Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: Agu5tUeQRmlMNCv3+PLAtIuT0YL+wewDHVbeTb/cLuQ=
Subject key identifier: D8:1B:8B:A7:45:20:CE:E8:B5:F6:53:AC:25:85:60:02:08:04:1E:8B
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 019F92480B065D3608F15FFEA4115B29314E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 19C3
Signing time: Fri 24 Jul 2026 04:00:22 +0000
Manifest this update: Fri 24 Jul 2026 04:00:22 +0000
Manifest next update: Sat 25 Jul 2026 04:00:22 +0000
Files and hashes: 1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: RHNrM+Oo8gFXt/2hD/08dCRnPYk8YZnGMWR/AZgjtrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:0b:06:5d:36:08:f1:5f:fe:a4:11:5b:29:31:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Jul 24 04:00:22 2026 GMT
Not After : Jul 25 04:00:22 2026 GMT
Subject: CN=d81b8ba74520cee8b5f653ac2585600208041e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:c3:30:5c:14:da:8b:45:32:5e:95:19:94:
49:23:c2:37:ae:31:da:99:2d:9b:7e:aa:f0:32:7a:
10:7d:7c:96:3b:2e:5c:09:a0:14:bb:27:3f:95:83:
cb:ce:9d:d7:fb:45:ac:4e:82:49:bb:01:29:1e:95:
96:25:8a:ed:8e:5f:00:69:82:45:32:28:a2:05:3d:
aa:52:f4:6e:e0:41:74:62:5e:ab:33:cb:10:51:b8:
6d:09:c0:80:9d:72:e1:e7:b5:31:c8:74:74:eb:ee:
16:58:dd:2b:43:0d:75:89:ba:33:cc:47:ad:e2:3a:
7a:c0:b2:33:66:8a:09:d3:83:27:96:15:da:4e:92:
b1:ae:ef:55:7d:52:a7:7a:ab:a0:ee:04:ed:f1:e4:
db:ef:77:ae:f5:52:3e:7a:0d:38:20:dd:49:17:88:
e7:35:5f:2a:3e:8f:e7:cb:ac:0c:b4:67:05:b9:b4:
3e:4a:bb:bb:c8:07:ab:04:46:00:66:5b:a2:a3:68:
68:bf:0a:d8:a0:26:49:3f:be:04:0e:dc:7f:91:1f:
ed:ee:05:45:54:8c:28:a0:dd:c4:33:fd:a3:ce:3b:
78:3f:b7:bf:03:9b:7b:32:22:9d:8b:ad:66:6f:63:
68:81:55:ff:5f:8f:6b:a3:c3:84:7e:5a:19:6d:28:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:8B:A7:45:20:CE:E8:B5:F6:53:AC:25:85:60:02:08:04:1E:8B
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:99:98:54:00:f8:57:71:b0:0f:25:f9:48:1c:a8:5d:4d:8c:
44:24:2e:0f:ef:1d:03:54:49:01:86:5e:a5:18:6e:f1:56:73:
8f:91:d3:82:fb:df:db:11:0d:c0:49:7d:d9:45:1c:fa:46:d6:
09:8b:56:3e:6b:6e:c4:56:e0:d1:d3:d0:95:ec:62:84:b2:09:
4a:87:a8:42:cc:58:a8:00:60:c1:86:53:6c:a9:00:14:70:4a:
f3:d0:83:0e:89:0c:8a:b3:12:0c:76:5c:db:ac:8e:f8:bf:08:
4e:69:98:ad:d4:36:19:9c:09:74:bd:c7:53:66:1a:92:8c:ca:
e6:48:17:fa:8c:28:a9:97:c3:d1:da:84:c4:fb:30:8b:a2:31:
17:ad:89:37:14:e6:41:87:b6:94:a7:52:fd:98:d5:a7:70:4c:
51:5d:42:52:e2:c3:14:40:03:05:cd:01:a1:ca:31:9c:a0:18:
a9:96:66:d8:b8:94:a2:15:9d:4b:94:64:43:cf:53:9d:af:e8:
4d:e7:ee:a2:45:0f:98:63:21:6b:ce:5b:6a:63:b3:82:ae:51:
99:ae:19:66:0c:a9:e6:56:de:fa:8e:b9:69:28:48:7c:a0:d4:
3c:04:f9:87:bb:27:90:32:8f:5e:18:d5:a3:56:29:76:03:24:
b7:1e:b7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:01 2026 by rpki-client