Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: 9MNJ9hwb7W81wDGnPX8drpfjqQry03Gz2BV46gl7pcA=
Subject key identifier: 12:4B:A1:76:57:DD:F8:0C:16:EF:97:AC:9B:8C:E7:22:C0:76:EC:C9
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019F9248ED7A59EDCEB6DF5F9BD57CD6B9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 0A1B
Signing time: Fri 24 Jul 2026 04:01:20 +0000
Manifest this update: Fri 24 Jul 2026 04:01:20 +0000
Manifest next update: Sat 25 Jul 2026 04:01:20 +0000
Files and hashes: 1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: 5JAeumK/MdIsFutEz48B6h4ie/JfBKvVz8JNYPEsSec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ed:7a:59:ed:ce:b6:df:5f:9b:d5:7c:d6:b9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Jul 24 04:01:20 2026 GMT
Not After : Jul 25 04:01:20 2026 GMT
Subject: CN=124ba17657ddf80c16ef97ac9b8ce722c076ecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:c4:30:7b:cf:d7:8d:6e:0b:98:5d:86:e9:
54:65:42:27:25:ae:b8:c1:f5:34:70:7b:64:e2:3a:
64:d7:d9:26:59:ef:27:21:8e:93:c1:5f:fc:f3:be:
22:4f:1a:4a:00:0e:60:fc:e1:6c:f7:ad:39:77:e4:
2b:b0:9c:b6:5c:5a:a7:79:b0:e8:b2:a4:e9:c2:84:
a0:ae:5f:83:88:8e:f7:8f:29:98:45:2d:89:a1:7f:
42:11:0e:32:02:dc:e6:42:00:02:47:e1:07:ab:19:
1d:56:06:15:96:02:7a:3f:22:d2:5a:7a:ae:68:2e:
15:51:d5:42:38:a9:ca:75:f5:2b:b2:47:ae:94:e0:
e8:ae:7b:0d:88:c3:7f:5b:13:57:6b:7c:7d:d6:2f:
17:99:ca:47:3a:59:84:be:e4:cf:01:7a:4d:b1:a3:
c4:82:b9:bf:97:b5:8f:cd:3d:f6:e1:15:20:ae:4e:
c4:07:96:4f:bf:a3:f5:3b:c1:60:93:76:a4:05:b6:
85:0f:f6:78:f4:73:79:32:64:16:11:e1:8f:01:2d:
78:ad:38:54:4f:fd:b9:19:d8:00:81:db:cd:d4:b8:
53:1e:e7:e7:a5:43:18:20:e8:83:a6:b8:5c:12:8e:
26:8c:e5:75:e7:20:ec:d6:28:67:e1:8e:58:63:93:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:A1:76:57:DD:F8:0C:16:EF:97:AC:9B:8C:E7:22:C0:76:EC:C9
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5b:ea:a2:1e:6f:21:f9:be:da:99:13:00:9a:2a:22:3d:1c:
a8:5f:79:f2:74:29:c1:da:84:ab:16:f8:5a:c1:c4:35:bb:5b:
77:b9:9b:1a:40:de:2e:64:5d:ab:b5:c0:33:0c:e5:a8:9f:eb:
74:fb:09:67:8d:3d:be:49:d9:66:32:ca:8e:b6:bd:c3:33:04:
c9:7b:54:76:dd:ed:ac:0a:e2:9a:d3:3c:14:a8:35:fb:ad:1c:
db:82:60:69:60:38:87:2f:94:13:23:88:6b:9a:d5:34:78:a5:
49:17:47:5f:a4:5d:3d:f0:d2:36:cb:04:0b:cd:b3:fd:7a:59:
91:19:b3:58:a8:e1:de:38:2e:a9:5c:71:59:65:8f:21:7b:3f:
ec:ab:40:c0:c7:a8:09:bf:0d:f9:11:7b:63:9e:2e:f5:ee:3d:
49:51:3c:27:8e:0f:86:59:bf:8f:97:c3:44:9b:ad:09:03:e9:
2d:51:6b:09:ce:51:e8:f6:26:80:45:45:66:6c:27:ca:49:ef:
11:65:22:d4:db:8c:a1:b7:b6:8b:2b:d7:ed:b5:70:c9:85:e1:
e1:dc:d6:28:cb:11:91:e2:0d:1f:c8:6d:49:ba:e7:30:14:40:
cd:63:a9:24:9c:8c:7e:f6:06:9c:7e:bb:52:92:5f:4f:bf:7c:
3f:d1:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:17 2026 by rpki-client