Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: PlkwUhs2P6Yywo3V8GVXuStFr5KAFqypBKUmYM6GNYQ=
Subject key identifier: 6E:72:6B:31:16:71:91:79:00:AB:43:55:F5:9C:D3:25:8A:F3:8C:28
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 019F82D533F32882F5D0274ADA5B6204E238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 0CA2
Signing time: Tue 21 Jul 2026 04:00:38 +0000
Manifest this update: Tue 21 Jul 2026 04:00:38 +0000
Manifest next update: Wed 22 Jul 2026 04:00:38 +0000
Files and hashes: 1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=)
2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=)
3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: ZAqYl7AXs2iLCU9eT2DszhVkVOjA67VP9rZU4+L4G/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:33:f3:28:82:f5:d0:27:4a:da:5b:62:04:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Jul 21 04:00:38 2026 GMT
Not After : Jul 22 04:00:38 2026 GMT
Subject: CN=6e726b311671917900ab4355f59cd3258af38c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:98:35:71:3d:1c:08:d8:6b:7d:96:ce:e8:
f0:4f:92:a6:5e:7a:f9:76:cf:1c:18:d6:f2:d1:6b:
3e:0d:16:64:f6:46:88:8a:8c:e7:56:22:b8:fe:75:
76:b7:e5:56:8b:52:2b:58:9b:ae:41:58:eb:37:df:
c0:3e:0a:05:84:90:9d:03:0c:2e:6e:7e:c1:cb:8c:
c3:37:59:4c:e6:4a:60:ce:8a:f4:2e:6c:63:91:2f:
ed:56:02:b6:b4:6a:35:e1:2b:47:d9:95:1c:55:fd:
23:f9:85:38:c1:ec:47:58:18:16:d8:4e:4e:ef:25:
d1:05:67:34:fe:3b:ab:a9:64:34:ad:3f:f1:3b:84:
86:46:8b:b0:73:1a:f0:ca:d4:9b:5e:c2:0d:76:31:
62:f5:f4:45:cb:04:40:d2:59:69:a2:5b:0c:31:dc:
62:5e:23:c1:a3:6e:37:e6:06:a5:69:b6:88:5c:ca:
70:49:ff:ce:22:c0:42:32:da:2d:24:6a:94:b1:1b:
4a:25:7d:55:71:36:5f:3c:62:16:40:8a:1f:11:36:
32:b1:d7:d3:85:3f:91:9a:91:66:56:8b:e1:15:91:
c7:82:62:05:b2:82:51:c6:64:b6:d9:d9:ea:82:ed:
ae:aa:9e:27:4f:75:5f:65:13:98:f7:07:05:d5:63:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:6B:31:16:71:91:79:00:AB:43:55:F5:9C:D3:25:8A:F3:8C:28
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:78:73:dc:6e:5b:cd:e6:11:66:1c:cb:31:a7:eb:d4:2c:12:
ac:2d:12:3e:f3:1d:da:30:5c:3a:2b:d0:2c:8e:77:17:b2:1e:
11:5d:1c:fd:f0:de:22:5d:92:42:d8:e0:67:80:42:27:35:d4:
3e:7c:4c:92:fd:63:7d:55:ab:f5:b6:fb:ef:0a:7d:cf:b6:b0:
22:cd:30:ed:b0:81:09:52:71:5e:cf:37:74:36:f0:b5:ba:1f:
f5:7b:a9:cd:6f:8a:fd:ad:1c:1a:2a:28:d0:66:7b:18:9a:4d:
61:59:dd:38:e8:93:6f:16:27:05:05:de:cc:e2:08:4c:2a:bc:
bc:9e:6b:39:d0:ce:51:dd:1b:4a:05:fe:e9:ac:b2:da:02:73:
a7:90:56:c1:67:65:dd:d0:ad:e4:c6:30:bd:00:10:54:1e:f3:
4a:b1:87:b4:ca:9f:75:5f:3c:c2:98:8e:55:c0:44:b2:87:4d:
d5:91:d1:84:32:31:c4:08:c2:c9:a7:71:5a:a8:4f:71:7f:62:
35:8c:e1:fa:8c:07:dc:27:6e:72:45:18:70:ac:48:c0:48:19:
ef:d8:fd:fb:d5:c8:07:8b:70:04:21:74:f9:37:6b:71:2e:ad:
c0:76:6f:28:a1:f8:e1:85:e1:db:15:89:1f:33:08:73:37:8f:
b8:16:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:06:58 2026 by rpki-client