Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.mft
File: 5RSCeKg1Fp8UqoviixjhLKBJYFs.mft (raw, json)
Hash identifier: GgSICDfbP/oN6iCZaCNDyJ9CfTGXsku6Jg1L+jxU2zg=
Subject key identifier: DE:1B:6A:B6:7A:80:9F:D3:CD:20:1A:E6:C9:C0:33:B9:99:15:EA:E1
Authority key identifier: E5:14:82:78:A8:35:16:9F:14:AA:8B:E2:8B:18:E1:2C:A0:49:60:5B
Certificate issuer: /CN=e5148278a835169f14aa8be28b18e12ca049605b
Certificate serial: 019F8F10F7AEF53BD511B571A529F4C440F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RSCeKg1Fp8UqoviixjhLKBJYFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.mft
Manifest number: D1
Signing time: Thu 23 Jul 2026 13:01:21 +0000
Manifest this update: Thu 23 Jul 2026 13:01:21 +0000
Manifest next update: Fri 24 Jul 2026 13:01:21 +0000
Files and hashes: 1: 5RSCeKg1Fp8UqoviixjhLKBJYFs.crl (hash: UgQ+PKGYwFN5iqmTO7J8xDN6KfBiciBTLrj3/eqw5a4=)
2: OUoJvoWH8pOpVRM1-JGyTDYnKo0.roa (hash: Wg7N+IAl1TJAnxWuhOrKXbJO2MhgSDNe7L2xICbhWLk=)
3: TCTGRzqSGldb6_pvAymudJpBUXs.asa (hash: nRHD6B5pftCmqLg02vSi52KLz4itUs5HYD7LzZnUa5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RSCeKg1Fp8UqoviixjhLKBJYFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:f7:ae:f5:3b:d5:11:b5:71:a5:29:f4:c4:40:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5148278a835169f14aa8be28b18e12ca049605b
Validity
Not Before: Jul 23 13:01:21 2026 GMT
Not After : Jul 24 13:01:21 2026 GMT
Subject: CN=de1b6ab67a809fd3cd201ae6c9c033b99915eae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:7e:85:1d:86:ec:3f:df:e7:1b:00:b4:fc:
f1:af:a3:71:74:13:8e:54:98:6c:69:d8:cc:23:0c:
68:53:36:b7:73:90:d3:68:d0:76:cf:a7:6b:10:d6:
6a:48:cc:82:4e:f3:bd:7f:d8:70:7d:12:cc:c6:e4:
59:2b:15:63:57:7d:95:54:ad:04:de:46:c6:03:b5:
a9:1e:d3:6d:6a:da:55:25:e8:21:c8:dc:57:46:82:
17:c6:da:a5:ad:f7:e1:34:1f:79:05:58:cc:d4:26:
68:f0:7f:ee:28:4b:64:3e:59:1f:c6:a2:64:9e:53:
c2:d7:49:89:59:bd:ba:41:35:74:fe:68:5d:2e:92:
17:3d:1a:f5:0a:8f:d5:f2:01:f2:c7:47:0c:be:e4:
b8:66:e1:0c:03:7c:61:92:aa:0e:32:33:c4:51:05:
fb:2c:26:69:3c:40:16:8e:74:2b:e6:62:e9:0a:1f:
10:e1:cb:1d:a1:b3:b6:75:de:7c:0d:ed:fa:8a:e5:
a2:9f:35:4d:7c:e8:c6:a2:9a:6a:c4:6c:03:6e:33:
1f:ee:23:1a:72:b1:72:f3:d0:6c:d8:9c:7f:e6:16:
a2:f1:81:7b:63:76:5a:d1:0c:73:bc:e5:0b:e8:bd:
aa:6b:3b:54:ae:d4:20:6d:6e:71:f0:2d:fb:13:03:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:6A:B6:7A:80:9F:D3:CD:20:1A:E6:C9:C0:33:B9:99:15:EA:E1
X509v3 Authority Key Identifier:
keyid:E5:14:82:78:A8:35:16:9F:14:AA:8B:E2:8B:18:E1:2C:A0:49:60:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RSCeKg1Fp8UqoviixjhLKBJYFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3e:89:43:ef:43:2b:df:a7:55:c2:4f:14:77:a8:57:a5:a8:
73:78:0a:72:d3:84:02:44:90:bc:2d:70:0b:83:fc:07:3e:f5:
d4:82:c0:ad:67:bd:94:49:c8:fc:ce:06:4f:1f:6d:ff:f6:1b:
af:d7:1c:65:e0:14:6d:ed:88:09:aa:41:42:df:3e:91:8e:89:
f7:d1:84:4e:bb:40:01:a9:33:4d:8a:24:c7:91:91:4e:59:7f:
9a:27:79:80:57:1e:71:21:10:8d:cd:e2:ee:ff:e9:6f:0f:61:
aa:4d:8f:f3:3f:ab:3c:74:78:2c:c3:df:af:e8:36:70:dd:56:
6c:9b:4c:8a:b6:8f:9a:ec:ea:51:af:5d:73:0c:77:fc:a6:8d:
e4:82:98:62:7d:16:77:2f:61:cf:7d:c7:1c:f0:e2:53:31:66:
8d:55:fd:4f:a0:e9:0e:b8:1c:30:5c:12:0a:d2:c2:f8:a7:85:
d2:43:5f:67:c3:87:f5:d8:9d:d3:c2:9a:30:f0:13:dd:e1:79:
77:00:8b:dc:2b:d9:d7:b2:2f:ef:d7:5d:d8:8a:b8:38:b4:51:
f1:87:fc:df:28:13:54:46:42:40:d0:43:31:f8:17:71:e8:09:
d5:c4:2a:50:93:56:24:22:71:39:8e:f6:c3:6f:a8:a8:34:4c:
1d:a7:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:55 2026 by rpki-client