Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: pZ0C23odb0J5vXifw7m0H/IW5CK/QHIKbJlsWajoSMk=
Subject key identifier: 1F:54:C8:A8:6F:E2:53:0C:D9:CD:EB:10:D3:06:2A:56:B4:FF:69:2B
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 019F91A446B961C903AE1915E2559AD2385C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 1523
Signing time: Fri 24 Jul 2026 01:01:30 +0000
Manifest this update: Fri 24 Jul 2026 01:01:30 +0000
Manifest next update: Sat 25 Jul 2026 01:01:30 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: je9SHCYWgVW/+qNRD8FLhLrykmFIenxr1jzf+J3jv+c=)
2: bqf5qipql10pKq2IW1cVBIAiNT0.roa (hash: +2BT4dwhMNJVzlVWSCe67UeT7mC6TzS9Mo4QbFrZxHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:46:b9:61:c9:03:ae:19:15:e2:55:9a:d2:38:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Jul 24 01:01:30 2026 GMT
Not After : Jul 25 01:01:30 2026 GMT
Subject: CN=1f54c8a86fe2530cd9cdeb10d3062a56b4ff692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:0a:67:f5:cb:ef:ed:eb:c2:05:88:68:c2:
4c:27:af:1f:e0:23:19:b6:ca:fa:78:f4:75:04:12:
3a:be:e7:e0:bf:4a:6f:0a:95:37:a9:64:60:6f:b4:
44:41:7e:29:3a:02:96:f1:35:52:51:ca:f0:76:50:
c6:5a:37:02:89:d9:7b:d3:12:6a:be:54:f0:60:d9:
26:4a:70:07:bd:58:c2:50:89:8c:41:10:84:84:4d:
b8:a4:de:4a:ac:eb:8b:e7:8b:1a:81:f4:4f:b5:15:
f1:c5:ab:f1:0e:20:25:7c:77:d8:d1:06:c8:30:84:
a1:c9:fe:68:45:a4:05:94:ca:f5:d9:45:76:cb:4d:
78:85:0e:9e:55:67:d9:22:d5:aa:34:58:ed:fa:ad:
2e:9b:a7:9b:a3:26:96:93:c7:20:ba:11:5c:f5:98:
f6:fb:fd:7e:a7:52:9f:80:4d:8f:16:16:bf:00:ce:
21:e1:f3:9c:c9:78:ae:69:6c:b7:2a:55:91:45:00:
71:da:17:0c:6c:22:03:85:22:a1:ef:73:df:7b:24:
8b:b3:47:ee:25:ca:3e:e9:f8:6a:08:90:7b:75:ce:
98:2f:d4:18:94:f4:c3:bd:53:a3:99:ae:2b:7d:7e:
21:5f:b2:fb:ed:1c:6a:3b:0d:2e:f4:68:eb:e4:7d:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:54:C8:A8:6F:E2:53:0C:D9:CD:EB:10:D3:06:2A:56:B4:FF:69:2B
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ff:cb:a2:63:66:d5:e2:a6:74:be:4f:1e:99:54:9b:c2:83:
94:b7:92:d1:6f:e6:03:94:54:0d:89:1b:f8:db:1e:77:96:99:
25:7c:bf:53:64:fd:57:e5:e1:0d:b1:7a:08:b1:0e:e9:bb:6e:
99:ec:bc:4f:cc:41:1c:4e:50:e8:c4:49:5b:db:bc:78:56:cf:
72:22:f3:72:b0:d4:e6:63:c2:d7:89:9f:e9:fa:90:a3:ff:2e:
ce:73:ee:17:bc:36:c6:8e:2f:1f:6e:9a:06:cb:6e:02:eb:28:
2b:12:69:e6:b1:27:18:18:49:41:68:03:5a:5c:95:51:09:ef:
0c:a4:82:d9:ae:ed:0d:c8:78:a7:a0:95:6b:81:29:53:b1:6a:
54:bb:42:ba:57:5c:cb:dd:f3:d6:9a:9d:ff:a2:6a:bf:e4:11:
bc:98:49:47:fc:d2:98:33:19:ec:dc:a0:f1:67:09:46:50:bb:
8d:44:69:61:fc:64:06:6d:cc:e7:b4:eb:2a:c0:44:ca:5d:dc:
ef:2c:3a:e9:47:8d:2b:c3:81:c5:a5:f8:bf:43:e9:fd:cb:64:
a4:55:48:53:25:de:f2:66:e4:28:bf:37:bc:ad:2e:71:e0:7d:
e4:b1:53:3c:d2:d4:ed:3f:cd:a0:c0:8b:b5:e7:72:09:06:ab:
b9:5f:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:15 2026 by rpki-client