Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
File: n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft (raw, json)
Hash identifier: RTyvOsm60nFen3kcwOXC5GKmis7taOaE34t+YNOxxew=
Subject key identifier: 4D:E0:4D:05:09:7B:7C:D1:3F:3D:94:35:69:C5:8A:74:8C:9F:BE:F4
Authority key identifier: 9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A
Certificate issuer: /CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a
Certificate serial: 019F916C8314E76A65E4FAC6DBF4AB2C1E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
Manifest number: 01DE
Signing time: Fri 24 Jul 2026 00:00:35 +0000
Manifest this update: Fri 24 Jul 2026 00:00:35 +0000
Manifest next update: Sat 25 Jul 2026 00:00:35 +0000
Files and hashes: 1: n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl (hash: 0jAzhlG+6vst2xENaXlk7uyQ8s4fLia/5U4qIJvjgmQ=)
2: xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa (hash: dzRHmEV436bNSbP8ukf6XV97axT5lZpoDEiJJC7vBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:83:14:e7:6a:65:e4:fa:c6:db:f4:ab:2c:1e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a
Validity
Not Before: Jul 24 00:00:35 2026 GMT
Not After : Jul 25 00:00:35 2026 GMT
Subject: CN=4de04d05097b7cd13f3d943569c58a748c9fbef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:ff:12:ed:17:fb:2b:4e:5c:23:fb:3d:ee:
11:36:91:ed:a5:07:f7:c1:58:ce:ac:c0:13:24:0f:
a2:9c:41:3c:0b:a3:0c:08:73:3c:d6:33:04:2d:f2:
91:b6:ed:45:23:67:f9:83:4a:cb:60:67:d7:b5:26:
04:bc:b9:1d:46:1b:03:a8:9d:80:33:5d:ea:24:8b:
bd:a0:07:8c:d8:33:e3:b9:b8:df:73:da:71:62:6d:
b8:f1:38:f4:c7:b2:3c:c4:01:e1:0e:aa:dc:43:95:
36:7d:19:88:bb:18:ac:24:31:df:71:34:76:35:a1:
52:bb:bc:59:4c:cf:9d:b5:23:58:32:c1:0d:90:26:
0e:94:6b:dc:06:fd:50:2d:63:99:e0:88:8c:63:05:
93:04:79:11:ee:94:93:bd:f0:da:e7:11:79:46:84:
74:01:95:aa:f3:48:af:ad:84:a1:30:59:93:0f:75:
de:19:0f:2c:54:7d:74:59:2a:84:3e:85:72:e4:2a:
08:af:af:a7:10:0b:42:dd:34:88:d6:17:96:7f:61:
bd:a5:be:fb:ce:72:9c:e7:d8:78:43:d7:d9:bb:91:
2a:d2:d3:c0:26:5b:c6:68:9f:f1:43:01:85:a6:df:
f9:eb:29:b9:a9:eb:61:e6:14:1e:eb:52:8e:85:54:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E0:4D:05:09:7B:7C:D1:3F:3D:94:35:69:C5:8A:74:8C:9F:BE:F4
X509v3 Authority Key Identifier:
keyid:9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:85:cb:39:a4:43:d1:95:54:1a:3b:b2:64:c4:f3:93:72:
a1:c1:87:3f:11:dd:04:cc:fe:5d:de:44:93:ca:66:58:cf:dd:
39:07:97:40:c8:88:39:5e:20:46:97:46:19:12:8b:95:3a:18:
4e:80:4b:db:8c:42:c5:b2:ef:2c:e2:6f:3f:1d:46:3f:f2:2e:
a1:10:0d:1f:e5:25:e3:ac:a4:49:c3:4e:dd:45:33:22:22:88:
d4:cc:ee:a5:70:27:f5:9e:55:80:3b:e7:81:c6:b6:6b:75:93:
b7:0a:28:5d:df:53:3b:03:c3:6b:89:4a:3f:da:e5:d4:27:86:
7a:4a:8f:93:f5:fc:b3:71:26:5e:05:a6:ed:51:22:53:7d:3f:
51:33:55:ea:17:2f:69:1e:7a:8f:b5:ef:27:6b:50:2c:1c:52:
83:e9:63:33:62:d1:a8:e8:54:dd:d9:4a:59:06:8c:24:f4:19:
1e:97:22:39:3e:ca:ee:3d:9d:c2:99:76:3f:c4:36:45:6c:98:
38:83:c6:bb:79:e4:e6:6b:52:2c:29:c7:8a:7e:5e:47:8b:83:
aa:32:5a:fe:0a:2e:42:38:15:16:72:8c:9d:e2:17:8d:19:d5:
47:1a:56:30:75:f7:5d:ea:73:23:56:57:43:d8:b3:a0:27:6a:
f6:91:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:16 2026 by rpki-client