Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: bLqmbJ4TiicdjT4nvFiJR1C4XLC99gH64HrGe/4OHoA=
Subject key identifier: F3:E1:0D:6C:E6:79:28:DA:5C:0D:01:FE:FE:B3:95:C0:86:C7:74:42
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 01A00101400CAF6098D90CD8439AA4CB5BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 16:00:54 +0000
Manifest this update: Fri 14 Aug 2026 16:00:54 +0000
Manifest next update: Sat 15 Aug 2026 16:00:54 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: 3MiaZW4VMLofoRIkfpKXPFnAQI9uaoio58t+QJgP0qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:40:0c:af:60:98:d9:0c:d8:43:9a:a4:cb:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Aug 14 16:00:54 2026 GMT
Not After : Aug 15 16:00:54 2026 GMT
Subject: CN=f3e10d6ce67928da5c0d01fefeb395c086c77442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:f8:f8:47:db:96:2c:51:44:41:d1:af:af:
53:38:f8:84:98:e1:21:df:c1:1f:33:f7:11:f2:98:
e6:32:48:57:00:92:b0:26:ab:29:fc:9b:b1:ea:55:
53:cd:31:59:f9:58:ef:7d:f6:61:98:92:ac:22:20:
5a:ee:15:c2:91:04:12:77:13:39:4a:44:15:f0:12:
e0:59:92:dc:4d:ff:06:13:b3:c6:d5:f6:c1:09:31:
d2:5d:84:2b:61:f7:08:f0:df:88:50:14:e8:9a:b8:
a4:41:e4:16:26:9a:5b:90:21:1d:03:44:5e:68:ef:
52:e6:e7:73:61:9d:d8:0e:27:29:27:b5:b5:29:e4:
4a:94:0d:92:bd:c2:e0:ee:39:08:f4:6f:c3:74:e8:
ed:02:23:c9:bb:78:ac:b9:07:a8:0d:fe:61:35:4a:
27:32:74:f6:15:a4:e7:55:22:06:3f:84:c0:bc:df:
05:18:b5:5a:52:2d:f2:4e:4c:95:38:e5:d9:0a:85:
d9:96:e1:14:d3:46:0b:18:49:b3:ad:86:3b:15:04:
4c:ff:97:a6:de:dd:31:85:b6:d1:21:da:70:c8:fb:
0c:74:83:8f:cd:a3:7c:46:e9:d2:b5:a2:6e:6b:00:
2c:db:9c:2f:eb:2f:ae:51:2c:df:9b:90:5d:31:cf:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:0D:6C:E6:79:28:DA:5C:0D:01:FE:FE:B3:95:C0:86:C7:74:42
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f9:3d:4c:8e:4c:bc:af:b3:d9:91:90:1b:28:ae:91:4e:2d:
1a:80:e3:1a:de:64:a9:e5:1b:ed:57:15:28:2c:94:b1:14:99:
70:57:95:43:41:f0:c2:6e:fe:e2:b3:24:8d:d6:ba:45:ed:58:
7b:3a:26:19:c3:f3:f7:2b:c0:1b:67:29:43:3d:87:3e:45:44:
0c:2f:08:53:a9:4f:2c:35:9a:c5:0e:d3:58:d6:aa:d6:c8:c5:
51:ee:b8:23:be:76:32:eb:0c:79:e5:1a:f0:ee:ed:91:e0:38:
c8:5f:70:8a:a9:73:fb:ca:52:a0:06:cc:8d:2e:7d:ec:af:ac:
9b:b8:70:90:5e:c8:f6:d7:2f:0d:14:ea:b7:23:55:99:5f:d3:
f9:d4:67:75:5c:e4:8c:0b:d2:33:a4:65:6e:0e:5e:92:0b:d1:
a4:a4:31:e6:7f:7a:9a:0d:18:35:17:53:9f:44:15:bb:9d:0e:
04:26:e2:bd:b6:38:d6:3c:d6:a6:f4:d9:12:85:21:99:08:74:
b7:4a:e1:d4:7e:05:f8:64:52:25:ef:c7:80:ef:de:ba:36:06:
a7:08:97:51:77:f7:06:90:84:33:49:c6:e9:7c:67:d4:38:48:
15:33:7f:ce:64:94:9e:74:7c:ab:47:eb:40:ea:36:f0:d1:28:
fd:86:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:38 2026 by rpki-client