Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: q2YgBhYEf7DeSXgRvleuet+YZPziqiBncDCvPMg1xvU=
Subject key identifier: 4B:58:F0:72:06:64:40:9F:FB:2C:73:BE:92:71:C7:62:DC:76:42:96
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019F90FF3C6D292F15EC8B5EBFEC09E74DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 22:01:13 +0000
Manifest this update: Thu 23 Jul 2026 22:01:13 +0000
Manifest next update: Fri 24 Jul 2026 22:01:13 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: y4CLfyRpQCz5zc1WMdz7s0DGOj0foq/qvhWMy5GNXlI=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:3c:6d:29:2f:15:ec:8b:5e:bf:ec:09:e7:4d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jul 23 22:01:13 2026 GMT
Not After : Jul 24 22:01:13 2026 GMT
Subject: CN=4b58f0720664409ffb2c73be9271c762dc764296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:8b:55:23:8e:7d:35:2c:31:6e:d1:da:1c:
64:4e:e6:b8:58:6b:ac:4c:06:5b:77:e9:49:a9:da:
b2:9c:01:31:ac:81:6c:66:60:a4:13:6d:ea:53:41:
c0:31:ad:08:f7:e7:9f:16:23:ff:fa:de:cf:1a:7e:
40:eb:a8:03:12:99:d7:31:46:33:be:bd:73:1c:02:
d6:7a:29:91:71:ee:b2:1d:e1:6d:a1:31:17:7f:2b:
fc:1f:e0:f2:77:8b:0b:98:9e:81:36:c6:f0:f1:fa:
fb:8b:26:ce:37:08:0b:0a:bf:45:62:e8:22:a9:c7:
99:c1:62:90:a0:58:5a:2f:d9:e7:ad:63:12:9b:44:
46:4a:0a:5c:18:f7:2a:fa:f9:22:c8:7a:b2:e7:82:
93:74:9e:8f:50:9c:3f:e0:98:fb:96:85:ee:8d:0f:
4e:1a:42:7a:22:d3:f7:72:2c:87:8c:f1:aa:58:c1:
29:2f:46:2a:21:92:37:dc:f2:d0:ce:27:d7:b9:9f:
a1:19:28:fa:9b:14:4d:f5:ff:86:c2:60:b8:bb:77:
9b:0c:f4:c4:31:1a:e1:e4:23:08:54:7b:f8:ba:cc:
d0:f0:a6:f2:42:63:f9:0b:e4:7f:80:68:92:a5:90:
8a:85:0d:e7:7d:ab:a2:3e:78:68:e6:71:1f:37:f0:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:F0:72:06:64:40:9F:FB:2C:73:BE:92:71:C7:62:DC:76:42:96
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f5:a6:f0:36:2d:58:de:5f:0b:f5:e5:ee:65:44:70:da:12:
18:e1:b1:30:ef:f6:40:bb:25:81:f9:26:d1:bb:cd:5b:bc:eb:
d4:54:8f:a4:bb:cc:08:f5:4e:4f:68:94:78:7d:f6:88:e2:cf:
9a:ea:98:cc:15:2c:f8:d6:94:4b:b6:71:00:a5:b2:db:2e:f0:
2a:50:12:31:dd:4f:66:fc:b7:7f:e6:8c:91:85:3f:25:1c:75:
1c:8a:56:c4:b1:52:4b:8c:df:75:22:9f:a7:78:9a:c4:92:10:
53:23:b2:f6:d8:9e:48:58:e0:68:d6:30:a3:96:4f:3c:ed:a1:
be:8b:19:fe:49:87:83:62:44:b8:1e:cb:54:b3:ef:e5:d7:12:
0e:4f:af:0b:13:c2:39:2c:ab:8a:16:ec:8a:7c:ed:7c:11:da:
59:8e:12:c5:e7:ee:4d:fc:64:ce:99:8e:cb:80:cd:45:13:9a:
a8:68:f4:2a:d4:b4:ee:02:95:98:d3:b0:51:14:1c:e6:20:fa:
b2:26:2c:45:f1:81:c3:c8:72:72:cd:17:07:d5:d1:7e:62:f5:
12:e2:42:f6:31:e3:f3:03:85:46:b7:7c:ff:2e:e2:bd:7f:0b:
7d:02:54:d5:14:74:3e:59:3c:dd:ea:8c:eb:27:07:9c:84:ae:
20:f3:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:41 2026 by rpki-client