Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: TXGarzlr/o2NnhcyZ144v0WhFo8B2csJkEo/VDYslU0=
Subject key identifier: 34:5D:25:3E:54:10:1B:0E:EA:DF:9B:8F:01:FE:73:77:F7:62:AE:D0
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 019F93C8EA8006372F1F4FC46D0C35067FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:45 +0000
Manifest this update: Fri 24 Jul 2026 11:00:45 +0000
Manifest next update: Sat 25 Jul 2026 11:00:45 +0000
Files and hashes: 1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: L3hAzaDQS9/XXJaOoveNefXRztapdAy1YWRRNyaVg+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:ea:80:06:37:2f:1f:4f:c4:6d:0c:35:06:7f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Jul 24 11:00:45 2026 GMT
Not After : Jul 25 11:00:45 2026 GMT
Subject: CN=345d253e54101b0eeadf9b8f01fe7377f762aed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:78:12:1b:da:fc:ab:23:b2:b9:9c:69:75:
28:91:6b:2f:31:d4:5b:c0:37:bf:22:5e:f2:dc:72:
73:61:e4:b6:09:42:f0:7f:8a:04:86:0e:ff:39:1a:
36:60:35:f0:9e:f6:67:0a:c6:15:ec:a5:f6:a9:6a:
35:fd:b4:dd:44:65:3a:04:d3:a1:f3:cf:71:3b:28:
90:11:dd:e2:b6:35:65:e1:3a:ca:49:1b:0d:ba:83:
e9:58:f2:6d:97:04:6a:ae:0a:0f:48:ca:07:0d:0f:
22:30:28:f4:c6:22:3b:eb:a2:9b:83:a4:ce:f9:3e:
9f:33:83:66:e7:0b:01:e4:57:30:1e:29:b8:01:ce:
a1:b8:94:be:cc:43:35:03:89:a3:28:9d:6b:05:d6:
fc:76:63:c2:3e:5d:3d:d8:07:b8:2e:7b:a4:c3:08:
f7:7f:0c:54:a2:5f:d7:68:da:40:30:24:e2:00:80:
e1:76:c5:38:e0:fe:49:73:3b:03:c8:82:84:9e:35:
09:58:7e:b8:1d:fa:45:f3:47:aa:b7:38:3f:9f:a6:
0c:fc:08:60:98:a5:89:fd:85:2d:90:5d:c8:82:c4:
f9:3f:67:d1:12:af:c6:de:8b:11:89:32:96:80:04:
a4:e3:c0:36:16:7a:14:06:3e:d1:a2:45:81:a6:dd:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:25:3E:54:10:1B:0E:EA:DF:9B:8F:01:FE:73:77:F7:62:AE:D0
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0b:31:ae:e5:f1:33:5c:6b:69:a6:77:a8:63:3f:03:70:88:
ff:95:4a:75:1b:f6:e7:a3:8f:fd:7d:e5:7e:14:3c:c6:46:0b:
d9:7f:bd:ae:07:87:cf:5c:08:21:d1:d1:fc:7f:f6:46:65:5e:
a0:09:30:0c:fc:64:d9:13:ee:27:b7:51:44:ad:5f:27:ad:17:
91:33:eb:5f:f9:49:e8:2e:00:bd:00:1e:f2:40:9e:3b:a6:a3:
e3:90:04:1d:c5:e3:98:8f:00:56:16:ef:4e:04:2f:85:20:35:
5e:54:99:fb:1b:56:af:b6:ef:f9:ab:a1:c3:f2:db:09:4d:89:
65:a7:13:c8:b0:54:a6:61:b1:75:8b:ac:74:f0:8a:07:ab:95:
84:96:b1:a3:12:80:bb:f0:5d:2e:2b:72:89:c6:76:45:9c:4d:
4f:3a:0e:c2:8b:3e:d4:10:24:52:15:91:b6:96:b2:3b:9a:a3:
51:35:de:e1:14:d8:7a:98:e9:5f:40:6c:9d:6b:45:45:0e:be:
fc:6f:b4:3a:13:43:9e:41:61:f8:0c:4b:3b:d0:fe:6b:53:f8:
da:10:0e:2f:b5:a4:f8:fa:6c:96:0d:a5:7e:4f:34:af:05:25:
db:06:8b:70:e2:b4:3d:58:09:bb:c3:1a:3f:91:06:97:3e:b1:
8c:8d:50:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:49 2026 by rpki-client