Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier: XFJwqltwD4RhDb9tzuhRUQD+bbBnyhiRBupVJ+nRkNI=
Subject key identifier: 24:7F:49:24:34:E1:49:12:7C:0E:A6:1A:F1:01:2F:AF:39:18:2D:1A
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 01A0DC846EF66E54B73F08193867E83F9648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 07:01:01 +0000
Manifest this update: Sat 26 Sep 2026 07:01:01 +0000
Manifest next update: Sun 27 Sep 2026 07:01:01 +0000
Files and hashes: 1: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: LV61zXUB27VxPPePJJ4AKsXe3OiOiMXSbg41lmXPcHE=)
2: op_F057a4GgIgBhETNDsjlr7XoU.roa (hash: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:6e:f6:6e:54:b7:3f:08:19:38:67:e8:3f:96:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Sep 26 07:01:01 2026 GMT
Not After : Sep 27 07:01:01 2026 GMT
Subject: CN=247f492434e149127c0ea61af1012faf39182d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:9f:25:c4:e2:fd:37:d5:a4:08:9a:ec:1f:
9f:57:23:92:5e:2b:61:e5:a6:e4:6b:44:9c:fd:e3:
e4:11:96:56:7f:69:33:31:d0:41:4b:a2:01:98:d0:
48:94:fa:42:4f:18:0a:78:54:be:5a:ad:d9:a8:54:
81:82:43:16:d5:0b:c4:76:01:99:0d:54:c3:fb:95:
fa:24:d3:7d:87:6e:d5:64:b4:f4:74:4f:a1:be:31:
ed:d1:a5:ce:99:12:90:91:15:6d:a5:75:ba:f9:e7:
5f:f7:f1:1d:d5:0e:91:2a:5f:3a:30:93:a4:81:c0:
4b:69:23:61:8f:43:2b:6b:82:81:16:83:38:87:f1:
77:58:c9:59:87:94:2c:e9:d8:52:23:3f:b5:49:f9:
75:06:3c:04:b6:3c:1b:a3:23:7a:fc:27:f3:12:3d:
92:e1:93:cd:0e:e4:f0:90:05:df:cf:2b:11:2a:19:
58:ae:4a:ff:03:90:3d:87:03:6d:fe:f9:3e:4c:cb:
4d:28:08:a8:b6:5e:eb:d6:bc:ee:2d:52:d9:39:ec:
f8:cc:d7:f2:eb:32:7b:f3:25:b5:35:24:ab:3e:cb:
0b:d0:c2:75:c0:1b:52:8d:89:35:66:50:ba:e2:c8:
a9:22:6b:74:13:99:22:e5:33:a1:bd:d0:74:a7:f6:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:49:24:34:E1:49:12:7C:0E:A6:1A:F1:01:2F:AF:39:18:2D:1A
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:29:73:7b:e9:e9:c8:01:80:e0:ac:41:fd:05:19:95:c1:a3:
a0:d7:04:87:3e:a6:68:92:aa:a2:71:23:f1:f5:df:5c:91:19:
cf:82:68:98:45:2c:e6:03:1e:de:0e:27:f7:f7:ca:35:c5:10:
fb:34:66:32:83:5e:7d:5f:27:c3:6f:f2:34:85:fb:e2:bc:a9:
c3:6d:fa:99:c9:03:8d:5a:f6:19:77:bf:81:ef:e3:8c:5b:54:
c8:f9:f9:77:67:24:c2:8b:ce:cb:6a:a8:5b:36:c7:3c:fa:a8:
98:81:75:d7:41:aa:04:b6:e8:8c:cf:1a:f1:f3:6b:e5:64:2e:
0e:18:fb:a1:a1:a5:d1:7c:74:a4:cd:c2:58:40:32:37:40:80:
88:de:5a:74:1c:02:5b:3c:2a:42:59:cb:c9:78:42:4b:67:93:
9a:a1:47:f3:93:9f:3c:0d:0c:be:95:4c:62:f2:37:f8:ec:a5:
c1:1f:ce:77:37:1c:14:23:68:cb:32:ee:19:e2:13:d6:24:2a:
78:c1:3a:53:06:6e:6d:dc:41:5d:35:b7:1a:db:41:12:9a:d2:
cd:d1:b7:d8:fb:71:75:2f:dc:8f:f9:24:fd:ff:b1:4f:70:22:
67:89:14:96:f5:8a:32:8c:73:4d:8f:98:a2:1c:94:79:ea:1d:
bc:38:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:05:02 2026 by rpki-client