Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: ER5UH18JAdwO1ysUrg/HduJ/PQ0lmovXAwkN6Awk+qI=
Subject key identifier: C0:C1:EC:05:C4:99:ED:47:6F:48:FE:40:A6:02:5A:02:1B:87:8E:E4
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 019F905A923F7267EF0E087B7C484F02E399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 19:01:22 +0000
Manifest this update: Thu 23 Jul 2026 19:01:22 +0000
Manifest next update: Fri 24 Jul 2026 19:01:22 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: 13TMfnBYZpE7GwCxMBHm8O+jqSGl2ZqbwV626rHHD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:92:3f:72:67:ef:0e:08:7b:7c:48:4f:02:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Jul 23 19:01:22 2026 GMT
Not After : Jul 24 19:01:22 2026 GMT
Subject: CN=c0c1ec05c499ed476f48fe40a6025a021b878ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:64:81:d4:3f:d2:11:73:6f:dd:59:53:1b:
64:fe:8d:f2:10:0e:32:c3:61:b0:3c:bb:ce:6f:39:
b8:ed:89:2b:56:6a:e7:cf:23:f8:12:bd:ab:db:88:
66:54:30:80:32:a3:b8:32:b4:71:f3:9f:ac:5e:4d:
f7:53:16:dc:3e:12:ca:8d:c6:34:06:fc:e5:98:0d:
b7:5a:51:80:54:55:ea:d4:2c:6a:43:58:ad:72:c0:
0b:11:f0:01:11:21:93:56:9f:aa:3f:ee:fc:65:01:
8e:1b:cc:c2:1c:4f:66:31:cd:84:da:4d:51:12:37:
34:5a:0e:f7:76:85:39:14:33:ae:bc:a0:36:ca:bd:
30:1c:0a:e8:80:53:b2:de:3e:fa:8b:bd:cc:35:e8:
db:e8:3b:39:4c:75:57:24:b0:f5:bb:6c:9b:50:20:
b2:6b:cd:d8:cb:58:f6:a6:4b:a3:79:90:b6:49:f5:
7c:f5:b9:c4:2b:c0:b5:ef:7b:d3:dd:97:cd:d4:ff:
8b:76:bf:3e:11:e2:9b:b7:01:4a:df:11:f7:5b:ff:
b6:69:3e:eb:70:b8:3c:37:f7:6c:93:2a:a8:5b:7b:
91:a5:82:7a:07:f1:ba:fc:81:8a:af:90:46:08:94:
d2:72:7e:d7:1c:81:38:ba:4b:e2:29:50:cc:b0:9a:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:EC:05:C4:99:ED:47:6F:48:FE:40:A6:02:5A:02:1B:87:8E:E4
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:53:b1:c7:b2:07:ae:63:d3:46:e7:5e:92:7d:74:3d:ba:8d:
73:a3:9b:2b:01:88:a3:e4:b0:b4:62:d6:80:e9:ee:05:d5:97:
f3:88:9b:fd:f4:b9:b3:92:3a:88:66:d8:06:49:db:cb:30:48:
35:f3:66:e9:f2:0e:9b:6c:b6:d4:55:40:08:f6:91:db:5e:89:
47:70:fd:e2:fd:1a:ff:65:7a:4a:b7:ca:df:48:25:bc:0f:1c:
73:92:3c:03:0b:23:44:a6:46:72:4e:dd:f1:4d:65:90:49:8c:
1c:8c:ab:e7:56:e3:a9:30:cd:36:d1:7e:91:57:74:88:c3:f3:
b7:24:1c:be:eb:97:b4:17:3d:c2:2f:3c:6c:01:0e:2f:08:21:
d1:6c:04:f2:f1:90:6e:2f:c4:6a:ae:e9:a3:fe:b8:ca:1e:a7:
21:6b:54:6a:38:90:16:32:ff:0c:bd:4c:36:57:43:9d:4a:12:
56:c7:7e:22:50:73:f9:7c:4f:37:5b:8a:1f:0d:e1:5a:5b:80:
46:c5:52:ab:e1:fd:d8:6f:c2:46:07:9b:27:0c:72:91:08:32:
4b:bc:12:94:96:44:db:a7:e5:d7:4a:c9:8a:6a:c1:d1:a2:7c:
bc:89:bc:11:86:68:3f:95:23:b9:5d:96:d2:91:4d:3e:b8:4c:
b1:61:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:50 2026 by rpki-client