Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: S0Ugta+/vmp4wmq5CGL1ksk1XSFoEpZXqKxccEx+roU=
Subject key identifier: C2:69:DE:17:9F:39:8E:88:5E:64:29:BA:DE:F5:AA:C1:3B:34:C6:B8
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 019F92ED4F52146E9F01B14698DF4CD5F2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0D0E
Signing time: Fri 24 Jul 2026 07:00:53 +0000
Manifest this update: Fri 24 Jul 2026 07:00:53 +0000
Manifest next update: Sat 25 Jul 2026 07:00:53 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: /lHCXK99ZDXSlIqWC7Gj4gmzTkdREGn0HmdZ9qYXNVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:4f:52:14:6e:9f:01:b1:46:98:df:4c:d5:f2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Jul 24 07:00:53 2026 GMT
Not After : Jul 25 07:00:53 2026 GMT
Subject: CN=c269de179f398e885e6429badef5aac13b34c6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:08:9a:4c:53:b7:32:d5:22:92:56:33:cf:
16:6a:08:4f:36:11:43:df:a0:e7:3c:b0:f7:1f:dc:
b9:95:f0:57:60:3f:de:27:ae:64:1b:c3:88:81:4a:
66:82:4d:4f:2c:96:2a:bd:5e:a9:dc:63:25:b4:70:
ee:5d:7d:de:7f:c3:16:c1:e4:1e:63:19:b5:9d:00:
86:d2:94:86:a3:1a:66:67:3b:e4:8e:f1:a5:d7:db:
97:5d:d3:4f:8c:d7:e3:6b:44:1b:ec:9a:53:2f:6e:
dd:ab:0d:d1:27:d6:5d:d9:a1:f1:71:7b:51:bc:75:
3e:5c:04:5a:e6:23:68:ed:27:9e:8e:73:2d:53:36:
85:90:3c:82:42:df:f7:f5:f1:69:bc:8f:1a:b0:a5:
bb:1a:34:e3:10:4c:1e:ab:b1:77:b1:c8:52:8b:a2:
50:28:c5:18:4b:7a:d1:35:fc:e2:bd:c2:a4:ac:c5:
23:d3:63:e3:9e:c6:ee:7c:9e:5d:23:f7:77:0a:bc:
e7:a0:e1:e6:f7:8b:f0:df:03:e0:67:b6:fa:bb:ff:
b7:aa:8e:e9:5d:62:b1:a5:8d:52:a4:45:7f:04:31:
99:41:bd:44:7d:d3:2b:d0:97:60:69:f7:41:05:e3:
3d:99:61:74:e2:b4:76:3b:ff:4b:84:2b:59:84:24:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:DE:17:9F:39:8E:88:5E:64:29:BA:DE:F5:AA:C1:3B:34:C6:B8
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:da:46:32:35:f2:eb:77:4a:a0:af:ae:4e:cb:2f:28:69:
71:32:4f:b8:90:b6:db:48:76:5b:70:97:fc:6a:b2:e1:df:1f:
fd:c4:51:6d:73:83:19:4f:fe:db:33:10:74:63:35:84:d0:97:
24:f5:34:ad:b5:ca:74:b6:f2:9b:1f:77:6d:b9:4e:6e:57:fb:
96:94:1b:26:8c:9e:44:c3:04:ca:aa:42:b5:a3:10:51:b8:80:
0d:26:7e:fc:92:8f:f1:3e:49:a6:9d:95:a9:62:45:46:3b:79:
c7:6e:33:34:a2:9c:eb:df:19:77:22:39:d2:82:05:ab:46:95:
e9:04:5e:3c:9e:31:b7:41:cb:5f:34:f5:74:ad:69:b6:c7:54:
86:56:21:0b:2d:e0:84:c3:ad:b3:42:21:6b:c3:cf:ce:47:6a:
c7:43:db:2e:8b:7c:e0:ec:21:d0:d1:99:97:9a:cf:61:0d:70:
a6:17:00:02:e5:ba:4e:3f:60:33:8e:f8:5f:19:de:27:d6:d2:
cd:ee:32:84:1b:db:7e:b5:72:90:f5:2b:e1:f4:09:08:14:2e:
f4:2e:ef:f7:52:93:d0:6b:dc:45:22:87:ec:cd:1c:95:f1:4d:
5c:e8:68:d0:d1:5f:88:7d:34:2a:7b:2f:77:33:83:f7:aa:33:
b4:82:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:22 2026 by rpki-client