Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
File: 5-aiybui7N1AdLMVN1mDXoI6uOQ.mft (raw, json)
Hash identifier: fdUXVMhXEwO7DPdL1wWcE4fvIbH5wpJur3x5eQkkwEs=
Subject key identifier: BD:6B:9A:10:BD:D3:E4:88:E1:EB:80:62:53:D7:28:CB:AF:C5:80:3A
Authority key identifier: E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
Certificate issuer: /CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Certificate serial: 019F8F10EA93E951B02B8B76DB62D6366F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
Manifest number: 10A5
Signing time: Thu 23 Jul 2026 13:01:17 +0000
Manifest this update: Thu 23 Jul 2026 13:01:17 +0000
Manifest next update: Fri 24 Jul 2026 13:01:17 +0000
Files and hashes: 1: 5-aiybui7N1AdLMVN1mDXoI6uOQ.crl (hash: uM7GW1bZmq9bSnbtXuPmScfaibDKweLKkIQOikeGdg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:ea:93:e9:51:b0:2b:8b:76:db:62:d6:36:6f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Validity
Not Before: Jul 23 13:01:17 2026 GMT
Not After : Jul 24 13:01:17 2026 GMT
Subject: CN=bd6b9a10bdd3e488e1eb806253d728cbafc5803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:e8:98:da:65:f8:8a:8d:bb:18:6c:82:d6:
57:05:17:05:d7:88:84:35:23:ab:14:a3:9b:3c:f8:
de:30:3f:a3:2d:50:e8:c3:a2:e1:fe:5f:be:c0:a7:
46:03:ae:8e:c0:b6:bf:de:4e:5e:90:86:38:82:dd:
29:19:4f:99:98:1f:ae:5e:c9:35:41:d7:1a:42:64:
63:47:d3:f5:aa:70:72:d3:03:78:06:fe:3e:30:6a:
f4:1c:02:7d:35:2b:5f:0d:4e:6c:d8:2c:4d:c4:b6:
41:b1:de:26:8a:e9:e6:8a:62:2a:ee:cf:31:7f:11:
d0:d8:41:4e:6e:98:71:29:c3:ac:a0:be:30:e7:b4:
32:d0:a5:e1:ed:88:e0:a0:0b:19:16:24:98:b3:2c:
00:65:42:04:54:45:87:f1:0a:a1:1b:89:40:45:67:
f7:56:e0:b0:20:6f:7f:c7:f2:bd:a4:42:42:6c:87:
8b:5e:f5:f3:b6:78:1c:39:34:59:8d:b4:dc:e4:29:
d6:ca:87:c5:6d:a3:db:7a:db:94:74:0f:2c:99:a2:
f1:d9:93:74:15:26:61:9e:b9:97:9b:fa:9d:56:92:
44:e7:39:a2:03:f8:89:30:46:fc:fd:5a:4b:75:ed:
b4:0b:7d:f5:2e:da:d5:83:00:de:41:fb:f7:11:9f:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:9A:10:BD:D3:E4:88:E1:EB:80:62:53:D7:28:CB:AF:C5:80:3A
X509v3 Authority Key Identifier:
keyid:E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:a3:52:71:6d:64:e2:8c:5f:e6:f2:60:49:be:d4:cf:b9:
45:b4:2d:b4:c8:38:55:08:7d:07:2e:5f:a7:65:63:9d:73:3c:
10:92:9c:b0:a3:6c:a1:5d:a8:43:20:25:22:8d:a9:0e:6c:49:
d4:64:a1:20:a4:dd:45:f5:bd:b0:d1:ea:ef:81:e3:ab:5c:f0:
1b:7b:e5:aa:e8:d9:e5:b7:d9:36:64:1f:04:f1:45:85:e5:e2:
19:6e:59:91:35:fc:38:56:48:be:0a:9a:32:dd:ea:ae:3a:27:
f3:26:bf:86:55:d7:8c:29:f4:83:fc:20:4d:81:4e:8f:a1:2b:
42:cd:33:39:29:9c:3d:cc:0a:e9:84:6a:62:ca:93:77:c0:6d:
cd:ba:90:54:cf:72:f1:8e:86:38:27:51:c5:f6:43:03:0d:93:
ba:7b:6a:7c:39:e9:08:77:b9:93:05:94:f7:56:89:79:09:9d:
1e:95:42:80:5b:d8:7b:f7:02:7d:8b:9f:89:6c:1e:a7:01:3b:
94:69:7a:a7:3c:75:a6:1f:4c:8c:5a:90:8d:6d:9b:7d:01:a8:
98:0e:39:9a:31:c1:3e:b6:06:7a:e9:39:bc:06:66:c7:6c:c2:
78:5c:39:5f:16:55:92:bc:ac:cb:f7:2d:49:20:30:48:38:64:
6f:7b:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:44 2026 by rpki-client