
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: aCWKKqlemzQM55Hg0K8sO02mwnHIwYzzLzGKdit23GI=
Subject key identifier: 0B:62:4B:53:1E:B7:9B:16:90:1A:43:63:EE:74:04:70:86:92:48:08
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019F72F4B341C97E5CDB74B400ED209A9973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 19BB
Signing time: Sat 18 Jul 2026 02:01:06 +0000
Manifest this update: Sat 18 Jul 2026 02:01:06 +0000
Manifest next update: Sun 19 Jul 2026 02:01:06 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: VJ42o4B8s6j3L2dXvHgWjOXe5vf9BETOkvaIbaF97Ek=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:f4:b3:41:c9:7e:5c:db:74:b4:00:ed:20:9a:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jul 18 02:01:06 2026 GMT
Not After : Jul 19 02:01:06 2026 GMT
Subject: CN=0b624b531eb79b16901a4363ee74047086924808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:e0:bf:bb:b2:c8:0d:69:81:16:1c:86:b2:
49:b5:0d:ee:2c:22:31:24:2e:4b:61:75:11:08:42:
9c:69:dc:4b:84:af:0d:cf:49:29:be:5d:66:b2:f7:
43:d4:df:06:98:09:3c:63:d2:43:15:df:93:ea:ba:
15:82:ba:43:2e:71:24:d2:e5:d2:00:cd:07:a5:51:
28:e5:36:10:89:6b:ce:22:37:22:2c:42:b2:b3:9e:
d2:9b:cf:60:9d:7f:11:cd:bc:14:28:7b:96:6c:ab:
85:9b:b0:51:2d:a4:f0:68:28:b6:fb:6e:bf:3f:1a:
14:2d:32:bc:fb:bc:0e:01:54:78:6f:c3:85:b1:9c:
15:e4:03:34:96:1c:81:0c:b6:4c:6e:aa:81:24:4f:
40:1a:9c:5c:fe:f6:ef:2f:e3:28:de:3a:36:ff:06:
5e:d0:23:da:77:fb:a9:ee:d1:4d:09:6e:b4:52:92:
a7:88:d6:96:b3:95:cb:2e:13:27:ae:97:ca:c4:43:
3a:d9:1a:eb:1e:3e:97:56:a9:bc:5d:f5:b0:a0:a0:
3d:de:cb:f8:57:53:f0:4b:93:df:af:c9:f1:36:7e:
c7:34:70:e4:f6:fa:89:02:77:f3:e0:9e:84:17:ea:
f6:0c:29:b8:55:18:c3:45:02:12:43:ad:3e:c9:fa:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:4B:53:1E:B7:9B:16:90:1A:43:63:EE:74:04:70:86:92:48:08
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:34:31:9b:9f:61:53:da:15:14:79:11:14:75:d8:20:fb:f9:
b1:a2:b3:bd:6d:7d:4d:be:a3:88:f1:47:b9:5f:ff:3a:d8:ce:
51:ad:79:67:54:ce:54:76:32:ed:33:1b:fa:e4:fa:cc:9b:4c:
69:f0:8a:82:02:44:c7:e3:ed:b2:19:c2:66:c5:4b:b1:b7:fa:
ef:5d:2a:0b:76:2a:fc:c9:c6:05:b0:98:c6:ed:c0:60:c4:fa:
46:34:ea:3c:ba:70:be:31:d1:36:e6:15:e1:2c:11:8a:6b:e8:
34:25:30:df:17:23:86:e4:b5:35:9f:40:8e:36:96:59:28:d4:
4e:8c:08:0e:2c:cc:1e:dd:fe:20:e8:d2:7d:ce:ad:9a:f4:af:
1a:cc:8d:68:e3:5c:28:8f:1d:4a:66:84:00:7a:86:48:6e:96:
76:41:7e:60:f2:98:4d:2f:8b:40:93:53:47:36:03:28:ec:d1:
83:f0:21:68:05:e2:e0:aa:dc:a1:cd:0e:1d:5e:a8:00:30:4c:
3e:92:40:f3:e1:20:f4:88:b0:2f:3a:83:79:d9:ba:73:7c:24:
39:74:a6:50:32:4e:17:a9:d1:fb:f7:fc:fa:4a:45:2f:aa:a0:
b8:24:f7:02:b7:7c:d2:14:7e:50:70:62:eb:b1:e4:47:3e:9e:
28:9f:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:10:28 2026 by rpki-client