Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
File: n5D0diDPsoZkkPXRGL0lpQBTEeY.mft (raw, json)
Hash identifier: VwMKKZdX5AIyE+9QJMymMNXdJIt1aA7E5lHe1IsiiP0=
Subject key identifier: E8:4A:FF:C4:4F:5B:32:2A:E4:E0:D7:41:18:23:5A:67:BE:CB:28:E6
Authority key identifier: 9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
Certificate issuer: /CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Certificate serial: 019F954A3A61FADA3133F20E3721DFEEE3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:37 +0000
Manifest this update: Fri 24 Jul 2026 18:01:37 +0000
Manifest next update: Sat 25 Jul 2026 18:01:37 +0000
Files and hashes: 1: Qk8SUDtv35PQudBghJLMDCkV05Y.roa (hash: CGtXCN1Ppc2jLH4a4E4mJ8Yb24I37XQwBgJ85+uhimE=)
2: VLazWnEoP4FNqXwAq5qItoa84gg.roa (hash: GIpN7+SpErb0kVRnHT1vQxVl+Mf313Qjqs5dCJFjsZA=)
3: n5D0diDPsoZkkPXRGL0lpQBTEeY.crl (hash: HtT6iSOahBXJqeVmRmROPSL2RgLD7YmZNCm82aqmG88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:3a:61:fa:da:31:33:f2:0e:37:21:df:ee:e3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Validity
Not Before: Jul 24 18:01:37 2026 GMT
Not After : Jul 25 18:01:37 2026 GMT
Subject: CN=e84affc44f5b322ae4e0d74118235a67becb28e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:1d:16:81:ae:e2:c1:a3:bd:d9:6e:b4:3b:
23:b1:2d:72:f1:a8:b6:7e:16:aa:46:5d:49:19:d0:
1b:8b:d6:22:91:6d:af:d2:e8:39:61:9c:31:a6:e7:
8e:67:7c:40:11:a4:ef:8f:d6:31:94:6c:0d:49:11:
d3:49:b3:2f:49:2b:f2:6c:ee:04:91:32:81:06:cb:
8a:c9:f3:2f:e4:60:ea:de:38:00:64:87:d9:84:bf:
31:ff:21:d7:96:22:44:42:4c:c5:20:b7:63:2a:19:
4e:3e:dd:c7:8a:b9:39:c8:24:85:f6:0b:ba:57:63:
0b:0e:81:b1:3e:22:d6:5b:6a:34:2f:2c:0d:a5:b7:
1a:d1:e9:73:d9:e1:6a:07:72:cb:bc:04:53:0a:57:
d1:bf:0f:df:46:59:4a:90:08:af:b5:40:a2:a4:df:
fe:1a:0a:67:76:8e:f9:d4:02:b0:d3:ce:f4:d9:a1:
8b:85:a8:53:6d:a6:f8:03:ab:d6:be:b0:10:8b:64:
de:e4:8e:f3:24:2e:a0:5a:21:d3:dc:82:59:c1:95:
ff:17:1e:67:a0:2e:d5:29:5a:0e:16:27:5c:7c:2a:
a4:35:44:3c:07:1f:c0:61:64:db:96:5c:95:3b:4b:
73:ae:6d:1e:11:30:a6:29:38:f7:3c:93:49:26:10:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:FF:C4:4F:5B:32:2A:E4:E0:D7:41:18:23:5A:67:BE:CB:28:E6
X509v3 Authority Key Identifier:
keyid:9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:2e:0c:b1:1c:42:f8:bb:dc:ef:3c:68:07:80:34:04:eb:
86:57:1b:7e:a3:6c:1e:36:9d:60:d7:7a:08:98:0a:82:73:be:
9c:2d:74:fc:55:ea:3e:27:8e:78:e9:d8:c9:b1:10:08:b1:60:
ec:28:cf:8e:0a:4d:9c:cc:eb:e7:68:e2:ee:35:cd:0a:b5:d1:
4b:fd:5c:73:ca:96:b9:0c:20:2f:0e:64:72:df:40:6c:d3:0b:
28:61:a2:ff:a4:35:99:c1:ed:ee:5b:5b:7d:4b:94:d7:9e:58:
c6:54:43:38:b2:72:e4:e7:74:bf:7c:43:6f:0f:54:16:d0:b2:
84:63:e1:53:b4:b1:5e:e0:e7:2c:e8:e5:11:bd:c2:0a:2e:94:
c7:ad:9a:53:31:ad:02:8d:48:6a:1d:49:b3:e6:d7:f2:ac:a9:
64:c7:24:09:df:34:02:2d:85:4d:6e:0c:25:db:52:22:33:57:
aa:ed:41:5d:1d:07:01:88:b7:c8:ee:18:76:58:21:55:b9:0d:
ad:0c:17:6e:c3:f5:98:ec:c7:17:6a:98:55:df:f5:62:c1:77:
ca:24:3f:18:98:3a:6b:61:01:e7:96:36:f8:3e:b4:51:78:de:
d1:cb:90:65:51:5c:80:52:de:a2:52:6a:a0:21:0b:fa:22:44:
20:09:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:37:22 2026 by rpki-client