Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: YvrinH6vCiAiFH4Fi45eOZC+voqPsBu1FukRKHP2Olk=
Subject key identifier: 30:6F:A1:B3:59:72:8A:2B:F0:E9:6B:EE:AF:66:9B:7B:1E:8F:45:34
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 019F91DB40314CDFBEF85159A996167CFD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 02:01:32 +0000
Manifest this update: Fri 24 Jul 2026 02:01:32 +0000
Manifest next update: Sat 25 Jul 2026 02:01:32 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: zI75N4fQg64uoWUo28FgJ8NSsdipZj29GNI2L5KWA6Q=)
2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:40:31:4c:df:be:f8:51:59:a9:96:16:7c:fd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Jul 24 02:01:32 2026 GMT
Not After : Jul 25 02:01:32 2026 GMT
Subject: CN=306fa1b359728a2bf0e96beeaf669b7b1e8f4534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:b8:29:1c:64:d6:65:02:88:85:cd:76:d6:
b1:92:23:cf:10:0a:d1:98:30:70:cf:fc:cf:0a:96:
b0:d2:17:db:44:85:b5:e4:70:40:57:d1:d5:c0:3d:
36:21:be:5b:f0:98:a0:9c:55:d1:29:ef:2f:ca:25:
f2:bd:fd:60:27:77:fa:49:05:ac:08:48:55:dd:08:
b5:f9:3b:8c:82:97:a9:14:87:08:17:fd:41:b4:d0:
a0:64:62:7d:f3:c9:bc:12:03:1b:06:29:e4:14:24:
91:28:db:c1:65:e0:97:cc:9e:ac:1c:2c:f6:d8:4d:
98:9f:2a:62:4c:5f:de:55:ec:d1:ef:15:79:19:f0:
78:72:40:03:04:b7:20:fa:f3:2a:68:19:42:c8:7b:
b8:87:0d:79:32:e9:70:b0:41:a5:c9:da:cb:0b:c6:
1f:f8:93:cf:bf:88:9e:8d:a4:ba:72:2c:44:5b:1a:
bc:e5:d2:ba:4c:a5:22:c0:f2:20:75:c6:8a:cc:ca:
bc:37:75:a8:06:b7:cb:3d:63:b2:61:7e:11:45:24:
c0:9b:ea:5e:34:b1:13:12:26:28:66:c0:ac:86:3b:
a6:eb:64:b7:d6:9d:d8:25:56:f1:10:d4:53:52:4b:
2f:65:bb:b1:63:4d:da:d3:c9:16:5a:27:6c:56:01:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:A1:B3:59:72:8A:2B:F0:E9:6B:EE:AF:66:9B:7B:1E:8F:45:34
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e3:9e:d5:04:01:f4:31:ae:85:dd:c4:34:16:53:58:f2:b0:
33:91:6b:c8:34:d3:e5:e1:8f:98:12:cf:6d:0d:fc:7c:c7:96:
bf:53:30:e7:a1:b4:01:2f:eb:b3:25:9c:bd:87:f8:0e:31:51:
7e:48:38:fa:d4:0e:ad:da:85:c6:6e:1d:16:0a:a3:f2:09:6c:
b3:ba:03:2d:e6:83:0d:aa:ea:5c:41:4d:b4:4d:7e:03:06:54:
a7:f7:4b:53:de:bf:2a:b3:f6:57:f1:b9:25:5b:74:6e:2a:03:
3c:ad:bb:a9:e7:ad:2f:b4:72:0d:6b:38:37:7a:a2:7a:c5:07:
05:4a:64:f7:5e:67:21:4d:e1:69:b7:cd:0a:52:c0:92:9d:f4:
24:68:0a:61:2e:c2:80:09:0e:3d:67:d5:94:30:a4:74:13:be:
dc:8e:96:c8:ee:44:16:74:7e:1c:df:5f:19:6f:d6:27:ea:e4:
b0:42:f9:f9:8d:06:90:2a:4f:30:db:5f:7f:56:c1:af:b3:b1:
1e:57:03:81:07:d2:44:5d:e4:23:7a:67:68:91:37:d6:c9:4d:
07:ce:f5:79:bd:77:1f:4c:2a:34:ca:94:ce:cc:43:ed:4a:ad:
b1:3d:bb:97:07:b3:40:0c:ff:2b:b1:b7:ce:c7:6f:9f:2e:d9:
4b:7f:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:42 2026 by rpki-client