Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: d+smASHvDF+/4sznO77RAHNOO6xo5T8n/0QhgMKTd/U=
Subject key identifier: 75:AB:57:D1:BD:01:53:C8:4E:02:B9:72:3F:6B:E4:3D:79:1A:7C:CC
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019F90C79E46AE209D85FDF769F022059D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 21:00:28 +0000
Manifest this update: Thu 23 Jul 2026 21:00:28 +0000
Manifest next update: Fri 24 Jul 2026 21:00:28 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: wNn6bMedhn2XollEOfNUFH8jxqbRpzDqnvuy2kFKVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:9e:46:ae:20:9d:85:fd:f7:69:f0:22:05:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Jul 23 21:00:28 2026 GMT
Not After : Jul 24 21:00:28 2026 GMT
Subject: CN=75ab57d1bd0153c84e02b9723f6be43d791a7ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:73:73:22:95:e5:c8:dc:78:f9:e3:ec:3a:
10:72:2d:40:ed:c1:1e:0d:79:a9:71:92:05:85:dc:
7e:27:fc:80:66:6b:d3:5e:72:cc:13:5a:1f:e3:c9:
2c:08:23:53:1b:68:dc:b7:2c:50:f3:5b:1c:99:be:
63:fa:0a:aa:61:35:d7:cb:b2:ef:d1:f0:e8:11:8a:
82:1a:a5:0a:6b:ee:22:d6:2c:b0:65:b1:bd:35:8b:
2a:fb:a6:5e:2c:60:e9:c6:b9:f0:d6:c5:cf:ab:ab:
6e:07:60:33:01:40:b6:e4:2a:0d:dd:40:64:f0:cb:
9f:10:5b:ec:71:85:48:bf:f3:4c:98:cc:8e:0b:a4:
ff:62:dd:83:e5:6b:54:8d:28:37:ce:17:5a:e0:e7:
f8:c4:3e:0b:f1:a8:b1:ed:8a:d9:cf:8c:ca:0a:61:
cf:76:17:33:24:d9:21:11:10:4e:58:0f:e4:20:12:
3a:19:e9:43:32:3c:74:50:ff:c4:c2:9c:6a:e7:73:
f0:f2:98:43:42:1e:82:45:34:a8:8a:4b:28:a7:e8:
46:21:f6:50:2c:24:b2:a0:7c:52:40:82:22:e0:17:
77:40:ad:8e:38:30:da:0c:1b:a2:8b:d3:0f:0f:37:
94:4d:e1:a4:07:72:32:9d:dd:2b:68:5f:c2:06:cb:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:57:D1:BD:01:53:C8:4E:02:B9:72:3F:6B:E4:3D:79:1A:7C:CC
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f7:94:57:c9:57:a7:36:71:30:be:f9:51:1e:b1:4b:47:98:
3d:6b:46:3a:7b:23:3f:b1:29:17:43:d7:30:fa:47:ce:74:3c:
1f:92:7a:c6:29:b2:50:8e:7c:51:58:69:a2:cd:2f:2b:96:95:
68:a0:5f:fa:e9:7c:e4:29:dd:85:5e:5c:f5:8e:15:c4:d1:80:
9c:63:77:6a:7f:11:e5:f6:90:00:aa:69:ca:ff:f2:8a:67:fa:
77:4d:95:bb:20:c1:84:a8:53:04:48:d1:7c:0f:9b:4b:fc:f2:
c8:f9:40:95:94:6c:d4:c5:05:72:48:b4:8e:53:13:e6:70:63:
ce:51:8b:ea:e1:eb:46:a7:6d:4c:3d:bd:18:bf:2b:dd:dc:0b:
32:6b:e3:91:3a:9d:6e:d5:d7:56:99:87:ee:0c:63:ed:ad:55:
60:8e:0f:e7:da:49:8e:52:93:48:f0:23:43:80:0a:fc:cd:60:
b1:8c:1a:90:a5:46:3d:f9:1c:5d:5d:fc:0d:87:d5:ca:0d:46:
b9:d9:63:bc:41:22:bb:8b:39:c1:a5:ee:70:52:a9:5c:fd:84:
0b:39:83:77:f3:f9:88:12:e6:ae:09:d0:c5:63:fe:5f:db:47:
fa:3c:83:03:a5:73:2a:48:f8:9b:81:84:19:33:6c:b6:9b:f1:
72:24:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:17 2026 by rpki-client