Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: Nn1odqmVD0PQfEzTxFLAUhzEnXE4nuJ/ICfgzW8o66Y=
Subject key identifier: 57:91:74:43:6A:BE:EA:B7:20:B7:8A:3E:D9:0B:3C:8B:30:4E:C7:15
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019F92B6143E3F2527B3ADA2F6C3C22596A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1658
Signing time: Fri 24 Jul 2026 06:00:33 +0000
Manifest this update: Fri 24 Jul 2026 06:00:33 +0000
Manifest next update: Sat 25 Jul 2026 06:00:33 +0000
Files and hashes: 1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: tM1yY4c6SF1s/lUvvN7ycq7q61agZt/d6IYeRflXlvA=)
2: kVVy-YWr30S0GSdgLLy6UhLp1JQ.roa (hash: MLFi2OYZr+v/54OGb70/05XIuu/GA7oMfXFZI0ZBmD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:14:3e:3f:25:27:b3:ad:a2:f6:c3:c2:25:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Jul 24 06:00:33 2026 GMT
Not After : Jul 25 06:00:33 2026 GMT
Subject: CN=579174436abeeab720b78a3ed90b3c8b304ec715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:c2:0a:e2:7d:c6:e0:3c:a1:5b:31:0c:ac:
b1:68:1a:ad:fe:34:a3:c0:79:84:46:6c:78:05:38:
b6:36:98:e8:8d:0f:30:81:be:e4:f4:e9:f8:f0:d6:
f3:ee:09:52:c7:c4:be:95:f9:6e:3b:2d:26:d8:66:
e8:5a:6a:e4:e9:1b:4b:46:38:16:16:d1:c1:07:d8:
f0:4d:14:2c:b4:96:4d:30:5b:44:20:e2:6f:d9:5b:
66:90:ce:58:6d:74:0f:6c:af:75:8d:14:40:fa:ca:
e7:80:e0:e4:e6:2a:a3:9a:3a:6c:93:89:9a:35:a0:
df:23:03:ae:69:57:7e:98:53:f5:c3:5c:d1:fb:0e:
76:71:98:db:fb:5d:a2:e0:68:7a:72:82:1d:9e:4d:
78:48:0b:94:36:04:31:b7:98:9e:0f:35:70:cd:ed:
3e:94:c8:89:e7:37:0c:48:18:66:a7:55:c3:25:b9:
64:fa:f2:70:40:14:78:5b:c1:61:7d:00:8e:58:b5:
65:ee:ed:14:dd:a6:46:27:b4:13:23:b1:ef:a7:75:
f3:9d:8a:d5:e7:15:38:7b:d9:fb:fe:8d:4b:9b:38:
a7:5d:cc:c7:fc:ab:c8:b3:f3:63:7d:82:f1:18:b6:
89:52:52:8c:c7:7f:1b:c8:06:07:31:07:d3:3b:a6:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:74:43:6A:BE:EA:B7:20:B7:8A:3E:D9:0B:3C:8B:30:4E:C7:15
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fd:11:b6:d5:83:4c:1a:f4:4a:4e:c0:52:86:a4:4d:cf:ec:
d7:64:c0:26:76:15:27:59:d1:0f:63:61:85:26:a0:69:c6:8f:
f0:39:7f:f9:79:79:df:3a:c9:06:88:83:26:b1:48:a9:94:d3:
4a:f0:d1:a9:8d:d8:b4:49:c7:0b:b1:a0:3c:a1:de:80:70:ea:
be:55:4c:cd:3e:c3:b1:65:b6:e6:de:26:5c:74:64:58:b9:cd:
9a:8a:1f:c6:1f:81:7b:c1:ca:61:f4:3d:45:74:49:66:b6:2e:
85:2f:e4:40:0a:8e:95:4e:e6:8a:80:00:62:cf:fe:56:af:4d:
49:85:6a:09:f3:1b:8d:26:fb:80:c0:1c:92:97:21:0c:ca:0b:
fa:0d:a7:64:00:ee:08:7a:92:03:35:f2:ec:21:a6:63:84:61:
4f:c4:b2:0e:64:31:7b:fc:62:e9:77:88:c5:28:ec:93:a7:2b:
c0:c9:38:0c:01:04:27:a7:76:32:31:9a:f4:54:92:8e:04:d9:
b0:4e:e4:e3:0c:92:ac:72:b4:6a:5e:43:0c:80:39:a7:d1:4d:
45:e6:69:93:9d:f4:7b:62:72:36:b9:a4:28:5c:b2:66:38:72:
85:54:68:d4:b3:6a:ba:85:fa:f8:33:20:cb:7a:74:3a:26:c4:
a9:71:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:37 2026 by rpki-client