Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: jav/SiA9TfVA880Ohh53BJJK73IIXBCXTFXZPFnxIks=
Subject key identifier: 8E:9C:E2:25:B2:A4:0C:20:8D:14:3C:85:C9:C8:04:F1:95:4E:F6:AD
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019F3D4FA327F50D1B74FDBE2FFD8DA19C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 09EF
Signing time: Tue 07 Jul 2026 16:00:56 +0000
Manifest this update: Tue 07 Jul 2026 16:00:56 +0000
Manifest next update: Wed 08 Jul 2026 16:00:56 +0000
Files and hashes: 1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: Qc3MH/VwLLRmAla2aj35O03oBrNlOY1YmpY+DBPZecs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:4f:a3:27:f5:0d:1b:74:fd:be:2f:fd:8d:a1:9c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Jul 7 16:00:56 2026 GMT
Not After : Jul 8 16:00:56 2026 GMT
Subject: CN=8e9ce225b2a40c208d143c85c9c804f1954ef6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:c8:bb:65:61:a2:e0:68:89:33:c6:4d:58:
d1:76:2b:94:6d:2d:43:59:be:a4:81:e0:fb:40:1b:
7a:9c:b7:5f:a0:16:52:c5:70:3f:01:d4:5b:e3:a6:
23:a1:4a:d4:59:f6:81:e6:fa:d5:a9:fe:a1:cb:63:
29:59:6e:54:98:94:74:80:5e:1e:26:82:b5:ab:29:
b6:2b:b5:82:43:d7:3b:f2:38:c0:03:d6:44:a7:b9:
b3:e2:13:67:42:e9:4b:fa:8e:67:62:6e:0f:a6:50:
8c:d5:80:8f:b1:4a:dd:f1:d1:ed:96:a1:e6:73:81:
6c:8f:f9:b1:64:bd:c7:9b:8c:70:dd:94:6c:a1:36:
36:e8:54:fb:b0:0a:d2:5f:5a:6c:9c:7e:0e:29:7f:
cd:fc:e8:9f:c4:d0:bc:cd:93:fb:29:0b:ad:26:cb:
a0:0c:7f:b4:f9:c8:b4:3a:80:c9:a9:b2:a2:e3:96:
3c:20:8a:e5:f7:a4:38:2d:90:bc:a2:ea:92:0c:95:
aa:d4:f8:b4:8f:49:fb:e2:d3:53:7b:3e:fd:3d:11:
31:93:2d:d8:95:a6:be:50:bc:5b:48:85:2f:b2:b9:
01:23:a1:29:33:f0:86:2b:af:48:f3:2a:9d:16:8c:
23:86:92:4f:db:53:5f:0e:5c:00:28:07:9a:fe:e1:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:E2:25:B2:A4:0C:20:8D:14:3C:85:C9:C8:04:F1:95:4E:F6:AD
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:74:36:4d:0a:ed:dd:b7:79:19:17:de:88:d3:3e:47:e0:
70:46:b9:7b:e7:b1:7c:e1:3e:6f:44:ce:39:30:46:2a:95:7b:
ec:9c:19:22:3b:af:ed:25:7b:60:b7:86:d3:4f:1b:d1:05:7c:
85:83:88:9e:a6:17:dc:36:86:ef:8c:4f:58:cc:45:a7:dc:5d:
dc:33:92:4b:5a:65:61:2a:e7:f2:e9:c3:91:24:d1:45:7a:91:
0a:f0:0c:37:b6:36:9a:d7:49:6a:5f:7b:4c:1d:73:e5:9b:84:
f1:a5:95:50:1f:5f:a1:a9:6a:8a:25:ec:f0:74:8c:39:63:30:
11:4e:76:33:5b:15:47:35:f7:83:c5:71:76:81:2f:1b:62:8d:
59:c7:45:4c:50:f4:9d:3e:35:fd:19:43:a2:df:a6:05:33:69:
62:f4:1a:92:5c:5f:86:38:42:24:40:ec:5e:5c:ee:9e:80:d4:
7f:e8:5a:00:bb:df:22:9e:76:84:65:f4:e0:d5:f9:ff:48:23:
e4:9e:6a:d7:df:24:11:7b:44:40:ce:7b:56:0f:92:08:66:06:
9e:52:ff:c0:8d:9b:78:72:79:ce:97:37:98:90:94:c5:1a:34:
80:ea:1b:24:f2:70:01:07:69:1c:3f:89:de:09:cc:93:b9:2c:
aa:4f:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:58:42 2026 by rpki-client