Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
File: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft (raw, json)
Hash identifier: 0OFoqe02zYu+f6SBSo1B3yGiPNbki7PvS6HCYVMQpsA=
Subject key identifier: 20:BF:9F:00:F7:CE:03:15:2D:3C:E6:64:0F:94:B3:21:16:8B:68:E0
Authority key identifier: E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
Certificate issuer: /CN=e731bb83a213f966e142b40da4f32cd6419ae219
Certificate serial: 019F8F7F1FD11EA0D8AD85FC019BCD396D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:40 +0000
Manifest this update: Thu 23 Jul 2026 15:01:40 +0000
Manifest next update: Fri 24 Jul 2026 15:01:40 +0000
Files and hashes: 1: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl (hash: h/L/MKFd4fyF3IGRAVtlWdcQQsb1a0FoW1jfg38eAXU=)
2: AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa (hash: 5mqmiz/CXkUW+cTJVY8j71HIi5cAxYNi2xnFmKTG/HY=)
3: yMvlwhzKfrY9een7T1c_eLiRjek.roa (hash: PbmjqOmGy2hPK1aLZZhguFnKLy5ZFRT3ye/VUztkdts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:1f:d1:1e:a0:d8:ad:85:fc:01:9b:cd:39:6d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e731bb83a213f966e142b40da4f32cd6419ae219
Validity
Not Before: Jul 23 15:01:40 2026 GMT
Not After : Jul 24 15:01:40 2026 GMT
Subject: CN=20bf9f00f7ce03152d3ce6640f94b321168b68e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:f6:44:ed:8f:5a:e0:96:6e:78:6e:4e:c0:
6d:1b:df:ff:82:99:f1:62:21:f6:66:91:2c:a9:4f:
0f:5f:ba:00:93:4a:16:a9:bf:57:99:1b:3d:19:13:
9d:0c:80:fb:02:48:e1:7e:4f:27:de:53:43:73:fd:
a8:dc:e4:c7:16:c0:60:ba:2d:49:13:1c:53:78:7d:
e5:83:c2:a1:4b:95:99:0a:9a:3e:17:0c:52:e2:ec:
1e:8e:00:d4:52:fc:35:1f:99:10:a2:1e:54:36:ee:
4b:b2:24:a6:94:d2:b0:cd:7f:e8:5c:0d:b4:31:e9:
c4:b3:f3:13:4c:d2:74:90:84:ea:14:bb:64:02:58:
80:af:36:1c:a6:32:67:17:85:f1:d4:21:9b:b9:af:
8d:7a:f9:b1:7c:6b:73:77:a2:5d:94:c7:9e:b6:11:
8e:3e:dd:25:3f:74:b4:e0:d5:bc:cc:e6:82:34:93:
da:19:9f:20:23:62:e4:7b:61:b1:81:2d:6f:e8:de:
70:f1:1f:f5:c1:46:57:cc:f5:31:7f:1a:66:bd:0e:
19:41:ab:1d:a7:00:e2:a8:5b:13:3a:a1:1d:82:04:
e9:cb:4c:14:56:ae:13:10:97:aa:6a:e5:c8:5a:b5:
51:5c:f2:85:43:d7:b6:ef:ba:bc:97:14:2e:80:19:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BF:9F:00:F7:CE:03:15:2D:3C:E6:64:0F:94:B3:21:16:8B:68:E0
X509v3 Authority Key Identifier:
keyid:E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:19:fd:af:76:10:e6:4b:5f:b5:c5:fd:97:50:f8:50:57:be:
44:6d:6b:77:40:c6:7b:01:a2:10:5c:cf:0c:5e:da:d2:1b:82:
1a:bb:2c:2f:c0:f6:49:5a:73:ac:2f:45:61:b0:94:16:18:a1:
4b:4d:18:43:89:46:80:91:70:38:1a:f9:d6:da:f7:fb:0c:75:
cf:ad:ac:06:52:63:21:9a:cc:8c:86:f4:39:6b:14:e9:cb:60:
f5:65:19:c8:71:d0:3f:dc:f8:1d:b5:14:00:87:08:40:40:a3:
17:ce:68:18:fb:2d:68:ed:01:c9:ab:19:bc:01:71:6c:b9:17:
f3:18:29:8b:19:65:74:26:12:b8:6a:cd:91:ec:4b:a2:75:8e:
02:b9:e7:c5:92:4c:7a:c2:98:ff:e2:7f:32:66:38:59:64:be:
f6:b1:ec:ef:03:c6:1a:c0:d6:8b:fc:86:2d:26:6d:e4:b9:b7:
0e:c8:5d:83:20:df:57:5a:1c:ba:74:2a:bc:81:7c:62:0b:c4:
f5:76:72:60:20:77:f1:6c:e2:4c:e1:ca:91:2d:42:66:d4:c8:
9c:3e:4b:4f:57:df:67:96:92:aa:f5:fe:61:04:6d:d3:5b:73:
f7:4a:cb:b1:59:60:6f:46:81:48:f1:1c:66:35:9f:7e:8a:99:
94:4e:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:31 2026 by rpki-client