Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
File: 5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft (raw, json)
Hash identifier: FRn+nD9Gae8p+ATRpQ8TxmPjd8GzLVTiJXV+TBlUzdc=
Subject key identifier: FA:CC:08:D9:88:9D:C4:01:72:0A:FD:F6:B2:20:23:42:76:BF:0F:A4
Authority key identifier: E6:37:89:9B:50:5F:34:C7:55:77:03:1A:D1:5D:46:11:59:FA:3E:CC
Certificate issuer: /CN=e637899b505f34c75577031ad15d461159fa3ecc
Certificate serial: 019F8F4752300A59A1FCD0242FCB4D27BE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 14:00:43 +0000
Manifest this update: Thu 23 Jul 2026 14:00:43 +0000
Manifest next update: Fri 24 Jul 2026 14:00:43 +0000
Files and hashes: 1: 3aP7tf2_IEAWXMYrhkgt_FGvnoM.roa (hash: 2OptZ+4wmOrAzANexNVFxgqEQ6WPy7TJBLwiEO3CjTM=)
2: 5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl (hash: b8d62CQyWeBlLfqjZbRbSlqs/bMj+F4uUMMNcbCZGB0=)
3: TzfRur66FvDbfYwIA6WTfABNKR8.roa (hash: Lp4TCK/sD0FuHrDCv4h92ORem/N9lPxO/RDYZXsGVHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:52:30:0a:59:a1:fc:d0:24:2f:cb:4d:27:be:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e637899b505f34c75577031ad15d461159fa3ecc
Validity
Not Before: Jul 23 14:00:43 2026 GMT
Not After : Jul 24 14:00:43 2026 GMT
Subject: CN=facc08d9889dc401720afdf6b220234276bf0fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:a5:10:f4:a4:f9:16:ad:66:7b:b6:29:6d:
c6:f2:95:e5:d8:2f:3e:cf:9a:bf:78:07:d2:7d:07:
0d:33:19:a5:2d:5c:ea:76:27:ee:76:c2:35:60:72:
4b:86:68:6c:86:df:80:13:f4:38:4f:42:88:cb:b8:
28:02:a4:ee:a9:3d:83:71:62:86:96:07:f3:d0:86:
f9:52:36:bb:b8:c5:bb:49:15:a6:56:51:76:a2:fd:
26:54:30:02:00:da:4b:e0:cf:85:a9:41:1e:85:0c:
96:c6:30:56:57:dc:a7:cc:ff:cf:bd:35:85:eb:ec:
37:32:40:11:98:d2:b0:a9:e0:09:d1:b0:44:3b:e8:
2a:fb:3d:f1:5d:20:e7:3d:12:07:ea:36:cf:ab:b8:
99:da:87:85:e1:1c:2f:c7:1a:97:d3:e8:e7:ca:6e:
f9:03:c3:83:1c:48:7d:0c:22:dc:b0:c9:39:40:a5:
87:88:e7:75:15:3e:1d:ce:fb:79:28:f0:a0:33:a2:
c0:10:e2:3f:14:9f:e2:72:c2:6b:90:ab:62:79:f6:
e8:fd:d5:e3:0a:b8:96:01:e3:db:76:12:1b:fc:20:
4d:40:66:39:51:9c:b9:de:b7:f9:ad:bc:50:27:00:
ba:a9:f7:3d:f2:40:3c:ed:ed:87:c3:d4:be:94:6a:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:08:D9:88:9D:C4:01:72:0A:FD:F6:B2:20:23:42:76:BF:0F:A4
X509v3 Authority Key Identifier:
keyid:E6:37:89:9B:50:5F:34:C7:55:77:03:1A:D1:5D:46:11:59:FA:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:87:49:c2:2b:21:29:b8:c0:e4:cf:5d:e2:a0:87:39:89:66:
09:d4:f7:b5:58:7d:21:b3:49:99:ae:7e:84:a9:90:a4:08:ce:
ae:25:27:14:d9:0c:6d:70:3e:65:4b:37:fc:91:ba:96:fd:1d:
cc:68:ea:68:01:36:08:94:9a:50:73:e0:4d:8a:8f:50:ad:8c:
38:06:3f:b0:eb:c6:79:09:49:9e:ea:b0:cd:00:4f:74:a5:91:
97:44:7b:61:88:d5:23:00:bb:3e:62:88:1a:5f:6a:ec:25:e8:
e4:fa:25:ff:a0:87:e4:64:95:29:3d:66:eb:4b:d2:38:fc:12:
25:27:bf:c4:ca:32:b0:d3:02:10:be:f0:21:c0:d8:2f:d0:02:
45:e0:a3:17:4d:13:05:9a:5e:38:d9:e0:91:c4:57:ba:f4:c5:
d9:b7:ad:bb:88:23:d1:43:d5:60:29:1f:70:e5:a7:7d:4f:c7:
ef:46:64:f9:8e:01:e0:df:58:a4:ac:f2:04:b8:ef:3f:4b:78:
93:74:19:bf:56:2d:d6:11:3c:45:88:4b:98:a4:79:bf:78:65:
0e:94:c6:f3:59:8a:29:ca:f0:4c:e3:de:26:e6:0c:2b:33:63:
c3:b1:ce:c0:b2:43:86:e2:b1:b3:96:2a:85:5a:63:d9:4a:27:
5f:f0:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:19 2026 by rpki-client