Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: Wt0P1EM3DjZUPhDQRRmZWaqeqQv7eIosJykheCTBDh8=
Subject key identifier: 94:CD:56:C1:C7:E7:F5:ED:6E:94:1A:BA:00:6C:82:6E:7C:70:05:56
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019F92B687FBCC925A9B9BE0F9CEE95E9CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 1054
Signing time: Fri 24 Jul 2026 06:01:03 +0000
Manifest this update: Fri 24 Jul 2026 06:01:03 +0000
Manifest next update: Sat 25 Jul 2026 06:01:03 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: MUQuwjlornmzwAu5eSAhztzHiJUZAgWsZ6xIXeRYPRI=)
2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:87:fb:cc:92:5a:9b:9b:e0:f9:ce:e9:5e:9c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jul 24 06:01:03 2026 GMT
Not After : Jul 25 06:01:03 2026 GMT
Subject: CN=94cd56c1c7e7f5ed6e941aba006c826e7c700556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:54:08:9a:c4:58:12:3e:00:d1:3d:9d:aa:
55:f0:90:40:3d:ef:ac:30:8e:31:2e:66:e9:5e:1c:
91:b7:8d:b1:d8:53:5a:3a:54:e1:9b:b9:94:f7:c6:
d9:09:0b:2c:39:bb:83:85:4a:e9:8a:a7:4f:5e:dc:
b3:3e:94:bb:62:f0:44:8f:08:73:dd:ea:08:33:81:
a0:e6:3b:74:2f:6c:cf:dd:23:a1:54:a2:14:ab:2e:
a2:13:37:38:a9:90:f4:6e:75:1f:d1:7e:21:d5:45:
b9:1a:02:4c:10:ef:42:70:d7:2c:71:d5:f9:38:6c:
62:b2:28:06:6a:d2:ab:83:6d:af:ad:42:c4:36:ca:
24:5e:81:4a:a5:5f:ab:dc:70:ee:18:6f:df:5a:26:
35:97:32:73:d6:0e:f5:cb:df:d8:0b:39:d4:1b:97:
4a:97:1b:54:ad:97:ba:15:3d:b4:17:30:6b:6c:87:
78:c1:ce:0b:88:2c:ce:90:79:78:36:44:35:64:e3:
a6:ff:70:a5:3f:e6:4c:fd:fa:35:18:02:28:76:19:
91:81:15:91:98:7e:5a:cf:e6:e3:06:ab:fd:74:46:
31:bf:2e:69:46:6d:da:84:fc:4e:84:5e:7d:0a:d4:
18:74:38:e5:4e:f8:4a:4f:94:fc:15:3a:53:fa:7b:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:56:C1:C7:E7:F5:ED:6E:94:1A:BA:00:6C:82:6E:7C:70:05:56
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:79:8d:ca:62:09:f6:c3:11:81:9f:56:f9:cb:54:b0:01:be:
93:5e:84:6a:f6:82:22:68:3c:77:c8:b5:3d:3a:38:d3:8c:fa:
59:89:d8:f0:7d:db:8b:5e:c2:10:ec:fa:7b:fb:53:89:3c:e8:
41:66:0b:f2:f0:c9:73:0d:88:63:6d:89:e5:1a:a7:db:b8:2a:
37:d9:dc:33:d9:e7:ca:e6:8d:8c:d9:90:97:b4:b2:6a:77:24:
80:c9:6e:ae:0e:8f:a9:89:a5:a8:b9:8b:92:7a:e2:7d:1b:cc:
2f:8c:fb:c2:ab:7b:e5:87:1d:23:f1:78:e5:e2:6f:ae:a0:d6:
f4:17:4b:51:4d:a2:73:84:7b:e2:4f:8e:a0:10:b2:94:ba:e9:
d5:0b:8e:e2:9d:b7:2f:0a:f9:95:17:16:63:7c:02:33:1d:64:
57:fe:ab:f8:2a:eb:d4:78:ec:80:4c:af:a6:08:61:c3:9c:11:
76:46:ca:54:a6:bc:de:da:1a:f9:a8:e8:66:43:c5:a9:cd:d5:
6f:a9:b4:af:03:65:8a:35:18:b6:16:b6:e5:5b:fd:9c:01:c3:
d8:27:5b:64:24:f5:b2:5c:5a:12:a5:c7:65:59:1e:8f:9d:81:
f0:e5:37:81:1c:64:c3:a2:c8:3b:e0:4f:4a:e7:e3:b4:24:f8:
9c:49:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:52:22 2026 by rpki-client