Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: 88FyDczKONOYS5UPQv9le+m1kquMeBuQo9bt0nTuGqE=
Subject key identifier: 11:53:4E:76:FF:9B:E8:29:3E:C5:E9:1D:DD:C0:44:83:4B:E5:F1:7E
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019F8FEBE4A305018164D7C2CB454E4890B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 17:00:29 +0000
Manifest this update: Thu 23 Jul 2026 17:00:29 +0000
Manifest next update: Fri 24 Jul 2026 17:00:29 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: yS6P57kkSCT9gfiWOsK9JWSzookEgxnZwcljuNXyLkk=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e4:a3:05:01:81:64:d7:c2:cb:45:4e:48:90:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jul 23 17:00:29 2026 GMT
Not After : Jul 24 17:00:29 2026 GMT
Subject: CN=11534e76ff9be8293ec5e91dddc044834be5f17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ce:c1:89:a3:8d:54:79:bc:38:73:54:12:6d:
46:2b:89:59:27:9b:60:54:13:b0:14:8a:d2:3a:43:
00:d1:31:b8:4a:c8:eb:e2:32:93:d8:e4:3b:82:26:
05:6d:8d:f0:53:73:96:bb:62:22:e8:41:38:7f:e1:
54:7b:01:75:9a:8d:49:9f:cf:67:13:de:78:3f:b4:
9f:18:cc:a4:02:17:35:e4:b1:68:a6:44:98:36:f3:
3f:b0:4a:78:72:42:2e:e8:d8:97:57:ea:2c:d2:5d:
2a:f0:03:34:bc:b8:6d:c9:66:1f:19:24:49:5f:6a:
0f:c5:7f:cd:e6:6e:61:01:07:eb:37:a5:08:1a:40:
69:1f:8c:43:b4:29:33:36:d9:6e:0c:f3:fb:69:3d:
e0:3d:18:ba:c5:23:85:a5:39:0f:e5:0c:ea:68:e0:
18:42:75:26:a5:2a:d7:dd:da:d5:61:b8:0d:0e:a8:
f1:43:36:a2:3d:d4:b6:34:1c:e7:4e:8c:b2:8c:3d:
ae:77:6b:ef:e3:80:f4:03:9f:28:ab:62:ff:f9:dd:
8c:04:01:e5:4f:81:0e:b6:af:08:2b:bd:95:be:82:
19:16:55:d9:12:d7:3a:fb:d3:1d:92:e9:16:fe:a7:
a7:00:df:7b:39:70:6b:1a:5f:f1:34:18:f9:71:f9:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:4E:76:FF:9B:E8:29:3E:C5:E9:1D:DD:C0:44:83:4B:E5:F1:7E
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e0:cc:93:a8:18:d5:c2:10:1d:e1:a0:f8:2a:d5:fd:bd:b0:
ab:53:51:97:e6:64:d9:e3:3b:20:77:e6:cd:cc:71:12:4a:d1:
30:41:36:32:19:ca:69:45:8d:9f:e9:8f:5e:17:e6:b4:a9:ac:
89:9b:a7:3c:ea:c0:6b:ca:11:ff:07:02:2a:aa:f0:99:71:e2:
dc:51:bc:b5:af:6b:d0:bb:ec:6f:b8:c3:c0:43:98:3c:10:ab:
34:93:28:b9:4e:5b:f6:45:f8:ef:67:fe:96:ae:45:93:5f:ae:
6d:37:e8:ff:d8:bd:a2:66:5f:13:74:d6:21:1b:c5:68:81:61:
54:28:49:10:44:b5:a8:ce:14:ff:c8:25:52:36:e7:62:2e:7c:
87:da:56:eb:ea:ad:2b:21:8a:45:4b:e2:85:96:94:1c:95:6e:
01:d8:59:2c:d2:43:7c:ae:26:58:f4:b7:94:2a:c2:09:23:1f:
69:f3:2c:f2:b4:9b:37:6d:79:ef:8e:93:10:7b:5b:6e:8e:4f:
4c:67:1b:42:79:4f:67:8d:4e:88:39:e4:22:f0:85:8e:52:4b:
ff:f3:52:ef:83:19:be:47:a7:e6:29:f3:4a:a6:c9:09:40:c4:
b2:53:76:9e:ae:21:0d:a3:d0:84:ce:0e:68:b9:9a:b3:de:e6:
85:28:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:03 2026 by rpki-client