Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: NkL5RBs7m8ca7ym1klwP3TgvbLL9NSe1t5LnXmF62ao=
Subject key identifier: C1:4E:DD:D5:6F:13:DF:9B:2B:8C:FD:F1:98:C9:B0:08:AB:8A:64:20
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 019F90C7B3488D4014AA5C9B9EEAFF6585D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 17F2
Signing time: Thu 23 Jul 2026 21:00:34 +0000
Manifest this update: Thu 23 Jul 2026 21:00:34 +0000
Manifest next update: Fri 24 Jul 2026 21:00:34 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: f1jlQtzPdiK8gDO/qrgaFfmWF60rCUtGMpw5UBFSYqY=)
2: IWYrbXuJb7rdaqwraiq_apy6AMA.roa (hash: abrxD3L91b+QPLIZVyKImnAT+E+aScHR2G4289W+U4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b3:48:8d:40:14:aa:5c:9b:9e:ea:ff:65:85:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Jul 23 21:00:34 2026 GMT
Not After : Jul 24 21:00:34 2026 GMT
Subject: CN=c14eddd56f13df9b2b8cfdf198c9b008ab8a6420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:6d:c0:ae:1d:36:8a:31:4d:eb:92:75:3c:
87:a8:26:06:ae:46:e4:e2:dc:d3:31:08:9f:92:59:
67:30:dd:b7:80:80:a8:5a:7c:84:fd:3b:a9:ed:e6:
79:b7:6b:fd:71:37:56:59:16:e5:1b:e3:c2:35:a1:
2a:bf:c7:60:a7:4d:6d:10:b2:78:56:a8:05:93:33:
64:4d:20:49:79:82:8c:35:3e:c4:2d:f6:18:45:57:
e8:7d:d1:27:09:c1:df:33:76:cd:ca:cb:4e:17:a0:
0f:cc:3c:2f:b2:71:d5:4c:d5:ce:bf:c0:e0:06:8f:
1f:48:e4:32:3a:1d:3b:d8:16:15:5e:d6:37:80:af:
4a:d7:91:21:49:2e:20:1a:d1:e0:fd:9c:7c:10:45:
16:eb:52:b1:cf:ed:48:fd:ff:43:6d:55:38:55:af:
32:bf:65:99:e5:f4:8f:9b:e7:5f:1e:a4:76:19:ce:
ce:4d:97:f9:9b:e7:06:b6:ab:10:6a:2e:b7:38:92:
b4:09:00:16:9f:1e:f0:c5:03:ea:e9:9d:29:1a:54:
59:43:b4:a6:69:0f:7e:59:68:03:dd:4e:f7:b2:10:
70:8a:fe:64:91:d2:41:83:21:96:eb:1d:f8:34:3b:
fa:15:ce:36:3b:d4:f6:55:33:7a:96:f4:72:33:a1:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:DD:D5:6F:13:DF:9B:2B:8C:FD:F1:98:C9:B0:08:AB:8A:64:20
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e9:9e:23:91:00:04:ed:da:57:fe:f0:35:4e:43:55:59:65:
e0:c6:b2:50:55:cc:05:85:2c:d3:0e:b0:e1:14:d5:2a:7c:72:
89:6c:f9:7c:f0:af:52:b2:80:52:3c:59:9a:5d:35:4c:f6:e3:
02:68:8d:ed:d3:97:00:d6:06:b0:bb:40:0b:50:25:c6:ac:6a:
78:ab:f3:f4:2a:fc:cd:59:26:88:d1:f1:d7:3d:77:78:f2:58:
fc:55:26:94:09:fc:40:c8:ea:7b:0d:b8:fc:fc:bc:62:37:1d:
ee:46:ec:89:5e:85:03:4a:a1:3c:b1:ce:3d:2c:71:dd:da:93:
ac:45:8c:fa:ff:8d:00:80:3f:43:9d:92:34:c1:6c:0e:c5:1f:
90:9e:bf:e3:ee:00:32:19:67:cf:6c:20:27:94:bd:9f:e7:20:
71:c8:44:44:ef:fe:68:21:09:99:82:87:72:62:d1:ce:4d:81:
4e:30:12:d6:98:4c:0f:7e:8b:bc:35:ca:59:ff:f4:76:14:90:
67:2f:92:34:83:86:ba:b1:1c:71:c4:1b:28:33:65:47:40:a0:
84:a9:fc:3e:f7:f0:05:5f:18:ae:15:89:fa:9e:56:d4:12:32:
66:ea:1f:aa:0e:16:05:8a:f7:7b:30:69:8a:07:3d:60:39:7e:
93:7e:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:09 2026 by rpki-client