Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: ZvH9321xIvBbldtaF0tv0ie6iE9dnpjhMUkolb7uv5U=
Subject key identifier: F8:3A:5C:91:7E:54:40:3C:52:A3:03:25:5E:FA:BE:8D:33:35:86:C2
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019F8F10F713BD95AA2D29DB4454BDF25361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 0A72
Signing time: Thu 23 Jul 2026 13:01:21 +0000
Manifest this update: Thu 23 Jul 2026 13:01:21 +0000
Manifest next update: Fri 24 Jul 2026 13:01:21 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: FBqEdj639C3mL6tMutEmj9lIGXLjtvo252OlqTKV2xw=)
2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:f7:13:bd:95:aa:2d:29:db:44:54:bd:f2:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Jul 23 13:01:21 2026 GMT
Not After : Jul 24 13:01:21 2026 GMT
Subject: CN=f83a5c917e54403c52a303255efabe8d333586c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:f8:b9:4e:d0:fd:96:f1:9a:9a:9f:48:a9:
e0:54:11:2a:5e:60:03:35:34:18:09:75:bc:80:4d:
9d:01:cf:d4:73:02:a5:a8:ce:e6:d4:f7:2a:aa:ee:
d0:65:ba:21:58:cc:7d:f4:76:5c:ea:e3:88:4a:4c:
6b:28:4f:cd:d4:33:5c:0b:a5:ca:a1:ef:13:03:4d:
42:35:42:16:71:32:ba:09:40:48:70:41:22:50:44:
54:ce:91:9c:a9:0c:28:39:df:c4:03:b4:63:1c:de:
f6:85:c5:0e:fb:d3:97:31:9e:15:5f:d8:99:42:ff:
c3:ab:82:20:df:f1:b8:7b:77:db:76:71:c9:e4:1d:
d2:8b:7b:15:ed:a0:7f:2e:21:77:4d:70:69:6f:8c:
a7:6d:44:1d:d8:a2:24:36:d0:7f:47:fd:3b:75:fe:
7f:0c:66:a9:24:0c:ed:bd:ab:5e:60:64:a7:6b:8d:
7a:48:f0:bd:81:48:94:31:e0:c6:0c:16:e0:09:09:
e0:ce:98:ba:b8:52:b9:b6:b4:24:b7:91:cb:29:5c:
cf:70:83:10:f7:68:49:53:c1:52:60:32:7a:38:9e:
6d:8e:c9:93:5d:12:2b:eb:97:55:d4:2f:bc:28:c4:
8a:8c:c1:f3:74:d8:2f:44:8a:35:18:47:4f:72:f7:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3A:5C:91:7E:54:40:3C:52:A3:03:25:5E:FA:BE:8D:33:35:86:C2
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:95:15:c6:d2:55:f9:51:33:a0:d1:c9:cb:43:6b:ec:13:9a:
bb:7f:a5:9a:24:9a:3e:35:f2:e9:67:ba:b6:cf:9e:67:33:25:
b7:ec:70:bd:9e:aa:aa:09:a0:67:80:92:c7:f8:74:f6:6c:11:
d3:00:71:a0:33:54:92:a0:a3:da:b2:ae:4d:99:28:b9:61:0d:
f4:37:e2:f4:74:c4:d8:a6:0b:44:5c:46:f3:a7:f9:6e:6a:29:
77:87:cd:d0:1f:c5:69:04:62:0e:62:5f:fc:89:02:94:03:6b:
4e:29:91:36:43:fa:06:48:3a:bb:dd:3b:df:e6:bc:d0:2d:43:
bb:35:ad:f4:b0:86:36:9f:cf:39:72:23:ff:0a:8b:bb:e3:1f:
21:e8:f1:f9:b6:fc:ed:d9:82:4d:6d:df:60:0e:e7:b2:f9:e7:
85:80:8d:63:a0:70:e3:4b:25:33:71:4b:43:00:0b:2e:28:c1:
d4:74:39:45:40:f0:bf:72:9f:61:10:a3:6e:11:1d:ad:76:98:
ec:cf:8e:ab:01:d5:b3:a2:42:f7:e0:f7:5e:63:bb:05:1e:6e:
da:6a:92:50:7f:a1:81:84:39:28:06:29:0a:99:83:19:63:ea:
97:a1:e8:b1:71:12:35:f8:8e:d5:1a:a6:39:1c:28:6b:a2:2f:
13:b2:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:52 2026 by rpki-client