Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: rTG1GAzJT3j7zwMJCH4b17+zNQKFxJyyzLPWbz0IfcQ=
Subject key identifier: F1:D3:6B:5A:9F:BB:BF:21:35:6C:65:88:AF:DC:1A:4B:A7:96:C2:8F
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 019FA003AEF25E840D81AB6F623D69BA597E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 05FD
Signing time: Sun 26 Jul 2026 20:00:23 +0000
Manifest this update: Sun 26 Jul 2026 20:00:23 +0000
Manifest next update: Mon 27 Jul 2026 20:00:23 +0000
Files and hashes: 1: L5BfioWz08XOKOc7LGuDTFScCDM.roa (hash: oJjcndnAKImb4AebXhMuHLKYhu0NzBboRQfoXDCNW0c=)
2: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
3: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: NpaHTOBsJgXhlmIuYaWViUip6MsaPxpV9ySQwGs4CqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:ae:f2:5e:84:0d:81:ab:6f:62:3d:69:ba:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Jul 26 20:00:23 2026 GMT
Not After : Jul 27 20:00:23 2026 GMT
Subject: CN=f1d36b5a9fbbbf21356c6588afdc1a4ba796c28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:ab:86:22:dd:cb:04:ba:9c:3f:61:84:85:
6b:1c:32:d0:5e:45:72:c8:b8:c2:1c:d7:89:d5:17:
59:26:a3:10:70:84:e3:74:bb:1c:8d:9e:4d:01:59:
8e:30:97:b4:9d:f0:64:b1:fe:a4:94:0f:6e:23:dc:
e7:35:c5:3b:d6:91:b9:c3:9b:cf:ca:fd:48:a6:36:
89:5f:4e:db:59:52:f8:e9:4f:34:66:9f:a9:ef:98:
73:ae:83:7f:46:c8:43:dd:2f:80:fa:bd:7c:fa:5f:
d3:c7:49:e1:27:11:82:48:a5:b1:23:0f:6f:13:af:
34:87:da:df:c6:d1:3c:f1:26:5a:91:62:5c:e2:1f:
24:1a:85:8a:6d:0e:84:4a:93:f0:9b:b2:fb:a8:ff:
6e:da:5c:76:92:9f:af:a7:b4:83:87:b3:78:b4:3b:
f4:61:dc:8c:7a:6c:3e:01:b0:c8:30:a1:48:04:c3:
c2:2d:5b:9a:5f:81:7e:25:fc:ee:a3:52:65:32:1c:
b4:4b:0b:ef:be:b6:d5:26:9e:be:65:e8:5d:5c:11:
eb:cb:a1:26:e4:a4:01:ca:ef:e2:7f:1e:0f:95:f8:
fa:f6:95:d2:4b:b9:2f:84:9d:86:66:39:35:3b:c1:
d6:8b:bd:44:44:b1:ef:39:bd:5a:63:d8:b8:42:8a:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:6B:5A:9F:BB:BF:21:35:6C:65:88:AF:DC:1A:4B:A7:96:C2:8F
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1a:de:ec:ce:b9:c7:6e:fe:67:b3:ca:d1:a1:94:f4:73:02:
9a:15:d4:66:e2:fa:ee:fe:12:ab:f0:cb:75:77:13:c9:f2:c2:
0b:48:50:7d:34:73:2a:c9:be:a8:5e:03:7f:a7:64:75:a0:08:
5b:cf:3c:ea:b9:51:d0:d0:43:8a:3b:18:2c:63:f8:cb:06:5f:
4d:26:f3:25:75:d0:0d:1f:4f:83:bd:b7:cd:0f:ff:c7:27:8f:
af:02:05:87:57:ff:fa:40:17:9f:4b:2b:88:aa:d1:b2:b3:5f:
24:c2:f8:a8:5a:1b:3e:9c:ba:cf:6b:d4:30:20:8a:50:76:b9:
4f:de:26:31:2d:9f:ee:70:1b:d9:40:33:94:9f:a0:cd:cc:c9:
15:dd:52:ae:af:89:42:39:57:bd:32:40:23:0f:3e:21:d0:2a:
c9:4e:fe:78:d4:29:8e:27:8f:b3:bb:a2:9f:6f:90:c8:dd:6c:
be:2a:db:2b:6d:43:9b:5a:4c:bc:58:ff:40:e0:df:6d:b8:81:
30:c1:e3:e3:d4:ad:69:8c:0d:fd:f5:f6:90:63:c0:af:89:3a:
a3:2e:9a:92:f9:b3:9f:9a:2d:bc:0c:70:c0:81:d8:fc:63:4d:
56:0f:12:af:bb:5c:8e:07:f5:da:9e:2f:15:1c:68:d2:e3:85:
de:a6:a8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:52:37 2026 by rpki-client