Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: YJNQK/x8iSMUQBN99UOe5nedzK4JMl/DOkwZ1smevVw=
Subject key identifier: B0:5F:C6:A0:C8:53:17:2E:43:D9:1D:F7:FC:E9:74:ED:02:E6:D8:BF
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 01A0005C9A5925C32EFFAFC2768C1393C383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 1180
Signing time: Fri 14 Aug 2026 13:01:03 +0000
Manifest this update: Fri 14 Aug 2026 13:01:03 +0000
Manifest next update: Sat 15 Aug 2026 13:01:03 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: Cg9iwVX/e+TTcYD8kb2LeN3Ps9bqU57JjozVoNpaXy0=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:9a:59:25:c3:2e:ff:af:c2:76:8c:13:93:c3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Aug 14 13:01:03 2026 GMT
Not After : Aug 15 13:01:03 2026 GMT
Subject: CN=b05fc6a0c853172e43d91df7fce974ed02e6d8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:38:20:b7:c6:e4:f1:50:fc:c1:c7:f0:d5:
c0:5f:fa:0f:96:44:86:ce:71:46:26:36:f0:2d:6b:
45:ad:ed:c0:6e:75:27:0e:2e:5b:80:a7:44:66:07:
21:a5:66:ab:c5:aa:e9:a0:37:86:c1:4a:21:f4:51:
67:2c:0b:f7:24:bd:36:c2:9d:a3:ab:75:ea:5c:1e:
a6:2b:76:7c:ec:ba:16:eb:c0:78:33:3c:0e:f7:0f:
d4:a4:04:0a:1f:24:17:42:18:25:51:5f:39:e2:76:
02:1c:ff:c8:07:f3:a8:ff:3b:ad:bb:0c:3f:f3:d3:
3e:f8:6f:cb:e1:f4:90:d3:49:10:cc:a8:1c:7f:8d:
00:10:4b:69:9f:23:2e:30:7d:33:46:17:27:c4:4f:
d0:5c:9c:2a:8d:91:35:0f:99:f6:ac:95:6c:c1:05:
ca:70:15:fb:71:34:e2:a9:89:7a:f5:45:7d:75:57:
6b:14:cd:a3:90:87:9b:a3:46:35:46:58:e6:77:46:
5a:d5:6a:df:ec:03:73:08:7e:9b:3c:83:65:42:06:
a7:4e:98:e2:42:ec:65:17:a9:35:2d:03:15:53:33:
8d:f4:57:42:fc:06:91:74:08:f3:79:05:b2:de:53:
1a:21:93:10:9b:64:9b:e8:5c:8e:11:e6:22:81:eb:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5F:C6:A0:C8:53:17:2E:43:D9:1D:F7:FC:E9:74:ED:02:E6:D8:BF
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:63:f4:8c:49:2e:20:ed:ab:0a:39:01:e4:7f:2f:ea:48:ef:
2c:c5:2c:63:f0:fe:76:15:03:a1:9b:81:93:72:74:54:dc:ee:
33:7f:73:f8:65:b2:38:76:c8:f0:c7:19:29:fc:47:d4:b7:b0:
d6:89:78:8a:5f:64:4a:30:12:c9:d5:42:7d:54:15:a2:85:69:
17:05:d6:8d:60:cd:ce:2e:5d:67:85:62:80:51:d0:49:e5:5d:
3f:dc:99:5b:24:2a:ff:b7:3b:32:5a:be:1a:58:ba:59:c8:dd:
49:9a:b4:e5:4b:fc:26:cb:f7:b4:bc:f9:36:c3:a5:08:fb:0f:
c7:99:07:9c:f5:92:3d:6f:c6:f5:51:0c:e6:3f:d1:88:7e:08:
e3:df:5a:fb:e7:cd:ea:1a:95:e6:9c:9f:6a:b5:5f:d9:66:7c:
36:51:a9:81:c3:25:61:ed:91:75:4b:de:9e:c5:22:7e:77:fc:
02:bf:cb:c3:d9:a9:48:f0:5e:03:21:cd:ea:1b:a3:ff:61:68:
c6:66:83:76:c5:1f:f8:66:8c:3b:ff:05:51:dc:07:70:30:fe:
02:7c:46:82:85:1f:aa:ca:98:59:29:ff:0b:b6:29:ec:39:91:
ab:81:f2:1e:b6:31:38:61:47:f9:35:a1:2c:2e:d4:c4:1a:aa:
55:13:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:00 2026 by rpki-client