Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier: +PZP8axtpYHW8SfPDcehNkM2H9XeT+zozc9EQrjpzXg=
Subject key identifier: D9:E1:97:50:31:FC:9F:FF:19:B7:78:2D:E8:FB:84:53:5A:22:5F:0D
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial: 019F90FF7E469F66BA2AD85CD365C1C88C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number: 17E5
Signing time: Thu 23 Jul 2026 22:01:30 +0000
Manifest this update: Thu 23 Jul 2026 22:01:30 +0000
Manifest next update: Fri 24 Jul 2026 22:01:30 +0000
Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: UfV03KjzRRQPIyc2R1KqnnVtilhN2YjsTnUzxpgPOv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:7e:46:9f:66:ba:2a:d8:5c:d3:65:c1:c8:8c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Validity
Not Before: Jul 23 22:01:30 2026 GMT
Not After : Jul 24 22:01:30 2026 GMT
Subject: CN=d9e1975031fc9fff19b7782de8fb84535a225f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:24:e2:9f:33:76:22:79:d4:81:5c:a0:20:
b8:9c:81:4e:7c:1e:5e:e9:02:05:cf:61:bc:90:a0:
ac:96:8a:62:b6:d6:09:88:46:55:4c:47:a1:89:5c:
4a:2f:13:ee:e2:8f:11:af:aa:28:ec:44:7a:fb:23:
43:65:b6:05:7a:51:76:18:41:52:84:b0:3e:68:42:
e5:fa:f3:7f:b3:79:fb:45:51:83:ad:78:cc:83:32:
a9:bf:b9:06:13:35:60:5f:08:fd:20:b7:ee:5e:e0:
a7:34:33:01:a6:76:ab:67:47:92:76:28:e3:35:3d:
f7:64:84:6f:69:56:17:09:a8:1c:e4:58:8a:51:66:
cd:e9:87:76:80:c1:ee:8d:bb:7c:34:49:f1:7d:4f:
ba:a4:de:48:8e:0b:b5:4b:ae:20:11:14:03:31:e3:
35:fe:08:b1:8b:57:c4:67:b6:07:ef:cd:5e:cd:06:
e5:c7:1e:3b:80:00:e7:cd:3b:6b:54:70:7d:55:c9:
3c:e3:dc:34:35:9f:59:63:1d:0a:56:5d:3a:8f:b2:
2a:76:6e:3a:6f:dd:ff:61:da:a6:07:f6:c6:3b:87:
54:e8:9c:64:cd:b5:bf:3e:72:48:4a:dd:30:17:0b:
ab:fb:f2:4a:5b:f5:e7:8c:d1:59:d9:05:a5:97:49:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:97:50:31:FC:9F:FF:19:B7:78:2D:E8:FB:84:53:5A:22:5F:0D
X509v3 Authority Key Identifier:
keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9a:0a:10:cd:c9:5c:f4:33:68:76:5c:50:12:3e:c4:38:0a:
b2:f3:d3:3e:ff:43:8b:93:af:e9:57:ca:c2:d5:05:34:a9:df:
47:ff:e5:20:44:0a:6e:ca:84:78:15:63:12:a5:99:7c:31:14:
c0:1b:81:db:32:1d:db:57:22:f6:b7:b5:26:74:ef:d7:2e:9d:
36:79:76:0b:b0:bc:ad:43:63:b5:20:5b:88:d6:a8:2d:e8:ba:
53:4f:d8:cf:00:d6:ab:3b:15:40:8c:2f:96:a2:6f:a4:88:9b:
f2:01:af:1d:c1:77:5e:b0:b1:99:9e:11:5b:fe:fe:19:f6:80:
47:d6:ad:30:67:da:69:30:8d:41:87:2d:d9:b7:47:29:dd:64:
27:12:1d:82:98:66:be:22:85:33:fd:c1:d3:74:bd:c4:f7:8a:
2b:4b:af:0d:d6:3f:69:13:82:d6:5b:ef:33:e5:c0:fc:25:72:
24:2e:1c:d8:94:b3:b4:d7:bd:39:7c:88:50:cb:a4:c7:11:a2:
f3:ca:f6:5f:63:d9:e9:c3:3f:20:d8:b6:35:91:a7:0c:ef:3e:
ec:7a:0d:42:90:69:d0:34:fe:4e:1e:6d:cd:80:02:d6:f8:c0:
fb:c4:9a:24:b4:84:ae:f6:61:19:8c:62:cd:81:01:3d:2d:61:
84:95:00:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:46 2026 by rpki-client