Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: cHs1d6uVr18c6fdDvKcnLKacC7ZO2LqQi1oQQeBG4LY=
Subject key identifier: D7:69:75:FF:D5:2C:4B:E9:80:F4:53:5F:1E:88:9E:D6:1D:81:70:5B
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019F9059D489C2CC052068F6B0130D6F68BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0B21
Signing time: Thu 23 Jul 2026 19:00:33 +0000
Manifest this update: Thu 23 Jul 2026 19:00:33 +0000
Manifest next update: Fri 24 Jul 2026 19:00:33 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: ICVjSkhQXUS5VeRogA7QeQDNTrL4sv8raT+nmAFgwlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d4:89:c2:cc:05:20:68:f6:b0:13:0d:6f:68:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Jul 23 19:00:33 2026 GMT
Not After : Jul 24 19:00:33 2026 GMT
Subject: CN=d76975ffd52c4be980f4535f1e889ed61d81705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:22:3b:a9:a6:2f:e1:6b:e8:60:ad:ac:89:
00:0a:5d:ab:d1:ef:58:05:35:62:8c:8d:ee:5c:70:
77:d5:7d:66:89:14:2e:8b:8c:c0:c8:b4:f1:3d:db:
b6:40:0e:79:56:f7:31:af:fe:c0:50:30:30:9e:e1:
ec:47:76:08:82:ab:de:a4:ad:d1:9e:27:0c:62:fd:
0e:33:15:46:84:ea:64:f8:c2:a3:56:72:46:d3:48:
cd:9e:9d:ea:d0:b6:5c:e7:28:05:fe:bc:ed:fe:e1:
44:ed:b6:ad:b0:70:ea:f7:8a:dc:11:be:95:9a:93:
fd:8f:af:67:14:c8:a9:a4:10:e0:cf:67:19:c9:0f:
b3:c2:72:8c:3e:ce:a9:32:c8:6f:1d:6e:c5:51:fc:
44:c1:79:65:0c:c7:57:14:a9:be:9a:b0:24:89:a3:
69:56:68:e3:1b:dc:55:df:70:42:3f:78:9e:ec:92:
26:fc:bc:14:19:3c:8a:6b:be:aa:47:b7:4c:08:ba:
19:68:2e:31:95:00:e4:ea:8d:80:db:78:75:d6:89:
c4:22:8d:cb:79:66:1d:e7:d5:83:90:e2:b0:a2:7c:
4a:60:76:29:ba:09:c6:01:62:da:ed:16:fd:84:4a:
5d:04:ee:cb:97:37:e9:8b:fa:3e:7d:f9:f5:2c:f0:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:75:FF:D5:2C:4B:E9:80:F4:53:5F:1E:88:9E:D6:1D:81:70:5B
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b2:e3:e8:3d:b4:b4:f9:67:28:09:f7:7c:12:47:19:fa:57:
22:da:e5:e4:b9:55:4b:b5:0f:88:63:aa:5a:4d:28:51:af:20:
70:ab:10:e2:96:e8:da:02:a9:b6:7f:58:4e:b8:9c:54:85:25:
5a:43:f9:cc:05:88:e2:7f:a8:5f:4f:43:c4:ed:b6:5b:56:9d:
c6:59:25:f2:e5:20:b4:ff:b8:38:1a:0e:91:f9:eb:58:e5:38:
ba:8b:9f:b3:1a:43:75:ba:23:b2:39:11:e4:04:4a:b8:6d:12:
2a:49:a2:c8:c0:81:ad:bf:1d:34:9f:79:35:61:af:8d:d6:67:
1c:e2:0c:77:c8:c1:8b:53:50:2a:10:5d:7e:a0:56:6d:35:8a:
06:fa:f1:69:c4:7d:fd:ae:a2:52:23:1e:a2:af:8b:3b:74:fc:
23:10:b1:12:57:51:8a:32:9a:41:82:1a:bd:38:4b:f4:af:13:
a2:72:cc:23:6c:00:fc:94:d6:6f:31:18:1b:a6:8a:27:3f:a0:
9f:aa:2d:13:a7:4f:ee:e3:86:66:84:3e:4b:71:6c:ca:cc:12:
d8:b7:91:e5:82:05:29:ef:c5:06:96:e4:77:c9:a9:bc:57:66:
db:94:94:7f:98:a6:15:8d:43:68:8c:63:df:7e:d9:27:fe:da:
35:0a:5b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:50 2026 by rpki-client