Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: oJkMAVXc59ZDZ00kJxjVVg1odRsAA2Denpu4uVx/D2A=
Subject key identifier: 4D:5F:AD:D3:53:D8:BC:8E:41:19:14:B8:17:12:6F:BA:0E:8B:58:BF
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019F94A4C2CCAE418D134C2A2EBA714516C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 15:00:53 +0000
Manifest this update: Fri 24 Jul 2026 15:00:53 +0000
Manifest next update: Sat 25 Jul 2026 15:00:53 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: b6phgx5HEmbVAnMfV0sgM0liOQq39wYnluI7nIiOYFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:c2:cc:ae:41:8d:13:4c:2a:2e:ba:71:45:16:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jul 24 15:00:53 2026 GMT
Not After : Jul 25 15:00:53 2026 GMT
Subject: CN=4d5fadd353d8bc8e411914b817126fba0e8b58bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:13:6d:c4:d7:8f:b9:77:d4:77:8e:c7:d5:
05:07:43:cb:0e:20:83:a5:d6:26:d1:0d:63:0e:d2:
47:97:9f:2f:9b:a1:35:49:1a:fd:51:de:0c:a4:7e:
55:c5:62:6a:ae:ad:3f:90:9c:e9:54:79:58:6a:eb:
f0:b4:b0:7f:1c:ed:9c:da:21:ec:8e:04:12:6f:b1:
72:44:e0:d7:cc:7b:e2:33:ec:89:de:57:0c:1c:3e:
39:8e:d9:7b:e5:42:05:2f:43:7a:1b:e2:01:92:44:
5c:bb:31:81:80:b2:93:fe:e6:a5:88:44:8f:af:ae:
19:39:ab:c7:6c:04:31:da:76:78:1c:a4:f4:0d:50:
c9:12:c4:f4:28:0f:32:3f:29:74:09:3d:dc:4f:d7:
55:e5:21:17:5b:f5:65:a2:75:0c:4c:9a:3b:aa:bd:
1e:6d:07:c2:8d:8d:0b:d1:c4:28:75:23:5f:4d:e1:
8d:e1:a2:d4:35:e8:cf:6f:06:e7:58:b6:4d:ed:55:
45:0b:c5:3e:68:1a:fd:56:f3:8b:13:10:73:ed:ac:
1d:40:d3:55:69:78:b4:5b:60:f5:38:b6:ad:0a:8d:
cc:71:a9:7a:6e:52:e4:e8:2f:00:60:80:cf:23:c8:
d4:3d:08:90:92:1c:33:cb:4c:8e:15:97:da:54:54:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:AD:D3:53:D8:BC:8E:41:19:14:B8:17:12:6F:BA:0E:8B:58:BF
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3f:a6:84:3f:b8:e9:c0:82:b9:07:60:c8:81:c6:67:e2:29:
f3:30:58:d9:f8:fb:c0:54:81:2d:9a:3c:3b:39:0c:70:e9:a1:
2a:61:aa:d3:96:04:82:ed:56:97:d0:14:f2:c5:4e:e4:98:48:
c5:66:89:22:9f:eb:46:24:3b:da:b8:1b:9d:75:72:d0:b0:be:
ac:47:0d:f8:e4:7b:2a:1f:cb:0f:a4:6e:53:59:80:8e:50:79:
80:c8:c5:3f:2e:94:ce:ba:ce:23:10:2f:a6:b2:91:20:b3:e2:
57:9b:88:23:e8:8f:0b:c3:7f:3e:b3:c5:92:ac:95:25:26:b8:
1f:54:95:fd:82:d7:6e:b3:cc:02:9d:06:2b:2b:24:9d:1e:24:
d3:88:07:0e:ae:27:58:3e:95:b5:3c:2d:91:67:49:c0:0b:fc:
58:79:93:71:49:72:81:7c:28:0a:4e:20:de:16:bb:6a:cd:7f:
ab:f5:d1:4b:40:3a:47:99:50:27:77:0f:70:b3:e6:58:f1:2d:
76:ae:81:3f:0d:46:7e:04:36:65:6e:c5:34:eb:46:03:05:71:
f5:99:b3:22:20:22:41:ae:4f:62:17:65:c7:c3:f1:12:fa:72:
f6:a3:ce:fc:32:fb:4a:4c:47:15:0d:80:e8:8a:22:ed:30:c6:
5d:ba:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:33 2026 by rpki-client