Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: Vn7faf6n0jHHh7eYjdhQh/SrY5W0TyfAPAu+12OmCQg=
Subject key identifier: C4:E2:40:85:AB:39:AC:FF:8E:3F:74:50:CE:FB:3C:07:E6:E1:4E:CA
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019F909192EDCFC45A5F229A0622D4DF1598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0BEC
Signing time: Thu 23 Jul 2026 20:01:27 +0000
Manifest this update: Thu 23 Jul 2026 20:01:27 +0000
Manifest next update: Fri 24 Jul 2026 20:01:27 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: UDBBE4XOGxVk4ERvTiAsiJ4rdSz1xRPE/Ai+2o7ryDY=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:92:ed:cf:c4:5a:5f:22:9a:06:22:d4:df:15:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Jul 23 20:01:27 2026 GMT
Not After : Jul 24 20:01:27 2026 GMT
Subject: CN=c4e24085ab39acff8e3f7450cefb3c07e6e14eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:35:6b:28:18:2b:13:21:a3:5a:2e:c9:ac:
35:8f:0b:ae:21:38:e2:39:91:f0:b5:f2:55:26:1a:
44:0a:c2:6d:bb:d0:4c:30:28:3c:6e:87:05:78:07:
cb:2c:41:c1:61:b6:34:9d:cf:62:77:05:bf:5a:07:
df:c7:14:18:ea:bf:b5:f7:d3:6b:f3:da:c7:79:20:
04:f3:fb:c9:06:a3:49:72:83:ce:da:23:95:f8:d4:
73:de:f7:69:9d:10:f8:9f:d3:2d:64:7c:16:e2:1c:
31:19:00:3f:4c:c5:fc:a6:22:e3:3e:9c:cd:6f:b1:
c3:78:f2:12:44:70:79:93:57:5e:b4:96:c4:57:1f:
ca:34:e1:d0:76:24:a6:b7:3b:22:41:4a:2e:96:ce:
26:e2:8f:67:5b:fc:8e:34:73:a9:5d:bd:f1:36:43:
52:21:a1:45:e6:7b:57:76:14:ac:65:a6:ed:51:90:
07:3f:16:a7:97:4b:c6:88:24:9a:65:61:52:76:c2:
83:b3:82:e3:fe:ab:9a:2c:68:05:42:44:2b:36:1f:
f2:c7:34:02:90:71:be:d2:d5:ec:07:52:ee:e8:68:
6a:08:89:74:3b:76:7e:db:ea:07:40:03:03:5e:1a:
7b:fb:0b:87:ac:2b:3b:66:80:ca:59:e7:ba:eb:a7:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:40:85:AB:39:AC:FF:8E:3F:74:50:CE:FB:3C:07:E6:E1:4E:CA
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ba:5d:4e:16:86:c9:5d:02:06:d0:4e:cb:74:5e:40:bf:9f:
ac:4c:69:6f:f9:8b:0f:8a:71:51:47:75:96:01:53:46:43:eb:
d1:b5:ab:68:7f:9a:26:94:a0:38:e5:da:96:14:48:0d:2e:a7:
fc:2b:4d:bf:08:89:50:35:8c:2e:3b:87:ff:e1:36:8d:79:53:
2a:4b:c0:90:c8:5f:97:23:a5:b6:ee:7a:9e:cd:53:ac:2b:79:
3b:c2:c5:4a:b5:6e:1e:4b:21:1a:14:99:76:ba:ee:9f:58:39:
97:2e:89:ae:1a:05:13:fa:a2:d4:7f:18:47:ed:f2:51:e5:da:
29:1b:e0:7a:58:14:e3:8c:d8:04:21:b2:a0:df:05:8a:43:f0:
2f:1d:c7:43:a0:1c:d6:7c:1c:62:67:3b:73:92:a8:e7:2c:10:
b1:20:4e:eb:9e:1d:37:c9:9c:2d:7c:b3:62:9a:1c:fe:4e:bf:
ac:ca:f0:eb:27:4a:7e:1e:c1:65:44:4b:0c:56:48:d1:20:a4:
71:da:67:aa:06:ca:5c:19:15:e9:62:24:b9:8a:9b:cf:54:de:
f1:d5:f1:9b:fe:d8:a1:07:30:b3:15:dd:62:b3:fb:90:0b:30:
8e:4f:2d:ed:2f:fe:1a:b5:c3:d5:23:00:73:9d:d5:bf:9a:f1:
0e:a3:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:59 2026 by rpki-client