Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier: XMOctk7yTeYi1YTAzyhXL2GceFy0CgbkVOT76fOkyvg=
Subject key identifier: 86:6C:63:F3:17:50:6A:B0:53:EB:91:32:63:4D:31:40:60:D5:43:F9
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial: 019F8F7E21D3BA1B619FBD56341C991A0535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number: 1814
Signing time: Thu 23 Jul 2026 15:00:35 +0000
Manifest this update: Thu 23 Jul 2026 15:00:35 +0000
Manifest next update: Fri 24 Jul 2026 15:00:35 +0000
Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: dFoKB0w9nuUlqczAY9OSDX3SeTMYGWRr8br6ECHbQwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:21:d3:ba:1b:61:9f:bd:56:34:1c:99:1a:05:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Validity
Not Before: Jul 23 15:00:35 2026 GMT
Not After : Jul 24 15:00:35 2026 GMT
Subject: CN=866c63f317506ab053eb9132634d314060d543f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:0f:6c:eb:fa:ca:06:43:29:cb:4a:70:34:
92:0f:8c:fb:ab:a2:14:40:bd:9e:8e:4b:08:c0:c6:
d2:e1:8b:55:a3:3a:cc:2c:29:b6:bd:16:55:30:87:
08:df:f7:d8:be:13:df:b7:05:87:22:f0:1d:fb:ab:
3c:32:8a:04:dd:8b:66:ef:ea:50:4a:e1:54:14:df:
e5:b4:65:1e:b1:9a:fe:e8:1d:cd:55:94:88:8f:9c:
6a:d3:6c:a6:e0:b7:b0:78:02:35:a7:5a:1a:e2:b2:
b7:4a:71:3e:85:45:a1:f6:d3:82:de:41:86:bd:8d:
b5:27:18:5b:21:2a:f2:e4:89:c8:ad:fb:4b:3e:ab:
d1:e0:64:e9:bf:42:b9:33:88:07:de:5c:0e:c8:57:
ff:0a:3d:ee:b2:d2:e7:94:74:f6:0b:44:b8:99:34:
00:3a:29:3b:d6:c8:65:99:b1:11:83:76:f5:1a:b1:
3f:8e:ae:01:43:ed:79:5e:9c:c4:50:50:3b:67:f5:
ba:c2:24:9a:7d:b0:16:4d:cd:14:a7:5d:67:8c:e0:
90:01:f3:d0:08:d6:fd:9b:d3:5c:e6:79:cf:e0:f7:
f6:4e:4c:1f:5a:b2:f5:ab:13:a6:24:d9:a8:ee:d7:
ac:8c:f6:26:af:7c:59:85:ba:0c:5f:7b:ab:cb:7f:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:63:F3:17:50:6A:B0:53:EB:91:32:63:4D:31:40:60:D5:43:F9
X509v3 Authority Key Identifier:
keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:ab:2f:01:82:d7:e5:1d:2c:65:b0:e5:5c:0e:21:b5:e0:
2a:20:37:ef:e6:97:1a:d1:c8:dc:d6:dc:d9:03:a1:36:17:53:
4c:e2:39:77:7d:84:ba:41:7a:dd:8d:6b:c1:e1:24:53:8a:4e:
50:12:bf:52:6b:23:3d:d7:63:5a:2b:5d:a6:ad:40:6a:cd:23:
bb:df:89:ad:e1:f3:bf:28:58:c8:6b:ea:7a:1b:81:64:85:6c:
8d:30:66:62:f9:b8:f8:34:17:c4:bf:a5:1d:c1:59:c6:98:d7:
5c:c3:0c:ce:60:06:73:c1:5c:18:4b:5c:e1:df:2b:c8:d4:3b:
25:af:7e:1e:81:b5:97:ec:5a:20:ae:09:53:23:c3:8b:d5:1e:
a1:01:25:0a:80:c5:e6:73:e5:18:5c:57:f0:08:dd:78:2e:1c:
4d:91:8b:3d:8d:0a:20:ee:15:90:54:58:85:09:64:68:11:bd:
65:55:5a:aa:e6:93:07:d1:d0:de:84:62:9f:b5:06:39:81:04:
63:44:ae:99:cc:33:e2:40:73:cb:aa:89:2b:17:3e:b8:0e:d1:
f0:8d:3e:e0:44:fe:4a:37:39:2c:5a:3f:dc:c4:42:1f:2c:cf:
64:57:cd:31:13:3e:8c:6e:dd:e5:31:51:c0:a8:45:9f:f9:db:
d0:a0:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:21 2026 by rpki-client