Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: ZGXulNAt+kKdUkOyXx07UUGc9V3Qz9E0KszkfIAl2yI=
Subject key identifier: 5D:51:2F:07:76:D1:6D:5E:F1:42:9A:21:92:5A:4D:82:B1:2C:A2:A6
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 019F9248492F6038D89859D78302F7129E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 05DA
Signing time: Fri 24 Jul 2026 04:00:38 +0000
Manifest this update: Fri 24 Jul 2026 04:00:38 +0000
Manifest next update: Sat 25 Jul 2026 04:00:38 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: +/jfpQSRvDgTs6az5UxrBrI7PecSvLps/A6J6lA+/QI=)
2: DVxcthJ5zcZ8COkBA3rotGAlLFU.roa (hash: vJnipHRerz0UttumCZypDHr2IzvHL7fPbWoqduV1jL8=)
3: iDjUHReMaiMBvtjZdmRz4HvetFg.roa (hash: jPu0BoNWhKVwiGPpdPSY4iU5CH4YO6NsUMtetTUIS9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:49:2f:60:38:d8:98:59:d7:83:02:f7:12:9e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Jul 24 04:00:38 2026 GMT
Not After : Jul 25 04:00:38 2026 GMT
Subject: CN=5d512f0776d16d5ef1429a21925a4d82b12ca2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:0f:29:e0:ec:d7:e0:ed:07:18:f1:30:b8:
21:6d:8e:b3:08:ab:db:07:87:0a:ce:b3:58:d4:0b:
3d:cd:54:1d:b4:36:40:be:27:02:89:2f:6a:73:58:
3f:aa:fc:1e:d4:3e:a3:d1:e7:02:5d:c8:9c:f4:3a:
ac:d7:9b:69:de:80:d8:7c:de:21:2b:03:9a:85:1b:
7b:c7:4e:63:58:75:83:b6:5c:d3:27:e9:d7:70:9d:
d4:cf:b2:2e:ce:c5:d0:e3:6a:55:09:5b:a3:d2:0e:
44:83:6c:0a:14:51:49:8e:d3:3a:a4:02:2d:52:cc:
10:33:b2:ca:bd:a5:88:d3:93:be:47:34:bc:52:aa:
24:5c:32:2e:aa:97:e5:d8:c9:89:99:4e:0b:41:aa:
42:5e:d6:68:3b:a7:7a:8f:f8:59:b6:b1:8e:52:42:
b2:db:50:c7:ff:72:7f:95:0c:2e:08:a7:85:b4:1f:
d2:b4:0d:cf:69:a0:22:1e:b4:cc:af:30:f9:ea:ed:
6a:b0:ac:6c:24:9c:c6:fa:c8:14:b7:fc:65:64:51:
19:49:fc:54:4c:9a:de:1d:b0:f3:fb:a4:62:37:23:
33:99:b5:e5:f3:6e:73:a4:0d:a7:bf:0b:e7:87:4e:
a4:85:bd:4c:ef:eb:0a:0f:1b:35:03:39:6f:5d:a7:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:2F:07:76:D1:6D:5E:F1:42:9A:21:92:5A:4D:82:B1:2C:A2:A6
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d1:f2:ca:4d:9b:1d:d0:7e:48:8f:31:1e:a2:81:66:11:8d:
95:3b:b8:20:02:79:92:e7:7d:67:c5:6b:5a:75:df:54:1d:a6:
6b:f6:70:7a:df:58:0a:2d:27:54:65:de:7a:3b:36:34:da:d6:
d8:f4:03:42:59:4f:96:81:c1:3d:aa:18:05:83:75:93:17:79:
df:f9:1b:58:33:97:ce:6f:7f:81:64:2f:4b:9e:1b:61:a0:d0:
d7:2f:79:62:68:a0:8e:37:eb:05:ca:f7:28:e8:7a:44:6a:e5:
78:06:6b:80:47:a4:2e:08:eb:eb:75:a3:4f:9b:ce:a5:37:99:
2e:ed:9e:a3:9f:99:ca:d2:91:70:3a:86:d9:26:68:9f:2d:a8:
cc:82:7f:c6:fc:dd:58:3b:f6:0e:9c:fc:0d:37:5a:c6:f6:08:
97:6b:eb:b4:07:47:e8:8c:38:bb:4b:11:ee:27:6f:a1:d9:59:
56:e7:cb:6e:f1:cd:4c:e2:9f:9c:b4:44:02:ad:0c:b8:87:65:
30:5f:45:1b:61:ce:6d:aa:01:1e:12:bc:70:54:76:b5:0e:bc:
ca:54:cb:4c:46:54:1e:e4:e7:0c:e0:7d:a7:e2:b2:05:96:23:
e1:08:22:33:ec:20:16:07:ab:17:6e:cc:fd:ed:a8:e1:af:1e:
21:e4:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:33 2026 by rpki-client