Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: syvTH7+Int3u6FpNbUsn0Fjr/pXCxmt9xro3nvtQqxc=
Subject key identifier: DA:42:D9:85:75:D6:C6:8D:44:88:4A:F1:93:32:17:2D:84:B4:DA:19
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 019F916D8191C7DCC3FCCBB83C8DA46DDF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: CuTmZXx//y/yC36JjCDq+0TPMFIAhEL5RiR0noBOAsU=)
2: UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa (hash: 05+0vfIPDLVFjVB3L2D7iJWPXu6x5fdq82fKXp61A0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:81:91:c7:dc:c3:fc:cb:b8:3c:8d:a4:6d:df:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=da42d98575d6c68d44884af19332172d84b4da19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:38:e8:e3:26:d4:57:ce:f8:30:00:ed:67:
2b:a9:40:8c:f9:16:d9:e8:b6:33:6e:02:f2:be:55:
26:f7:bb:e1:7f:34:6f:ce:ea:b8:cb:67:6a:70:8b:
a6:2b:18:69:9e:fd:03:0a:84:d3:bb:84:2e:87:95:
0e:0e:20:ce:51:b5:6f:dc:60:88:83:8e:db:d8:df:
a0:c0:11:8c:2d:bf:b6:46:96:87:78:21:1e:f5:75:
5c:75:63:ad:2a:29:99:f2:d8:2e:94:98:f9:65:e9:
68:e9:ec:99:26:d3:46:1f:a8:e1:b0:d1:a7:25:6a:
03:15:4d:46:68:8d:82:18:96:c8:c9:29:d8:3c:1a:
aa:cf:c4:bc:38:eb:57:cf:95:b0:db:bf:1f:f9:3a:
68:c5:86:be:7b:db:72:2b:0b:ad:2d:1c:5e:cc:19:
68:bb:53:8a:42:2d:ef:e3:58:34:17:87:76:4a:cd:
9f:59:17:18:7a:2b:99:dc:5f:f8:3a:0f:8d:1d:1a:
9a:53:7d:52:8a:47:c8:a7:ca:e0:08:36:47:e3:8d:
7b:8e:25:d2:b9:06:e5:48:f6:b6:99:ab:a3:a4:ca:
d2:8c:42:58:8f:93:5d:f8:ff:17:59:0f:fa:65:9c:
02:c9:4e:24:66:a5:94:e3:20:6b:b2:dc:1e:5f:11:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:D9:85:75:D6:C6:8D:44:88:4A:F1:93:32:17:2D:84:B4:DA:19
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fd:f5:a5:9a:f2:6e:7a:12:d8:68:9d:2d:76:80:90:65:ce:
a5:15:f3:45:6f:45:b0:92:69:23:18:46:3a:da:09:65:e7:bc:
7a:dd:73:14:55:b4:61:b3:18:07:b0:51:72:8e:ab:b6:ff:da:
41:5f:47:5a:d8:d8:1f:c7:f7:2a:f8:f1:b3:8e:78:0a:7c:3d:
24:f8:59:2b:b4:17:d1:00:f9:70:a5:9a:29:39:6a:61:4f:cb:
03:8b:dd:9e:fa:a4:cb:25:1c:89:43:92:b2:b7:ab:0f:c6:06:
6b:67:b8:7d:e4:1c:03:f1:5a:fc:24:a3:3f:0b:de:5f:2d:c9:
88:97:ce:ce:67:ab:60:fc:89:f8:3b:e4:6e:be:73:d3:1b:85:
d5:c1:7b:af:42:34:c3:9d:a4:8b:00:dd:24:97:5d:19:dd:5e:
3a:6c:5b:f3:06:70:9e:f3:7b:35:3d:05:17:31:e3:42:23:a4:
c6:d5:42:a0:07:3e:5f:1e:9f:83:64:86:68:8b:d6:18:bb:4d:
fa:77:c3:91:b4:1f:02:13:58:7a:6f:81:45:74:e4:b4:71:24:
f9:04:8d:cb:50:1a:32:b2:78:50:75:e3:a3:40:cd:2f:d6:4f:
55:61:56:ea:74:cb:2c:65:5b:06:83:2a:47:71:55:ee:91:7e:
fe:e8:d3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:50:07 2026 by rpki-client