Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: pLnKYrFCj0Uhw4sIhB1OYrvq3S7El+dUZbm4eOwpRTM=
Subject key identifier: 0E:12:D8:7B:72:E7:44:4E:B8:2A:FB:3C:01:D7:E8:E4:43:B5:F4:98
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 019F939233E865770784555741FE604D7ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 10:01:00 +0000
Manifest this update: Fri 24 Jul 2026 10:01:00 +0000
Manifest next update: Sat 25 Jul 2026 10:01:00 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: LGqp/pqlXJEvd/MPGrzS3oR3H7VDyIbOChKJkIJpIhs=)
2: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (hash: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:33:e8:65:77:07:84:55:57:41:fe:60:4d:7e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Jul 24 10:01:00 2026 GMT
Not After : Jul 25 10:01:00 2026 GMT
Subject: CN=0e12d87b72e7444eb82afb3c01d7e8e443b5f498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:28:49:bd:ff:2a:3c:86:a9:de:72:fa:4d:
a7:5b:56:45:41:40:25:d3:b3:40:61:cd:76:0a:a0:
e3:dd:56:0d:0f:59:10:ae:84:75:2d:95:26:19:62:
11:90:2b:81:46:05:ea:b5:31:c2:aa:90:10:ba:75:
d1:9f:18:b0:d5:ab:46:33:89:d6:63:6d:6a:46:59:
43:43:d5:34:d1:bd:5f:43:a7:9d:9d:a7:f0:64:5a:
d8:bd:3a:8a:05:97:67:af:62:5a:01:3d:bb:37:7e:
2d:a4:d2:12:1e:36:16:8c:53:b7:bf:fc:c3:d6:49:
5f:40:98:77:f0:4e:57:12:e4:12:ab:c4:48:0e:95:
1e:c2:bf:bd:64:60:7f:b6:36:60:6a:0f:81:8e:3f:
66:b9:22:b0:ad:60:8b:1a:dc:fc:ff:a5:b2:e1:ae:
63:56:bd:23:23:f8:d9:6a:b6:cf:0c:92:bf:a3:97:
73:98:6e:30:5b:5b:b3:36:c2:fa:10:40:03:e2:00:
cb:00:3b:52:fa:a4:af:01:47:c6:56:40:96:f0:7b:
9b:3f:df:b5:e1:81:a4:43:89:d2:2f:99:76:e0:63:
12:18:c4:ba:93:68:5c:91:e4:98:de:f1:fe:5b:53:
4e:60:b9:08:9f:32:04:6a:30:b2:bd:d4:6d:16:16:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:12:D8:7B:72:E7:44:4E:B8:2A:FB:3C:01:D7:E8:E4:43:B5:F4:98
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:58:17:60:fe:ca:29:fc:d4:18:ff:63:d8:81:aa:a3:b4:e7:
62:92:bc:5d:25:47:88:01:8b:7e:98:f7:24:c4:7a:2a:73:ba:
9d:85:cd:f2:46:5b:0d:f5:77:9e:ef:51:e6:84:f7:c6:54:04:
42:54:22:6c:b1:b0:bd:de:1e:d4:73:13:1e:7f:43:db:8c:e8:
8c:f3:fa:d5:43:48:27:4e:c4:d5:41:4f:70:0a:8a:63:2f:62:
c7:58:f3:9b:b8:53:b8:28:c6:67:59:37:20:aa:2f:04:0d:d6:
ae:76:98:5c:ce:49:a5:91:f2:66:70:e0:a6:5d:25:fe:1b:ec:
4d:22:c3:dd:15:a6:0d:b6:b7:89:d5:51:4c:07:c4:b6:16:1c:
fe:ab:4b:d8:eb:dc:cf:33:ee:14:34:f3:5d:36:53:25:24:47:
7a:1e:22:55:07:ee:c3:8c:c9:b8:48:73:7a:a2:0e:d6:c0:88:
b0:c1:95:45:98:ae:71:96:9b:5c:25:b3:ee:6e:00:ce:80:27:
50:e7:4c:14:81:5f:60:2f:1e:02:6a:40:ac:28:f3:56:87:25:
4d:86:24:d4:88:53:18:15:3c:45:f9:59:87:02:14:ae:41:9d:
f4:44:74:fc:64:89:a7:cb:af:79:f7:8e:52:5b:43:d8:df:d8:
78:3b:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:36 2026 by rpki-client