Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier: nR7XmODgVgTPQL42r2X3OA8AUkVsaDmVHrFAq6gRmDw=
Subject key identifier: C9:F4:DF:18:E8:0F:EE:FC:FA:6B:7B:6F:8B:5B:6D:0A:48:EE:93:BC
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial: 019F93C8E584B8C9FFAA6C20A8FB1D1B9BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number: 0CD1
Signing time: Fri 24 Jul 2026 11:00:44 +0000
Manifest this update: Fri 24 Jul 2026 11:00:44 +0000
Manifest next update: Sat 25 Jul 2026 11:00:44 +0000
Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: GJPNBup9D6+XvQNvxfWIHW6xAXjFWCfuNwM3np6xeUA=)
2: pG1q5nAL-cGnJU_6__TqJaRLon0.roa (hash: brTouy8lyh5LkULXwzYt5uqnpGWf2jgORTWC0J3Zrr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:e5:84:b8:c9:ff:aa:6c:20:a8:fb:1d:1b:9b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
Validity
Not Before: Jul 24 11:00:44 2026 GMT
Not After : Jul 25 11:00:44 2026 GMT
Subject: CN=c9f4df18e80feefcfa6b7b6f8b5b6d0a48ee93bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:0e:9c:92:9a:9c:ce:2e:83:5b:14:fc:ae:
aa:3e:fa:cd:fa:de:6c:32:58:c1:ef:49:20:22:20:
7a:c3:cc:89:6a:50:f4:c0:00:3f:ff:db:36:08:37:
50:0b:ee:a5:33:95:d5:e9:e4:fd:77:42:a1:25:4e:
b5:42:59:42:2c:4b:42:51:d4:90:5f:13:9f:bd:b3:
00:1b:0b:ee:af:6a:0c:af:0e:e0:e2:64:0c:34:40:
e5:fe:72:61:af:a0:6e:e1:af:29:d9:22:29:b6:88:
2f:f6:15:94:d8:1d:4b:96:b9:d7:00:ec:f2:77:3e:
c2:22:b0:bd:6b:7d:a4:b4:b6:00:5a:6f:7f:3f:e8:
76:d2:c0:2a:db:74:84:4d:48:e2:17:e8:8b:35:03:
e4:b0:76:e8:43:cb:b7:84:0a:89:89:28:36:e1:59:
e1:0f:53:22:e7:8c:87:34:46:e9:00:64:fc:5d:d7:
9c:be:42:f6:b2:df:5b:fe:94:16:f9:f6:54:b5:90:
9b:47:52:58:34:ef:ed:3d:51:44:42:ee:a6:90:11:
e8:52:22:5d:4a:90:41:5d:4d:d8:8d:f5:bb:a9:19:
04:48:2d:4c:f6:19:65:a8:a9:0e:e8:42:06:b5:a6:
17:75:ed:40:0e:e5:cd:9c:c0:74:2e:57:5b:e4:57:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F4:DF:18:E8:0F:EE:FC:FA:6B:7B:6F:8B:5B:6D:0A:48:EE:93:BC
X509v3 Authority Key Identifier:
keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:75:91:97:e1:d6:6f:a8:16:42:9f:4f:5f:2d:1c:dc:b4:
f9:ad:21:dc:60:79:0f:a1:1b:87:74:e7:11:d0:4e:b6:2e:bf:
a4:66:bb:75:97:f4:46:7f:2a:f5:d2:0c:4a:7b:b0:66:1f:12:
bc:e1:71:a8:90:45:6e:11:84:e3:01:39:a4:19:d1:d7:cb:3f:
13:1d:70:a7:fc:ea:e0:1f:93:fd:46:4f:10:9c:fe:23:33:1c:
19:52:6c:23:60:3d:09:50:5d:66:44:2d:16:e2:73:cf:c4:7b:
4c:59:21:31:aa:b7:a2:13:ab:3e:ac:36:8f:0c:ed:bd:c7:20:
8b:ca:9b:62:90:21:f1:24:31:9e:6c:42:76:14:df:c5:7d:72:
51:de:dd:60:a1:ca:98:b7:ac:59:92:fd:01:93:a4:ea:ef:01:
bc:9f:7d:08:04:de:2c:cc:88:84:74:ae:23:ff:94:d5:ed:bc:
be:2c:53:88:0e:05:20:5a:92:e7:43:78:0d:7d:9d:0d:c6:de:
e4:d9:d2:f5:fd:d0:d2:87:0f:b5:13:11:22:31:6c:52:a7:2d:
81:6a:bd:12:38:da:98:a9:f8:93:ec:90:0a:6f:09:04:22:9d:
dc:a5:15:22:f5:cb:84:b3:f5:4a:79:43:65:4e:03:f5:89:b1:
f2:be:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:19 2026 by rpki-client