Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: M0l0JW98/QviRL3JTjMuBE81IX2Vka9wfq3icAORbFE=
Subject key identifier: A2:C2:3D:FA:D1:34:63:D0:69:5C:3A:76:BB:64:4F:15:E5:9E:CE:E6
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 019F9059B4359D199FA92C8A5719DBE6FB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 1456
Signing time: Thu 23 Jul 2026 19:00:25 +0000
Manifest this update: Thu 23 Jul 2026 19:00:25 +0000
Manifest next update: Fri 24 Jul 2026 19:00:25 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: yZ63DlEgaRA9rJvYtWm1B9YkoYBZH4+VGlVj8NvtvMY=)
2: hLq5oWkJELQbNcRkoEuFG9HYL_U.roa (hash: yfA7tS4NCGXvzY+87zTkkeYt5A3me3y/07bpWLgYXqg=)
3: oXYPZ4avfp145oFgjMNonlejP24.roa (hash: comOe5RXUAfxCnEHSz+CE1aEiUDNnGCVQ5RAozO2Owo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:b4:35:9d:19:9f:a9:2c:8a:57:19:db:e6:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jul 23 19:00:25 2026 GMT
Not After : Jul 24 19:00:25 2026 GMT
Subject: CN=a2c23dfad13463d0695c3a76bb644f15e59ecee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:a7:d1:ec:c6:cd:a8:fb:e4:aa:e4:e5:89:
3e:e2:40:ab:0f:d4:58:bb:ac:f3:1f:db:49:89:20:
bb:15:db:1d:a4:2f:11:7e:a7:97:7e:d0:31:33:51:
1a:76:1b:11:fb:8a:b6:67:82:c8:1d:76:2f:07:7d:
90:e3:79:8f:ee:fd:6b:cf:da:86:ba:fa:b7:23:bd:
65:48:99:47:69:6c:58:dc:25:9a:00:ec:85:86:87:
85:04:b8:cf:8d:16:f5:ee:11:52:e4:57:81:dc:f0:
04:e2:82:ac:a7:4c:6e:13:62:7e:d1:18:21:60:ca:
28:27:24:78:9d:ef:46:f3:ea:93:f4:80:98:68:58:
77:89:c5:61:33:0e:7c:a1:ef:5c:b7:ae:9e:7f:5f:
80:8a:a8:5e:cd:45:6f:88:a9:aa:a5:3b:3a:b4:bf:
fd:d2:f9:b9:81:36:3c:36:14:b6:11:0f:88:04:23:
55:60:70:05:6a:c1:19:fd:f3:11:df:1c:18:ff:3a:
ba:52:e1:36:11:bf:17:06:66:f3:3e:7e:b7:f2:02:
84:4e:cb:5a:e9:ee:6c:99:cc:6f:1e:4a:60:43:07:
22:a6:3a:ec:32:74:b7:8d:f5:68:0c:59:84:69:7e:
58:51:4f:46:50:71:fb:0f:9d:4f:9f:05:40:bd:8c:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C2:3D:FA:D1:34:63:D0:69:5C:3A:76:BB:64:4F:15:E5:9E:CE:E6
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:78:e1:5a:d8:ff:bc:9a:a3:bb:9f:30:88:86:47:73:30:d6:
9a:42:4a:ee:a1:ea:6e:20:ba:a0:13:1a:8a:41:56:3a:f0:62:
2f:70:2e:47:ef:64:af:6e:3d:c5:9f:4e:75:64:84:c9:cb:08:
e7:eb:e5:32:76:f8:08:35:cc:5c:c6:0e:da:ca:b5:ad:f6:e6:
62:03:d0:84:49:6d:5b:78:dc:3c:94:38:5d:74:91:cd:49:33:
bc:77:a0:fe:15:a1:2a:fc:8c:0d:c0:35:00:ac:35:13:28:e1:
fd:6d:c2:31:9d:f2:f1:d0:4d:5e:6e:5c:d8:7c:d4:17:fd:70:
d5:4b:4e:a9:76:76:61:88:42:a8:32:1d:6f:5b:d4:54:0c:20:
d4:0e:11:9c:e8:bd:28:16:7d:45:4c:ab:42:79:89:72:ad:9d:
a3:62:b3:6b:e6:7d:8e:f9:e1:5b:c1:87:a2:5b:43:05:0f:7b:
26:74:9e:f7:f6:e7:25:0d:c7:6e:c1:2c:05:bc:41:22:84:57:
6e:62:7d:a9:bc:4b:cc:c6:71:2d:a5:72:e1:ca:8e:5a:53:36:
58:87:f1:65:1c:50:5e:34:93:0c:a3:16:62:d9:18:d2:a2:8c:
d8:6e:a4:14:56:ff:34:4a:ae:b5:06:d1:74:d0:a8:4d:a2:d3:
a0:9f:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:16 2026 by rpki-client