Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
File: 5D_0Mpxm5bDVELjy6viwfn1ce0A.mft (raw, json)
Hash identifier: axKlL88PFBBTfU251jjQHvvDDsP1y4a+vKlhp8Pz5Vs=
Subject key identifier: D3:B4:56:ED:DC:53:A6:01:19:3D:D7:6E:4D:1B:4C:B4:5B:32:5F:1A
Authority key identifier: E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
Certificate issuer: /CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Certificate serial: 019FA2CDFD08565E8901543D2C690056893F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:36 +0000
Manifest this update: Mon 27 Jul 2026 09:00:36 +0000
Manifest next update: Tue 28 Jul 2026 09:00:36 +0000
Files and hashes: 1: 5D_0Mpxm5bDVELjy6viwfn1ce0A.crl (hash: 9qQys911yIETL/Ws3fkl1+S6eN2K3kBuhwkmI80Jiio=)
2: vMzqrHDtZQseD1IfDrA-iShDNwk.roa (hash: cIZbKSavouxTcPZPOTmND0k51VrW5LYVlRN+D9j5W+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:fd:08:56:5e:89:01:54:3d:2c:69:00:56:89:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Validity
Not Before: Jul 27 09:00:36 2026 GMT
Not After : Jul 28 09:00:36 2026 GMT
Subject: CN=d3b456eddc53a601193dd76e4d1b4cb45b325f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:46:08:c7:3d:a7:5a:cb:82:dc:97:73:f0:
52:84:4c:06:ab:e0:2f:7f:c5:0c:0b:60:a7:33:5e:
55:a3:99:90:c3:9d:3d:5e:2b:ed:4d:ae:f6:68:dc:
a6:02:49:71:db:52:10:89:df:0b:80:2e:7f:ec:74:
e4:66:51:02:34:40:09:89:b8:3b:1d:41:66:0a:a2:
88:4f:77:9f:ea:96:10:60:4a:89:fd:d5:90:67:cb:
8f:54:44:78:86:3b:43:65:30:69:39:ca:5d:83:83:
bd:4c:71:aa:0d:39:49:ca:92:eb:11:c4:71:dc:7f:
bd:2e:27:56:51:79:dc:0b:d2:25:c1:15:78:9a:3f:
9e:44:a2:13:7c:db:f5:df:b9:8c:75:fb:e6:fd:79:
c4:57:1e:43:31:33:7e:2a:33:83:e3:7e:53:2b:93:
ef:07:95:7f:39:16:11:10:b0:05:0d:db:ca:64:58:
3c:f1:06:ac:1d:b5:e3:35:c0:59:9f:5b:4f:09:de:
14:19:4b:4c:4b:e8:7b:31:aa:2b:f1:fc:d3:6c:37:
35:29:f0:bd:40:6e:50:53:53:92:b6:2e:ef:d9:a7:
63:dc:fd:ba:99:5e:57:93:40:a4:29:0e:20:28:f3:
2b:2a:24:cb:82:5c:51:b6:42:38:df:79:5f:d0:80:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:56:ED:DC:53:A6:01:19:3D:D7:6E:4D:1B:4C:B4:5B:32:5F:1A
X509v3 Authority Key Identifier:
keyid:E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8c:fe:90:1d:28:52:76:5b:7c:e1:d2:07:fa:e1:3c:79:3e:
44:73:cc:f9:36:2f:e4:85:5a:53:14:e8:4f:63:21:ee:af:27:
92:da:b5:83:a0:84:0c:d8:c1:29:3a:20:f8:64:32:be:68:1a:
b6:99:8e:f2:76:e8:89:c9:6a:84:eb:77:91:6f:f8:28:f4:31:
ce:97:5d:52:1d:15:18:b3:c2:20:66:10:9b:45:17:aa:55:1d:
6f:e5:ca:e6:e0:89:f3:d0:ba:73:c9:8d:f6:14:2b:fc:13:0b:
88:c1:51:fc:a2:7b:70:f7:7d:b9:b1:44:ba:e2:0d:36:83:d7:
cb:5c:17:71:4f:54:32:db:d7:b5:01:5c:1d:a5:af:05:06:30:
0b:34:cb:4d:79:b8:57:39:1b:c9:0f:4c:6a:c9:62:9a:3c:cd:
a9:8a:48:b0:37:f5:bf:d5:52:56:1a:dc:5a:45:a2:d3:3c:df:
f9:90:11:2f:6c:62:60:3a:c9:74:3b:f4:aa:59:6c:6b:af:f9:
c3:f6:5f:6a:08:83:92:1b:52:10:45:84:07:e6:41:69:0a:e4:
ff:48:a3:78:55:aa:bc:e0:4a:86:e3:18:65:ed:d7:60:da:0e:
96:5d:cc:c8:ae:71:ae:7a:6a:4f:93:1d:ce:1d:01:16:71:80:
54:e5:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:27 2026 by rpki-client