Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: vw5GJq0LubAoEe2sz6vqq0L+mTWi62Vw2xk3FhldgvA=
Subject key identifier: 12:30:CB:46:C6:85:46:5B:53:DE:BA:58:06:6F:83:3D:92:81:93:52
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 019FA00411905ED4ED99830D0772021CE688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 19D7
Signing time: Sun 26 Jul 2026 20:00:48 +0000
Manifest this update: Sun 26 Jul 2026 20:00:48 +0000
Manifest next update: Mon 27 Jul 2026 20:00:48 +0000
Files and hashes: 1: 4wx0MOu1mZcNgjgLVuHZ5KDPjA8.roa (hash: 0jso45NlBZKrRKZeACFspDxL58QZmOoRo1b0JCMIPZ4=)
2: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: qAi3FmsxJ7TkHqQlmhFV+NCcQwiabbP0MO0QVfgf+rA=)
3: PEqDu8ivi9UVZhqhCJ7IvyfJdcE.roa (hash: Q7IRGtNWGMxResmk4bDtY/IpB1kb7EOVGytLvz9NzXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:11:90:5e:d4:ed:99:83:0d:07:72:02:1c:e6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Jul 26 20:00:48 2026 GMT
Not After : Jul 27 20:00:48 2026 GMT
Subject: CN=1230cb46c685465b53deba58066f833d92819352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:68:0d:75:d4:ec:d1:8b:a6:8e:9a:7d:9d:
17:74:27:01:73:02:4b:ae:5d:0d:35:f3:5b:5e:70:
b5:bc:07:84:3b:19:10:1d:4f:80:ca:6c:55:8c:35:
0b:0a:b9:8b:80:48:71:e6:56:14:00:1c:59:13:9e:
02:d0:db:de:17:74:7f:e8:59:c6:51:b1:ea:8f:41:
b8:fb:f8:22:58:52:5b:7a:aa:4b:b4:8c:53:de:2b:
c6:d5:22:5d:bf:db:04:d7:62:8d:ee:f4:1b:22:be:
54:7e:c5:fb:8c:77:54:5b:3e:d8:6c:50:90:32:7e:
ce:69:0a:e4:a4:79:01:ef:df:82:ef:fe:54:2b:10:
14:8a:a5:ad:9e:5e:a0:9c:db:28:17:da:57:44:19:
6d:0e:f6:37:ee:84:70:a6:13:1b:7c:34:1b:89:36:
3e:e4:9e:f1:bf:8d:a5:ec:4c:fb:02:d6:31:d1:df:
f1:d2:b1:a9:52:23:1c:d1:bd:68:e3:6d:a7:8a:d6:
cb:3c:01:64:61:6d:45:bc:cb:43:5c:59:ff:18:df:
c5:66:ff:ee:98:a2:7a:32:d2:69:fd:37:63:12:28:
23:c1:8a:84:96:48:10:e9:fc:fa:d6:85:51:ec:91:
20:69:50:d6:31:d5:e4:3b:83:ad:19:cf:7d:11:2f:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:30:CB:46:C6:85:46:5B:53:DE:BA:58:06:6F:83:3D:92:81:93:52
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:be:74:3b:75:c4:a4:a0:c5:4d:3e:94:97:db:eb:98:35:3d:
d9:1e:c1:a2:74:9a:75:eb:49:5c:4f:4d:92:f1:7a:b5:f3:8a:
f5:49:3d:d8:0b:82:31:61:24:c0:81:0d:aa:33:75:1b:0e:8b:
d3:82:4d:75:99:24:2b:cb:26:34:65:d8:ea:d8:90:3f:c0:01:
ac:43:09:f2:f5:d1:16:92:98:e6:ce:c8:c5:64:2e:6d:70:fd:
ee:a9:d8:15:ec:ac:a6:c1:d1:08:8d:b7:e8:52:f2:67:09:0d:
a5:48:a4:8e:9a:f6:0f:77:19:a1:44:90:1f:ee:9e:62:c7:56:
ff:af:82:dc:e5:4e:aa:94:f2:97:5a:c4:38:c3:f4:f9:c9:ab:
98:10:67:90:64:30:3b:f6:60:d2:30:76:ed:5f:26:48:e1:84:
42:9a:ee:63:9c:36:bd:74:18:d1:1c:7f:dc:2e:24:3e:07:3d:
b7:75:ef:f6:88:e3:c1:2b:c1:96:b0:d4:d3:ef:78:da:e4:5d:
84:85:23:e1:91:9d:9e:9c:1c:cd:bb:41:3f:2c:b3:1e:a9:94:
25:46:fa:72:88:0e:fa:5f:4d:d1:3e:90:7a:e9:1c:77:e3:b9:
b3:24:7c:6b:8e:c7:9e:8b:f7:ae:a1:6a:7d:b0:c9:54:0a:f9:
5e:94:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:40:44 2026 by rpki-client