Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File: 5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier: agxq0WKb2a1mlQs4rb+8fAHDjwbCsV+wzZa8b1VLjJ0=
Subject key identifier: 9F:8D:4C:2B:E3:2A:9B:6A:12:EB:B4:D7:B0:6B:B0:01:E4:0A:35:D1
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer: /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial: 019F90FEA0DC5E174229C4019414FD9A7EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 22:00:34 +0000
Manifest this update: Thu 23 Jul 2026 22:00:34 +0000
Manifest next update: Fri 24 Jul 2026 22:00:34 +0000
Files and hashes: 1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: kKXqTXFZhb3DsbDlWT/Wl3XRrDhTvTf1b0vsSL9TvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:a0:dc:5e:17:42:29:c4:01:94:14:fd:9a:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Validity
Not Before: Jul 23 22:00:34 2026 GMT
Not After : Jul 24 22:00:34 2026 GMT
Subject: CN=9f8d4c2be32a9b6a12ebb4d7b06bb001e40a35d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:7b:8f:97:a4:06:43:2e:55:84:73:b3:74:
ba:60:b9:c0:03:7f:6b:c1:f2:9a:1a:50:4b:ae:81:
ba:5b:27:17:86:8e:73:81:4c:63:36:bf:a9:9c:ef:
6d:5c:78:13:57:fc:3b:a2:e5:b5:12:9d:e3:df:1f:
69:3c:58:4d:8d:43:b3:7f:d9:ea:fa:4b:7f:a6:49:
ae:3d:4b:cd:0b:2f:ba:fe:5a:38:07:75:0e:8a:00:
e4:42:f3:86:8d:10:69:4a:ca:07:0a:e8:23:8f:5d:
06:2a:52:16:8f:9b:a3:b3:e5:1f:c6:a5:a7:63:da:
79:df:5d:ec:57:06:e3:7e:bd:14:55:40:ef:f0:2c:
9d:60:7b:e6:ce:7d:6f:78:62:09:b3:8c:8a:6c:3f:
3d:15:8e:47:7a:a9:04:03:f9:fd:81:76:c1:a1:9d:
f7:0a:8b:a2:b1:45:e3:c5:64:26:0e:67:d1:eb:38:
39:7e:9d:13:e8:32:f9:e2:5c:7a:88:2b:fb:2e:72:
3b:3c:e7:f8:83:05:19:ed:e4:d3:53:ff:ec:dd:d0:
4c:19:0b:92:1b:09:01:0b:55:c5:6e:d7:e2:7c:bf:
b1:0f:33:52:97:c9:38:f5:25:1f:b0:88:fe:ae:33:
23:75:bd:b1:88:fe:b4:07:8d:bc:a2:0a:26:d2:90:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:4C:2B:E3:2A:9B:6A:12:EB:B4:D7:B0:6B:B0:01:E4:0A:35:D1
X509v3 Authority Key Identifier:
keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f6:26:6c:fd:16:f9:96:68:21:1c:ed:23:72:be:1c:8a:c0:
48:f4:e8:87:74:c3:9d:c6:bc:f2:bb:9b:38:e9:47:4c:b4:f7:
a9:0e:24:4e:2e:de:fa:4e:24:fa:51:ed:32:e4:b1:c8:b4:17:
a6:a1:92:c1:99:9b:d3:8f:28:38:71:64:92:f4:3c:36:12:b7:
fd:ce:c1:a8:52:49:81:88:32:97:da:a0:cf:e2:33:57:73:1e:
0c:9c:2f:c0:6a:09:34:54:41:c9:9f:30:41:91:f0:37:7c:b9:
aa:67:23:4c:f4:90:50:5b:87:37:e0:d9:b5:27:33:b1:5d:ab:
88:eb:88:e9:cd:ea:6a:3f:a4:eb:52:1e:6f:c4:3b:50:2b:95:
e5:27:7f:e8:d3:e3:54:34:3c:05:0e:1a:b2:ff:91:2d:d9:55:
ac:fa:65:43:6d:e0:ea:ac:6b:13:75:41:43:55:3a:86:d6:2b:
4a:03:ab:71:bb:9c:12:d7:11:c9:17:56:2d:e9:0c:a4:ca:61:
13:de:ca:09:33:df:ef:0d:3e:e3:a0:22:5b:f6:57:a2:15:b3:
e7:43:87:e4:4e:ac:cd:47:37:63:46:87:4c:1b:81:71:b9:da:
64:8a:7a:12:63:30:e8:94:55:f9:d1:6c:3e:db:b8:b1:ea:c7:
85:75:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:17 2026 by rpki-client