Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
File: 5ADgGnlalXLPsazYWWya0zxhJlk.mft (raw, json)
Hash identifier: VMloyJKajos2+T2FQLwfsKDRnKZ87NaJAKcwva2uAN8=
Subject key identifier: A8:E3:55:EC:0A:B2:4D:68:47:D5:04:3E:70:FF:DA:52:22:6A:29:77
Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
Certificate issuer: /CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Certificate serial: 019F93FFA345ABC21BEF1924990069ECAEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
Manifest number: 035B
Signing time: Fri 24 Jul 2026 12:00:31 +0000
Manifest this update: Fri 24 Jul 2026 12:00:31 +0000
Manifest next update: Sat 25 Jul 2026 12:00:31 +0000
Files and hashes: 1: 5ADgGnlalXLPsazYWWya0zxhJlk.crl (hash: N+gLiQ5WL5jrnyEcfXL3hqyHYR4QifsTzXQwxOiw8uU=)
2: NUAjVMxo6Ucd4xsIT8RtOeLkos4.roa (hash: RLlBvyKQk7ZpNWvbBgNGnwpHL3NkcCrqlw1bbIkW97k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:a3:45:ab:c2:1b:ef:19:24:99:00:69:ec:ae:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Validity
Not Before: Jul 24 12:00:31 2026 GMT
Not After : Jul 25 12:00:31 2026 GMT
Subject: CN=a8e355ec0ab24d6847d5043e70ffda52226a2977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:47:ce:b6:d8:39:c3:9a:14:f2:3d:50:69:31:
eb:33:26:c7:ce:22:9c:bc:55:f2:17:a6:b7:94:45:
f4:bb:f9:12:ab:aa:21:ee:bd:3b:25:fb:4f:00:4d:
79:d4:5b:ad:6d:ab:84:d9:2b:a9:1f:ee:6e:f3:87:
03:2f:e3:c4:7c:a7:ee:16:b1:02:43:ca:66:a5:75:
1d:7f:60:38:e4:05:95:83:f1:da:e5:cb:ee:f2:e4:
32:64:42:b5:eb:7c:87:f9:98:d8:ab:82:22:3c:2b:
ec:3a:8d:2b:d3:7c:83:aa:68:c6:99:8c:23:4f:1a:
91:54:49:c2:a9:ca:32:86:f2:4b:5d:62:12:56:86:
17:4b:7f:f4:34:d4:c3:e9:6e:9d:3f:cf:58:8b:23:
11:e6:bb:51:d9:ab:a6:36:ae:4d:ef:45:59:17:4d:
03:84:9f:38:d5:2d:5f:e3:73:2b:89:b2:d1:90:8a:
9c:83:5d:86:43:e7:bc:a7:5b:25:21:81:b0:16:70:
f8:5f:7e:d9:a3:04:a9:f5:42:1b:55:45:6d:40:a3:
95:74:64:42:17:86:f8:6f:1d:c7:b5:73:af:1d:6c:
56:9b:25:8c:4f:49:58:0b:93:04:e4:85:37:2f:4e:
43:32:3b:9d:19:f9:65:56:7b:4e:1e:1f:57:d6:bc:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E3:55:EC:0A:B2:4D:68:47:D5:04:3E:70:FF:DA:52:22:6A:29:77
X509v3 Authority Key Identifier:
keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:48:19:4a:c8:47:86:5e:b4:f5:c3:d9:c3:c1:01:25:07:e8:
f6:f7:43:fb:f0:2b:57:f2:ad:a9:16:38:73:9b:ee:66:44:08:
fa:2a:43:d4:67:84:8c:46:ec:4b:8d:b4:fc:05:aa:27:7b:31:
5e:49:69:0c:d0:41:9a:36:a6:80:64:86:b9:f4:f6:93:29:19:
68:14:1b:51:8f:2a:53:d3:39:a6:e2:51:8a:d5:ac:d3:9d:ef:
c7:2c:92:11:7e:98:d7:fd:98:18:29:94:05:67:eb:4c:56:96:
cb:67:0a:75:5d:bc:f0:e5:8e:32:84:69:40:8c:a7:a8:2c:31:
2f:81:a3:0c:69:c7:53:42:8a:bd:79:93:9d:b6:30:f4:8c:14:
4c:4e:b5:02:b9:30:92:dd:fa:10:57:15:cc:1e:ac:78:4f:05:
08:2e:cf:d4:07:f0:ac:4d:83:e4:c0:62:a4:60:c4:99:f4:f0:
92:3e:7e:1b:84:5d:58:58:8f:3a:ed:e3:2c:7c:6e:db:a9:e9:
05:67:d8:2f:9e:7c:0a:7e:8e:cb:11:9d:00:80:76:2b:28:37:
9d:79:73:a3:d1:20:6f:a2:9e:6e:a5:cc:5c:e2:39:98:56:b6:
7a:c2:7b:ab:af:31:fe:b9:95:03:3d:36:07:ff:10:6b:18:9b:
1a:8f:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:25:13 2026 by rpki-client