Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
File: DEIZ0r8JtphczV1I_ZTSshuATsY.mft (raw, json)
Hash identifier: zHtSTtmBq7hg0raYwwLseAkr5tjG5/5vcOYzHp3M0L0=
Subject key identifier: 5E:A5:ED:F9:1F:D1:1F:E7:15:22:E8:D5:05:BE:AF:BC:C1:EF:DD:F1
Authority key identifier: 0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
Certificate issuer: /CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Certificate serial: 019F902342C36DA74522210EDCA1408B4260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
Manifest number: 01CB
Signing time: Thu 23 Jul 2026 18:00:57 +0000
Manifest this update: Thu 23 Jul 2026 18:00:57 +0000
Manifest next update: Fri 24 Jul 2026 18:00:57 +0000
Files and hashes: 1: DEIZ0r8JtphczV1I_ZTSshuATsY.crl (hash: QiLsPexzk7yO7MY8Vg8NymdX6fxjWVM2ipm/2Q3du6E=)
2: GViLUpBKhpnABkhMhuMdD2J_oqw.roa (hash: 7Bdn6jISx+wiSsw/Erals+/gDIwz2wOl6w9gjca7wOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:42:c3:6d:a7:45:22:21:0e:dc:a1:40:8b:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Validity
Not Before: Jul 23 18:00:57 2026 GMT
Not After : Jul 24 18:00:57 2026 GMT
Subject: CN=5ea5edf91fd11fe71522e8d505beafbcc1efddf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:53:70:14:76:73:a2:bb:ea:39:86:11:43:
b2:d3:b2:eb:d3:40:94:5b:3b:35:6d:e2:5e:a3:78:
2e:24:f1:8a:06:df:7e:bc:99:fa:e8:97:f9:7e:48:
fa:50:44:fa:c7:e1:7e:f8:91:e1:71:fc:e9:4a:6f:
07:b7:84:76:54:8e:89:51:76:79:9b:85:25:2e:e6:
a5:ca:04:21:f9:89:5f:27:20:f5:66:83:c4:13:e0:
9d:d7:ff:b1:d6:32:6b:ba:84:8c:14:7c:aa:06:a0:
26:17:8d:3a:17:4e:ae:e7:6c:49:7b:d7:23:62:fa:
e6:62:b4:93:a4:8d:20:15:1a:43:cb:37:af:8c:70:
45:fd:3a:36:15:22:15:16:01:7f:b1:73:fa:42:79:
7c:44:b5:62:07:c3:f4:61:53:bc:fc:e3:97:cd:ff:
14:a4:37:3c:15:71:fc:7b:ed:fa:36:3d:01:be:5a:
f6:df:e2:e5:0e:67:c8:1b:93:e0:29:a1:28:64:a7:
fc:08:b8:66:a4:01:5e:5d:0f:01:47:5e:52:97:69:
d6:24:02:87:68:f4:3e:e0:49:7b:57:33:11:21:ab:
be:46:16:99:9e:e3:90:c4:e7:2c:60:52:ec:74:31:
0e:30:bd:fd:f6:7a:bb:4d:93:57:7b:32:a2:44:c6:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:ED:F9:1F:D1:1F:E7:15:22:E8:D5:05:BE:AF:BC:C1:EF:DD:F1
X509v3 Authority Key Identifier:
keyid:0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:fa:e9:1c:46:4f:5d:39:28:52:cb:cb:2b:c9:92:4f:0a:
0e:69:23:fb:88:77:60:00:51:a3:cd:67:41:3c:26:1e:a3:36:
c1:87:c6:99:ce:fe:b5:6b:22:bd:27:89:2c:b1:11:6c:1d:0e:
02:cd:54:7d:e3:80:2c:e3:a6:5e:9b:c5:01:26:7b:ab:91:57:
8c:74:a7:27:12:7c:a2:ed:03:a7:b0:35:c0:2b:94:5d:58:d4:
91:47:2f:70:7f:47:10:a6:82:82:e2:54:a4:4b:d2:25:fd:59:
ef:6f:34:1a:ee:64:d0:e0:49:6c:58:7d:da:ea:01:7f:6e:1a:
ca:1c:37:f1:39:4d:bc:08:8f:b1:f4:54:7a:7d:ee:cd:0a:ac:
41:df:ba:63:ed:cf:c9:5f:38:c6:28:4b:b7:5b:70:9d:15:3c:
9f:61:08:7b:81:93:74:b2:ed:41:3f:4a:56:83:44:c5:99:0b:
08:e4:ed:5e:4c:07:d1:ac:7a:8f:9e:15:8e:61:ca:cf:d0:de:
80:d8:47:9f:55:3f:73:f6:c8:03:b3:86:09:31:b7:b5:76:6c:
08:27:46:cf:a6:c1:94:6e:6d:6b:a8:7d:23:be:e8:82:3c:c4:
7f:95:08:1e:8d:a7:fb:90:d9:fc:d7:fa:25:e6:1f:66:04:f8:
25:0d:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:59 2026 by rpki-client