Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: ACHbUROg2N3yDVrS399ujzjD7b0JhrYaEBSykNCrY1I=
Subject key identifier: 37:25:A2:23:90:7C:84:15:74:EE:44:26:15:7F:F6:52:C1:E9:29:99
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 019FA1F2B198B5F41DE6DE7F7FF7DA70DFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 11A2
Signing time: Mon 27 Jul 2026 05:01:04 +0000
Manifest this update: Mon 27 Jul 2026 05:01:04 +0000
Manifest next update: Tue 28 Jul 2026 05:01:04 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: vn7hqN72S2g7b+z6TvSvWdpIl660TslYzJmpuvZehYg=)
2: J_wTFK-Imelz3lo0EhalX7WkndE.roa (hash: LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=)
3: QE-p0DolLSe1YcERFi4pB7qqbME.roa (hash: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY=)
4: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (hash: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:b1:98:b5:f4:1d:e6:de:7f:7f:f7:da:70:df:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jul 27 05:01:04 2026 GMT
Not After : Jul 28 05:01:04 2026 GMT
Subject: CN=3725a223907c841574ee4426157ff652c1e92999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:e6:36:51:9b:5b:f3:e3:d5:2e:76:3f:0c:
ed:0e:d9:f5:47:a0:a4:fb:40:11:5f:2e:81:58:70:
5a:97:c2:9f:5e:9a:3e:94:ca:98:d6:58:a4:96:52:
e8:b8:b2:00:65:e7:ca:18:b4:1a:0f:2a:9b:95:35:
f8:01:cf:9a:cb:0b:62:86:a3:b6:16:47:31:8a:40:
b1:a9:a0:c5:92:f9:83:44:b1:65:da:5f:4e:79:7c:
2a:3f:6b:50:c2:9f:39:52:8c:8c:a9:e1:e4:83:7c:
3f:74:5a:73:96:ac:e1:31:4e:6e:2e:11:56:7c:19:
9a:36:94:da:42:1a:b2:f9:f6:54:26:48:3b:a6:25:
20:5d:7b:32:76:87:91:8f:1b:ed:be:23:ad:e5:70:
72:87:a1:32:c0:20:e2:14:2a:70:19:0d:6c:50:21:
71:c9:ef:5a:42:27:62:2d:36:6f:5a:96:91:91:e0:
9c:f7:7a:f1:b5:22:0f:85:ff:00:f9:2b:ef:71:c6:
39:15:c1:47:f5:4a:08:23:63:ab:02:10:90:f8:1e:
b3:94:81:43:74:40:d1:da:f7:7e:91:89:34:35:c8:
ed:8f:55:ab:ef:34:bd:22:02:2c:3b:19:8c:99:27:
27:1b:04:58:8e:28:05:c3:c6:6c:98:e1:21:c0:f2:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:A2:23:90:7C:84:15:74:EE:44:26:15:7F:F6:52:C1:E9:29:99
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f3:82:a3:9b:6c:f6:cc:3c:b5:43:19:2c:7a:10:2e:63:e5:
f7:57:a5:f6:ee:45:a7:72:05:0f:71:c8:bd:3d:7b:55:f4:18:
d8:53:34:23:02:09:2d:70:3e:f0:76:d7:34:2a:2a:9f:77:77:
e8:88:59:e9:b9:06:72:13:52:3a:1c:5c:ef:05:02:eb:cc:ae:
cc:f6:f3:9c:25:e1:05:32:40:bc:0a:25:01:f1:55:67:e2:57:
c2:6e:a1:b2:80:da:52:6b:86:b9:79:34:11:e7:5b:d4:23:c1:
ac:64:72:d4:ff:56:b0:46:9e:d7:08:83:96:bf:17:68:39:57:
b2:a2:28:b4:2d:32:16:8d:8e:71:72:93:40:0a:48:31:0d:76:
8a:c6:19:5e:7f:a9:55:6d:5f:af:01:76:f5:82:b6:38:9b:96:
9f:7f:26:38:0f:b9:b2:35:4f:33:7e:0a:80:2e:62:e6:9d:d4:
85:ee:cd:ea:53:23:fb:a7:5e:0d:f6:10:5d:2c:82:8a:14:5d:
b8:67:e1:0e:c2:00:83:66:1f:c9:f5:7c:b4:4b:ef:a4:e7:4d:
3f:fe:73:f1:30:b0:62:60:5f:ce:1c:8c:8f:3b:d1:db:c6:8c:
08:58:dd:e7:a1:99:d1:78:f0:71:b6:dd:1e:4a:bb:7c:d3:b4:
d8:e2:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:32 2026 by rpki-client