Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: vjKCoNocHG/6TPubdaMy0myBOmMZ8/iX2i7+zGgVVWY=
Subject key identifier: B7:52:D3:9E:CE:0B:AC:CB:D8:90:D3:86:D0:E2:11:D7:0B:D9:00:B4
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 019F902371C42A73C0BE8301208780871162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 1437
Signing time: Thu 23 Jul 2026 18:01:09 +0000
Manifest this update: Thu 23 Jul 2026 18:01:09 +0000
Manifest next update: Fri 24 Jul 2026 18:01:09 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: CBkdl3qtZXQytmUoWWrZqH835WXfyDyIgO/1bp43AWQ=)
2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:71:c4:2a:73:c0:be:83:01:20:87:80:87:11:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Jul 23 18:01:09 2026 GMT
Not After : Jul 24 18:01:09 2026 GMT
Subject: CN=b752d39ece0baccbd890d386d0e211d70bd900b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:e6:6b:d7:a7:71:54:ce:4f:98:e1:78:88:
7f:bf:76:42:b5:3c:79:71:67:ca:7c:25:da:e9:b1:
a5:10:da:e0:25:a2:a9:ee:0a:ca:a4:e3:c7:94:65:
27:fe:04:76:63:d1:fd:0b:c4:87:69:53:82:87:d7:
ea:20:28:78:cb:c1:79:8f:9f:d5:79:cb:5d:93:a6:
4d:cb:38:98:1a:7e:21:39:7d:c9:d5:45:7f:03:3d:
1c:2d:5e:32:d1:7a:63:b6:d7:08:c6:e9:90:18:3b:
9d:e3:ef:3d:48:08:0f:a4:de:d7:77:f1:ca:b5:e5:
25:10:11:25:59:df:d3:04:77:5f:ba:ae:3e:7c:25:
c5:46:56:fe:ba:59:2e:cb:66:05:83:17:b0:e4:94:
3b:21:68:58:bc:d8:ab:f8:4f:7e:ed:42:80:12:e5:
89:e2:27:a5:92:49:f6:44:e2:b1:78:01:7a:92:aa:
a7:76:ba:96:10:42:e4:21:05:d6:5a:ff:68:71:c8:
47:46:9e:e2:6f:68:5c:ce:41:0e:3d:c8:4b:40:d6:
f1:1c:f4:3d:f0:e4:af:3d:40:02:ed:99:67:64:ce:
ee:1a:62:b0:88:e6:9c:48:f6:f1:11:26:e4:dc:4a:
5a:85:c9:3f:9e:bd:3f:72:84:e5:25:24:85:40:e3:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:D3:9E:CE:0B:AC:CB:D8:90:D3:86:D0:E2:11:D7:0B:D9:00:B4
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f2:74:2b:97:a2:39:8a:7e:75:4e:da:4e:04:33:6b:1c:1d:
4e:4f:97:6e:76:34:b4:3a:38:32:8c:3d:46:99:cd:21:6a:cf:
50:22:98:86:1d:87:b5:2c:2d:3f:8a:0b:a5:22:68:e4:3d:2f:
b9:34:53:bd:a7:ae:1f:35:e0:7c:13:47:be:ba:75:d7:73:98:
7b:9f:44:15:85:52:bb:2e:5d:18:c2:ea:80:31:ce:fc:dc:fa:
0f:0b:71:fc:40:44:3f:c8:4a:a9:d6:e7:6d:79:92:bf:08:7d:
7e:75:ca:1e:fa:ed:ce:88:ff:39:c7:59:da:f5:a6:63:6e:f5:
16:06:56:9d:47:80:e1:c8:9e:d8:64:bd:5f:29:49:4c:eb:e3:
e8:5f:be:34:48:ce:e5:9a:1d:3b:45:df:c2:84:d3:af:72:25:
77:c6:72:88:b5:0a:88:f1:04:e0:58:e1:6a:65:71:fc:75:20:
2e:23:af:1d:d4:da:33:6b:0e:3f:77:10:18:82:58:6e:6d:47:
39:e1:43:26:6f:1d:73:c6:e1:e9:92:c2:b7:53:d2:cf:54:33:
9d:a6:55:1b:25:41:a4:0f:28:49:05:5d:f8:93:0e:15:23:21:
bb:a9:1f:0f:54:2b:fb:15:52:fd:a7:1a:14:36:07:01:1e:9a:
23:cf:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:02 2026 by rpki-client