Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File: 1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier: i0b9AP2FG0uNTUf7bSPAhyhBtCmlzXccmfB9p9Taxjw=
Subject key identifier: 79:DD:16:0B:87:C5:25:B4:37:84:48:BE:3E:E8:D9:86:B0:2D:06:F9
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 019F21D8F5889BD75876518F1D2F2FBAD9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number: 0517
Signing time: Thu 02 Jul 2026 08:01:34 +0000
Manifest this update: Thu 02 Jul 2026 08:01:34 +0000
Manifest next update: Fri 03 Jul 2026 08:01:34 +0000
Files and hashes: 1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: 2oHEKA11CtmJkQrGTFJOtUH4PCzU7iTb0jwf/BScW4Q=)
2: iNx82GZNWlZtsaP7l7VAkQ6gJEw.roa (hash: SctiU9iAeW/Gq4wKZZ3r4nvOxosOCCwWL4xZWvbEhAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d8:f5:88:9b:d7:58:76:51:8f:1d:2f:2f:ba:d9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Jul 2 08:01:34 2026 GMT
Not After : Jul 3 08:01:34 2026 GMT
Subject: CN=79dd160b87c525b4378448be3ee8d986b02d06f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:34:e2:ab:d6:22:2f:dc:bc:56:b4:76:6a:
46:ea:d5:d4:c7:9f:7c:74:69:9f:43:11:ed:45:e7:
2f:50:5c:27:1f:1b:dc:be:45:18:c6:b7:10:a8:67:
a4:7f:44:71:c3:2a:15:34:27:c7:c5:bb:34:3d:2e:
78:9d:37:ce:0e:ae:6e:ed:9c:f4:bd:aa:41:54:cb:
ba:e4:0c:f4:cb:0f:33:ec:ad:bf:59:cf:40:9a:4c:
fc:dd:c6:96:9c:43:cf:cf:b5:42:f7:49:4f:c0:fb:
46:41:0e:10:7e:0b:89:c9:95:44:ad:de:f6:7d:aa:
74:e2:b7:3a:d4:f4:3e:e1:43:7c:82:50:bf:30:19:
69:0e:4a:3f:f1:1a:92:80:3d:a5:bf:9c:eb:e2:b9:
11:7c:9d:5c:72:47:a3:f3:83:d9:1e:a7:27:47:b7:
56:cf:d3:97:2c:55:8c:c5:4c:58:51:77:0f:83:30:
99:da:1f:bc:3f:48:29:98:4a:df:0a:aa:2c:5a:c6:
1a:9b:44:a3:bf:e5:93:d2:8f:39:66:42:c4:ff:c4:
e5:21:3c:f1:31:e2:d4:7d:94:35:5d:47:27:fc:db:
f4:d7:e5:28:b6:50:72:7f:75:af:48:c8:08:80:44:
f4:b3:48:bd:7c:27:ea:3d:06:82:ee:92:11:ef:cc:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:16:0B:87:C5:25:B4:37:84:48:BE:3E:E8:D9:86:B0:2D:06:F9
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:44:69:27:96:72:ec:96:8f:93:5b:51:b0:d7:a7:85:4b:6d:
ca:9c:03:bc:5e:d5:ed:cb:a8:d6:22:e3:a9:e5:c0:a4:86:f4:
bc:e7:cd:c2:e7:db:a9:cd:3a:f6:19:8f:3e:47:1d:38:06:96:
5c:ac:32:d0:d0:cf:aa:1c:9e:3f:a9:5f:ea:51:98:58:f6:3c:
dd:25:28:42:66:f3:7d:bf:84:0a:03:cc:ec:bc:0a:ea:ba:b1:
e5:f1:54:00:b7:05:3b:ef:54:8d:fe:58:3b:65:19:d8:9c:54:
5f:af:af:96:46:77:b2:87:43:a4:51:b6:4c:c8:98:31:4b:90:
cd:c7:f6:d5:1d:2c:d5:ee:44:55:df:99:40:33:62:4f:e6:98:
d3:5c:a9:d5:65:d3:c0:8e:d2:8c:d2:30:97:61:b1:92:93:fd:
e8:45:86:f0:69:5a:97:d8:76:51:44:b8:d6:45:de:e5:11:a6:
d0:c5:14:78:0e:f5:c7:ac:20:8b:3d:85:09:6c:6c:42:61:6a:
10:92:37:2a:76:04:07:60:e8:35:9f:15:97:b4:6c:59:0e:f6:
b4:80:bc:19:b9:48:23:20:64:d0:06:5a:a5:60:26:fe:5a:22:
c9:b6:f9:0b:a0:34:65:f0:fa:b8:86:90:71:8c:60:19:d1:80:
2e:6b:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 11:58:57 2026 by rpki-client