Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft
File: 5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft (raw, json)
Hash identifier: 4Pt+Y6tnGVwkSP6Z3XNG3LVYEPDaYBRcBoP6nIURmKY=
Subject key identifier: 9E:67:6B:2E:CF:EF:05:A9:D8:3E:F4:B9:00:47:E4:89:42:9C:FB:55
Authority key identifier: E5:93:05:64:7A:FF:EF:D7:2C:4D:7A:0E:13:52:2E:D9:7E:7F:78:F1
Certificate issuer: /CN=e59305647affefd72c4d7a0e13522ed97e7f78f1
Certificate serial: 019F8F7F6DA04DEAD995FF5BB86684BC3382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:00 +0000
Manifest this update: Thu 23 Jul 2026 15:02:00 +0000
Manifest next update: Fri 24 Jul 2026 15:02:00 +0000
Files and hashes: 1: 5ZMFZHr_79csTXoOE1Iu2X5_ePE.crl (hash: yNvT3y1fw5jP6pZvcIFllNAKKmu3uRx+2z/3G0jf+ao=)
2: h8qBbhSusuq9upRRpmjdAL8J4Ng.roa (hash: LD2zVdPb/QGZotJ+OVpm+7m1ov66z3ukSOwQ1x7dwnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:6d:a0:4d:ea:d9:95:ff:5b:b8:66:84:bc:33:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e59305647affefd72c4d7a0e13522ed97e7f78f1
Validity
Not Before: Jul 23 15:02:00 2026 GMT
Not After : Jul 24 15:02:00 2026 GMT
Subject: CN=9e676b2ecfef05a9d83ef4b90047e489429cfb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:4b:1f:cc:d9:7a:d0:a0:ae:76:30:7c:18:
2f:06:56:c2:f3:f4:78:71:31:c7:69:94:7a:5a:f7:
a5:3d:78:e9:2b:6f:78:57:cd:8a:1f:07:88:b0:3d:
ce:0b:08:6b:54:7e:f6:19:5c:76:80:7b:69:52:2e:
3a:40:49:03:9f:af:aa:f6:98:03:0a:f6:ea:7b:df:
11:17:b5:19:ea:c4:11:cf:8e:f2:ee:08:79:0d:b0:
dd:b7:00:17:53:7c:82:ea:3d:23:69:51:14:23:37:
df:78:40:17:8f:3a:87:0c:21:b5:4f:ba:db:ec:40:
70:c3:b8:c9:6a:13:90:fc:26:0d:81:21:4b:d7:9d:
81:fc:79:6b:08:ad:a9:c9:00:96:c3:f0:35:20:fa:
05:95:e4:8b:9e:31:05:0e:94:d6:e1:e6:cd:d1:f9:
ea:f3:6c:ff:a2:54:33:99:5a:f2:a2:b3:da:11:5b:
0a:08:ba:55:37:aa:13:dd:be:10:98:7b:4b:af:86:
05:8b:d4:cc:bc:b1:46:40:fe:34:c3:68:13:8b:8d:
91:1d:40:83:25:fa:a5:ec:e6:72:a4:92:c5:d9:71:
f8:d1:07:c4:df:fe:cb:68:b5:de:54:b5:b6:4e:38:
d5:9e:02:7c:96:2b:ab:65:fd:bb:33:e4:61:be:76:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:67:6B:2E:CF:EF:05:A9:D8:3E:F4:B9:00:47:E4:89:42:9C:FB:55
X509v3 Authority Key Identifier:
keyid:E5:93:05:64:7A:FF:EF:D7:2C:4D:7A:0E:13:52:2E:D9:7E:7F:78:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6b:f8:23:12:32:19:c0:ce:f1:fb:82:b4:28:a0:1b:3c:3e:
