1tSAWtG4KKubs75saxQ.roa (hash: tBfqEOh65UkUmQilCd8QfZ40s/L5dqLeMazjdI0BMwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:38:02:17:3f:16:53:66:bd:05:ad:b9:9b:97:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Jul 23 15:01:47 2026 GMT
Not After : Jul 24 15:01:47 2026 GMT
Subject: CN=a2ad246f71b4cd435053f8a1c93927b0f2a50a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:80:a1:33:f0:cb:37:6a:75:ab:d4:23:4c:
78:fd:a4:49:2a:b3:92:3d:a0:2f:92:3c:ad:c1:c2:
b8:a1:6a:2b:0d:3e:58:85:b2:4b:53:50:62:d3:06:
46:dd:c4:63:91:8f:0a:98:d5:2e:e2:2c:21:9e:80:
92:bc:41:ca:de:38:b1:06:1e:ef:11:7c:d2:fa:c3:
6e:ac:54:34:91:6b:1a:f8:c9:2d:24:c4:16:54:c6:
d0:00:6a:08:ca:dc:c4:55:9f:b6:c9:27:a7:35:49:
c7:79:57:30:33:4a:61:f3:07:8c:ed:93:34:50:c7:
f6:f2:f5:8f:ca:06:e4:0d:72:a5:c8:72:ea:b7:41:
e8:c6:54:b1:c0:98:a6:70:41:2a:1c:c8:6b:ee:6e:
fe:bc:3c:6a:61:07:86:28:93:e9:50:ed:10:7b:b9:
05:c7:23:56:8f:fc:bc:0b:bb:ec:d1:fb:e2:1d:f4:
18:d9:62:33:aa:1a:df:e3:be:9c:39:44:bd:4f:f4:
bb:0b:7c:a5:1f:1a:bd:a2:4b:17:f0:87:f2:73:cf:
07:6a:0e:72:df:50:aa:e9:df:16:99:1c:2c:40:c3:
1c:d0:02:a6:b3:54:4e:e1:85:46:78:13:78:69:2a:
61:52:c1:5f:ab:9b:63:a8:2d:42:6e:cb:b7:21:f9:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:24:6F:71:B4:CD:43:50:53:F8:A1:C9:39:27:B0:F2:A5:0A:44
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b5:16:33:45:cb:ec:f6:62:a5:81:78:b4:e8:70:e8:a2:6a:
31:40:50:09:07:83:b0:e7:6e:64:53:db:f0:37:b2:eb:3e:7a:
6a:67:09:be:7a:85:46:46:d4:03:ac:77:0e:f2:7b:3f:12:31:
e0:33:6b:08:e1:68:dc:fa:61:76:b1:ed:94:b0:89:9b:db:ae:
ba:e4:90:5a:d3:f8:62:df:7e:83:12:18:87:a4:f3:04:5a:41:
55:39:66:f8:ac:7c:52:83:74:a5:3b:d1:7b:2f:49:c4:56:6a:
9a:e2:7f:d6:2b:27:39:f1:dc:84:6e:68:4a:95:d9:4c:bd:e9:
d1:0a:da:88:b8:d7:a4:ef:24:ef:03:fe:eb:f6:49:e0:86:ee:
e3:03:b1:45:71:20:eb:03:f6:9e:e3:84:cc:fe:ff:d8:1a:63:
65:46:e2:08:b6:b5:26:f7:b8:20:e2:84:db:ff:b7:76:80:a9:
fe:7c:ba:c6:0f:8d:8a:42:b5:49:90:3a:a3:3f:1e:02:df:75:
a0:21:3a:38:43:a1:10:c0:5a:0b:2a:db:69:b8:81:b9:64:17:
92:08:5e:9c:74:53:34:4d:35:a3:e3:c5:c4:47:db:f7:ed:e9:
3b:6d:ed:e6:6f:5e:bd:af:1a:25:50:18:97:e9:5c:27:04:c6:
04:bd:93:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfzgCFz8WU2a9Ba25m5fXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODRiNDUxNzkzZjYyNDE4NjE3YmM5MzRmNWU4MjUxM2Zj
MzZhODkwHhcNMjYwNzIzMTUwMTQ3WhcNMjYwNzI0MTUwMTQ3WjAzMTEwLwYDVQQD
EyhhMmFkMjQ2ZjcxYjRjZDQzNTA1M2Y4YTFjOTM5MjdiMGYyYTUwYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/eAoTPwyzdqdavUI0x4/aRJKrOS
PaAvkjytwcK4oWorDT5YhbJLU1Bi0wZG3cRjkY8KmNUu4iwhnoCSvEHK3jixBh7v
EXzS+sNurFQ0kWsa+MktJMQWVMbQAGoIytzEVZ+2ySenNUnHeVcwM0ph8weM7ZM0
UMf28vWPygbkDXKlyHLqt0HoxlSxwJimcEEqHMhr7m7+vDxqYQeGKJPpUO0Qe7kF
xyNWj/y8C7vs0fviHfQY2WIzqhrf476cOUS9T/S7C3ylHxq9oksX8Ifyc88Hag5y
31Cq6d8WmRwsQMMc0AKms1RO4YVGeBN4aSphUsFfq5tjqC1Cbsu3Ifl2swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKtJG9xtM1DUFP4ock5J7DypQpEMB8GA1UdIwQY
MBaAFOaEtFF5P2JBhhe8k09eglE/w2qJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTRmMzItMjU4ZS00YmIzLWI4ZDUt
NzFiNzA5ZWY1ZjViLzEvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTRmMzItMjU4ZS00YmIzLWI4ZDUtNzFiNzA5ZWY1ZjVi
LzEvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbUWM0XL
7PZipYF4tOhw6KJqMUBQCQeDsOduZFPb8Dey6z56amcJvnqFRkbUA6x3DvJ7PxIx
4DNrCOFo3PphdrHtlLCJm9uuuuSQWtP4Yt9+gxIYh6TzBFpBVTlm+Kx8UoN0pTvR
ey9JxFZqmuJ/1isnOfHchG5oSpXZTL3p0QraiLjXpO8k7wP+6/ZJ4Ibu4wOxRXEg
6wP2nuOEzP7/2BpjZUbiCLa1Jve4IOKE2/+3doCp/ny6xg+NikK1SZA6oz8eAt91
oCE6OEOhEMBaCyrbabiBuWQXkghenHRTNE01o+PFxEfb9+3pO23t5m9eva8aJVAY
l+lcJwTGBL2TzQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:28 2026 by rpki-client