Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: dYw6KTcwQNuidxvbQO8N3ICLRzQpfQ1/Lhzbaq8yCqo=
Subject key identifier: B7:35:E0:4B:59:2F:D4:00:4D:48:F4:B2:70:95:44:3A:40:C6:F7:58
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 01A001A5F015AB354B797AD311DA9945756D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 13FB
Signing time: Fri 14 Aug 2026 19:00:47 +0000
Manifest this update: Fri 14 Aug 2026 19:00:47 +0000
Manifest next update: Sat 15 Aug 2026 19:00:47 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: MpHr8rsEsGEEm1xZ1l8ob1H7AYpRXIMymg2KEoVsyTE=)
2: PHHmlI_lozSBsIeTe7D4ho8MMgk.roa (hash: Q0/1mQZnoW0veYxUY+kdm56TFO9WzQm4B7+icQrGOc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:f0:15:ab:35:4b:79:7a:d3:11:da:99:45:75:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Aug 14 19:00:47 2026 GMT
Not After : Aug 15 19:00:47 2026 GMT
Subject: CN=b735e04b592fd4004d48f4b27095443a40c6f758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:6d:12:84:71:31:dd:4e:af:df:ed:27:4b:
79:7e:7d:6c:e8:86:98:e5:b3:40:be:20:ff:6b:73:
a7:1d:b7:46:fd:44:01:28:8c:fd:bb:cd:27:fe:2c:
a0:9d:52:93:f1:41:4f:82:1e:22:55:26:12:5e:d1:
3e:f8:c8:87:77:76:80:52:f5:78:3a:1b:f4:35:fb:
5a:e4:7e:1f:98:8a:01:4d:3b:7a:0e:ee:3f:a7:e1:
3c:5e:87:01:bb:61:7b:7f:75:43:b7:cb:9b:56:84:
d9:75:e5:6b:5e:69:a7:5f:8d:55:f3:9d:dc:19:83:
1e:01:7d:34:52:35:5a:3d:fe:d6:1f:94:c7:e4:f0:
84:95:eb:01:3f:8a:36:de:9d:77:2e:f0:6e:9a:29:
30:6c:f4:58:92:b1:40:ee:47:2b:f0:38:cf:7f:d9:
3a:4c:9f:7c:91:73:22:f8:43:a4:6c:f1:1b:e5:08:
66:d7:3e:26:e2:bb:9e:f2:ae:c9:88:ac:0d:93:01:
c7:2c:22:f9:c0:87:52:de:fb:13:b4:7b:a4:0b:7d:
5b:c7:c2:6b:7a:7b:91:76:84:9f:6a:50:af:53:c9:
22:36:86:75:42:75:c1:43:89:56:62:6e:62:4c:74:
0f:40:41:56:de:56:3b:c2:e9:b8:1b:9b:4e:0c:87:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:E0:4B:59:2F:D4:00:4D:48:F4:B2:70:95:44:3A:40:C6:F7:58
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:10:1b:02:8d:c6:40:98:61:28:1b:62:ca:de:95:13:08:f7:
90:d7:18:91:c1:c1:b9:47:c1:6b:83:7d:b3:4f:7f:1b:d4:77:
6c:28:61:72:f3:39:13:7e:e5:04:33:9b:8b:a7:4c:2f:f4:9f:
25:56:9c:92:63:65:f0:c6:42:bb:36:73:0b:07:6e:ce:92:f8:
c3:2e:37:75:3c:6b:d0:7a:d9:0e:15:40:5c:9f:2d:9e:d6:82:
30:a3:b6:75:a9:79:e6:fb:35:74:5c:13:89:ed:b9:c5:53:c3:
ca:41:7c:65:43:63:a7:36:a7:d4:c1:4b:08:e0:0d:b6:86:83:
d2:61:88:11:e4:b3:9e:01:38:ae:25:2b:d2:3b:3d:ee:9b:6e:
bb:3d:fc:59:8d:72:00:ac:81:52:e5:28:35:29:8c:f1:ef:68:
3b:32:1a:ad:fa:e7:71:03:86:fb:77:60:e3:a8:5a:9c:19:b2:
75:8c:ea:bf:03:9e:3c:cd:96:2b:bb:06:bf:6c:a4:26:22:28:
36:aa:db:71:3f:72:49:6e:1c:ed:78:51:ee:d3:74:a9:0a:0a:
bd:5b:55:b9:13:f0:04:ad:2f:86:f8:43:8b:ab:92:97:9e:c5:
d8:ae:70:e0:b5:2e:c6:f6:bd:45:e8:68:7e:1d:b3:39:25:45:
52:8a:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:30 2026 by rpki-client