Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: XMso2pXLt/jA/45BaDnr9NqXqT7W3I+yyXXFG1kxrK0=
Subject key identifier: 52:62:59:43:8B:29:70:99:41:A9:68:42:BF:31:88:61:E5:B8:7B:79
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019F916D73B1A3E743C24C0C1DF425A54723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 00:01:37 +0000
Manifest this update: Fri 24 Jul 2026 00:01:37 +0000
Manifest next update: Sat 25 Jul 2026 00:01:37 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: XmcCVrfXIrOXIZIaM9T82j7QG7lhsb1dhNjxbWLMZ1c=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:73:b1:a3:e7:43:c2:4c:0c:1d:f4:25:a5:47:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jul 24 00:01:37 2026 GMT
Not After : Jul 25 00:01:37 2026 GMT
Subject: CN=526259438b29709941a96842bf318861e5b87b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:57:9f:fd:ed:18:b0:9d:b2:aa:34:a1:d3:
8d:01:d2:d3:2e:1c:68:df:4c:b9:fe:f2:b2:b2:5d:
67:b2:ed:14:ab:d1:f3:81:fb:0a:f5:5a:05:75:d1:
d7:a3:03:ad:db:25:34:89:2c:ba:0e:8d:f5:27:8b:
54:34:18:b9:53:09:0d:b0:18:48:85:f2:c0:a3:b4:
f0:cf:2e:af:5b:9b:7d:2a:65:69:ce:13:4c:ab:19:
7a:aa:5a:76:ce:8f:9c:a0:65:b4:c1:cc:fd:2c:8b:
d6:23:f5:0c:0d:68:3d:f9:d6:4a:fa:93:72:9c:28:
c5:49:a4:97:ce:22:aa:62:89:14:76:e6:59:6d:50:
1e:9a:48:93:15:01:29:8f:34:4c:6b:10:ea:dd:6e:
9f:2b:c4:1d:0e:13:ed:60:5e:7f:e8:07:29:d5:d8:
a7:11:77:fd:17:c7:4d:7e:78:97:60:c0:13:44:42:
05:15:eb:c4:3c:a9:32:73:f8:25:d4:09:ae:1d:c8:
59:db:5d:2a:7d:71:16:44:72:7d:d5:21:fa:0e:d3:
b5:5f:94:ce:8d:79:90:6a:7c:e2:13:3e:51:c9:4e:
23:21:4b:99:cb:a7:ad:64:e3:4f:c1:eb:57:45:32:
73:e3:73:91:15:8e:18:19:a3:5d:03:10:02:52:b7:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:62:59:43:8B:29:70:99:41:A9:68:42:BF:31:88:61:E5:B8:7B:79
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6b:0a:a5:c2:51:57:03:ea:b8:b9:52:b4:92:b1:c0:5a:e7:
3c:7e:63:a1:e2:8f:71:99:5c:03:4b:5e:5b:b1:ae:ef:b1:18:
e1:a7:9c:81:c9:95:4c:a3:c6:53:8f:45:d1:0e:6b:da:f2:8b:
38:6e:87:da:f6:e9:8f:a3:b1:2e:89:3a:c1:86:e8:bf:f0:7b:
bd:fd:e3:d9:24:90:5a:8c:9a:62:ef:bc:5d:d9:c5:c9:94:1d:
91:94:fb:d3:94:df:77:a7:b9:86:4f:be:0e:54:17:b9:a0:77:
f6:56:96:01:33:2c:2c:38:0d:47:99:8e:b0:13:18:5e:6c:08:
97:23:e6:19:aa:fa:9a:b1:64:e7:0b:b2:c5:e1:58:58:02:c6:
7b:fe:f0:41:01:35:57:bf:23:f2:3f:45:50:4a:64:b4:1c:5b:
a3:1f:1e:8e:1c:71:4f:f2:be:a6:ff:33:01:e8:3c:21:26:dc:
3e:22:87:d2:07:d2:16:36:74:05:63:c8:1a:34:e0:36:52:33:
f0:67:3f:62:59:c7:fb:65:69:7e:37:40:b7:25:7f:11:3e:dc:
73:96:05:2b:e5:a6:02:e9:55:5e:57:23:f0:15:3e:f3:1c:ee:
da:fd:42:89:92:28:dd:dc:99:f8:1a:a1:4c:7f:e6:3a:af:49:
0f:d1:b4:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbXOxo+dDwkwMHfQlpUcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj
MjdiZmEwHhcNMjYwNzI0MDAwMTM3WhcNMjYwNzI1MDAwMTM3WjAzMTEwLwYDVQQD
Eyg1MjYyNTk0MzhiMjk3MDk5NDFhOTY4NDJiZjMxODg2MWU1Yjg3Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwudXn/3tGLCdsqo0odONAdLTLhxo
30y5/vKysl1nsu0Uq9HzgfsK9VoFddHXowOt2yU0iSy6Do31J4tUNBi5UwkNsBhI
hfLAo7Twzy6vW5t9KmVpzhNMqxl6qlp2zo+coGW0wcz9LIvWI/UMDWg9+dZK+pNy
nCjFSaSXziKqYokUduZZbVAemkiTFQEpjzRMaxDq3W6fK8QdDhPtYF5/6Acp1din
EXf9F8dNfniXYMATREIFFevEPKkyc/gl1AmuHchZ210qfXEWRHJ91SH6DtO1X5TO
jXmQanziEz5RyU4jIUuZy6etZONPwetXRTJz43ORFY4YGaNdAxACUrd/oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJiWUOLKXCZQaloQr8xiGHluHt5MB8GA1UdIwQY
MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et
YzMxZmE3MWUyNjM1LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1
LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWsKpcJR
VwPquLlStJKxwFrnPH5joeKPcZlcA0teW7Gu77EY4aecgcmVTKPGU49F0Q5r2vKL
OG6H2vbpj6OxLok6wYbov/B7vf3j2SSQWoyaYu+8XdnFyZQdkZT705Tfd6e5hk++
DlQXuaB39laWATMsLDgNR5mOsBMYXmwIlyPmGar6mrFk5wuyxeFYWALGe/7wQQE1
V78j8j9FUEpktBxbox8ejhxxT/K+pv8zAeg8ISbcPiKH0gfSFjZ0BWPIGjTgNlIz
8Gc/YlnH+2VpfjdAtyV/ET7cc5YFK+WmAulVXlcj8BU+8xzu2v1CiZIo3dyZ+Bqh
TH/mOq9JD9G0WA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:50 2026 by rpki-client