Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: dKlYmeewR00HFoKkV+zOSjmxa+V6omV/cFxywbsbMYY=
Subject key identifier: C2:CC:67:81:61:7A:40:16:B1:AA:50:6E:83:3B:ED:95:38:C9:57:F9
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 019F8FB5557853102AE336DDD104EA25E52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 15AC
Signing time: Thu 23 Jul 2026 16:00:53 +0000
Manifest this update: Thu 23 Jul 2026 16:00:53 +0000
Manifest next update: Fri 24 Jul 2026 16:00:53 +0000
Files and hashes: 1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: iKMhbRR3v6PqzasdwUmPdt1HWu2ag+P92aZP2b7dO1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:55:78:53:10:2a:e3:36:dd:d1:04:ea:25:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Jul 23 16:00:53 2026 GMT
Not After : Jul 24 16:00:53 2026 GMT
Subject: CN=c2cc6781617a4016b1aa506e833bed9538c957f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:07:c0:29:9c:3f:88:7e:ca:63:38:0a:d6:
9d:24:6a:9d:5e:d9:f5:ff:44:f5:a5:b2:b1:6a:3f:
ad:19:68:85:db:89:0e:6e:c8:88:3e:30:df:bc:25:
83:af:37:eb:b9:7c:57:a3:28:1f:eb:79:50:a7:f7:
c6:db:0f:3b:1c:17:07:c0:66:84:e5:29:71:2d:52:
43:3a:52:d1:8a:a6:44:a3:76:50:00:4d:58:fe:33:
e3:1d:5f:a6:06:32:c8:65:66:9f:21:6d:57:b1:0e:
d8:d1:d9:3e:60:fa:0b:2e:61:d6:9c:88:05:68:85:
f4:f6:6f:43:58:00:b2:34:51:2f:fc:c3:98:57:bd:
63:5c:d1:0f:49:7e:1f:1f:26:2e:5c:68:7a:0f:17:
50:ce:dc:b7:b2:4e:a4:d1:a7:75:05:3a:d3:b3:4d:
23:96:eb:a2:08:d1:a2:d8:b5:2e:63:20:0a:fd:e6:
ce:bd:16:bb:4f:99:66:3c:5e:cc:eb:de:2b:cd:0b:
ae:d4:b6:7f:40:68:8e:a1:48:22:fb:63:10:fe:3c:
fa:18:ca:62:ad:ca:ff:4b:aa:15:c1:dc:da:37:1b:
36:dc:91:17:16:78:2d:f4:e5:c9:1b:eb:cb:08:c4:
30:8f:42:73:9e:0d:55:47:2d:88:aa:c6:08:dd:b3:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:67:81:61:7A:40:16:B1:AA:50:6E:83:3B:ED:95:38:C9:57:F9
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1c:2b:e0:91:81:d5:75:75:91:c1:42:09:28:46:0a:32:d0:
38:35:e6:6e:9d:fc:34:ce:28:7e:b5:bd:e4:e4:93:de:e3:c3:
a0:0a:95:8d:f7:5c:88:8b:c1:60:60:2d:cf:55:ee:b8:cf:53:
78:08:f3:9b:26:51:15:49:d5:6d:ce:c1:92:83:a7:70:93:83:
7d:f6:25:81:e5:4e:87:32:07:76:e3:ba:10:c9:22:24:67:86:
57:93:96:eb:cd:d0:a5:a0:ba:3e:34:e5:05:49:b2:59:40:6d:
bb:04:40:d1:02:d6:81:a6:0c:79:15:85:26:bd:1c:39:6c:d6:
72:95:2e:07:3e:d9:1e:85:69:83:34:73:0b:be:e6:bb:73:1b:
b1:a5:dc:10:4f:2a:d1:5d:88:9d:73:6d:2a:d3:b1:13:dc:7b:
43:23:b3:85:72:b3:0f:62:58:57:d7:a2:fc:93:fd:95:d4:87:
b9:28:52:9d:ae:52:ce:cc:d8:0b:e8:87:26:6f:03:a7:f9:9c:
72:18:e2:d6:0a:c9:5c:8f:4d:5a:97:c7:c5:6c:5d:05:1a:93:
96:d3:5c:6b:72:a0:56:0f:46:9f:11:77:e5:8b:7a:09:ac:4b:
c3:57:57:92:1f:fc:17:a2:52:17:46:98:4e:7b:ac:46:60:64:
3b:6b:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:59 2026 by rpki-client