b6:d7:64:f3:47:12:7c:46:5c:78:0d:f1:d5:e2:f9:e5:0d:02:
58:10:27:cb:aa:2b:20:74:d6:6e:5c:1a:90:37:36:72:87:2d:
ea:8a:e2:16:76:3b:68:cc:09:0a:72:81:00:e0:d0:4a:6c:78:
d5:bc:a4:b8:b5:4e:73:57:f6:76:10:a8:e9:0d:30:62:2e:50:
50:c1:74:6c:6d:d7:db:3c:57:36:1d:17:90:bc:58:02:0a:9b:
8d:b6:f4:a9:ae:d7:13:19:ba:c0:30:38:71:d6:2a:0a:41:fc:
ae:60:6a:89:44:20:0d:23:e5:ab:9f:39:d0:8a:c7:1c:be:7c:
15:63:5c:95:c6:87:d9:3c:e2:4a:f3:33:67:68:e4:a3:d5:d3:
c3:05:a5:b1:e6:3f:77:a6:a2:11:8b:53:b1:1a:81:10:91:2e:
41:a5:4a:17:0e:3f:e7:91:be:81:f6:95:59:b5:24:b0:cf:ac:
d3:9e:b7:81:0d:17:ce:61:49:2d:53:80:c9:70:7b:da:8a:9a:
6f:9f:5b:1e:36:2c:cb:c7:66:00:8f:9a:7e:a1:ee:48:cd:ac:
39:73:d8:9b:5e:aa:42:26:62:02:69:fb:37:7b:65:84:68:a4:
1d:3a:54:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf22gTerZlf9buGaEvDOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OTMwNTY0N2FmZmVmZDcyYzRkN2EwZTEzNTIyZWQ5N2U3
Zjc4ZjEwHhcNMjYwNzIzMTUwMjAwWhcNMjYwNzI0MTUwMjAwWjAzMTEwLwYDVQQD
Eyg5ZTY3NmIyZWNmZWYwNWE5ZDgzZWY0YjkwMDQ3ZTQ4OTQyOWNmYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU9LH8zZetCgrnYwfBgvBlbC8/R4
cTHHaZR6WvelPXjpK294V82KHweIsD3OCwhrVH72GVx2gHtpUi46QEkDn6+q9pgD
Cvbqe98RF7UZ6sQRz47y7gh5DbDdtwAXU3yC6j0jaVEUIzffeEAXjzqHDCG1T7rb
7EBww7jJahOQ/CYNgSFL152B/HlrCK2pyQCWw/A1IPoFleSLnjEFDpTW4ebN0fnq
82z/olQzmVryorPaEVsKCLpVN6oT3b4QmHtLr4YFi9TMvLFGQP40w2gTi42RHUCD
Jfql7OZypJLF2XH40QfE3/7LaLXeVLW2TjjVngJ8liurZf27M+RhvnbfAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5nay7P7wWp2D70uQBH5IlCnPtVMB8GA1UdIwQY
MBaAFOWTBWR6/+/XLE16DhNSLtl+f3jxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVpNRlpIcl83OWNzVFhvT0UxSXUyWDVfZVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMt
OTRjYTljMTY1Nzc5LzEvNVpNRlpIcl83OWNzVFhvT0UxSXUyWDVfZVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMtOTRjYTljMTY1Nzc5
LzEvNVpNRlpIcl83OWNzVFhvT0UxSXUyWDVfZVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2v4IxIy
GcDO8fuCtCigGzw+ttdk80cSfEZceA3x1eL55Q0CWBAny6orIHTWblwakDc2coct
6oriFnY7aMwJCnKBAODQSmx41bykuLVOc1f2dhCo6Q0wYi5QUMF0bG3X2zxXNh0X
kLxYAgqbjbb0qa7XExm6wDA4cdYqCkH8rmBqiUQgDSPlq5850IrHHL58FWNclcaH
2TziSvMzZ2jko9XTwwWlseY/d6aiEYtTsRqBEJEuQaVKFw4/55G+gfaVWbUksM+s
0563gQ0XzmFJLVOAyXB72oqab59bHjYsy8dmAI+afqHuSM2sOXPYm16qQiZiAmn7
N3tlhGikHTpU1g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:41 2026 by rpki-client