Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: 8HS1KmCvlGKBTMfTTULVGp+n5HHUiyyYMUHRGmTJRio=
Subject key identifier: 26:D0:67:98:E0:73:9C:1F:6E:7A:5B:EF:3B:E4:64:6D:2C:0F:EC:17
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 01A001A674550C952B75CA1775774B36A395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 19:01:21 +0000
Manifest this update: Fri 14 Aug 2026 19:01:21 +0000
Manifest next update: Sat 15 Aug 2026 19:01:21 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: HpZm2jPkefmnE2679Pet5OXzpkW43VCNV8f5evfgCN4=)
2: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (hash: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:74:55:0c:95:2b:75:ca:17:75:77:4b:36:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Aug 14 19:01:21 2026 GMT
Not After : Aug 15 19:01:21 2026 GMT
Subject: CN=26d06798e0739c1f6e7a5bef3be4646d2c0fec17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:43:ad:58:08:e5:28:fe:76:53:ec:65:2d:
da:01:ae:28:fb:27:87:5f:e1:1d:80:9c:34:8a:4c:
69:7b:f7:37:b8:f3:ed:d9:6e:c7:18:6f:59:a0:74:
78:10:89:fe:84:df:65:11:32:cb:d8:11:0d:fb:99:
85:d9:bc:8a:91:02:ad:0d:f0:0c:4e:c5:9c:e6:d6:
64:71:bc:83:f8:7c:9f:8d:17:c6:c8:45:68:8a:a3:
36:03:be:f0:0e:a6:46:94:65:71:d3:f0:41:4a:b8:
5c:6d:93:92:bf:5d:04:cc:29:69:36:b9:fb:ab:e6:
ac:cb:dd:2f:d5:c6:05:a4:4a:82:a0:3c:84:3f:fe:
f8:55:89:b6:e4:98:b9:2f:a5:14:b4:07:62:a9:05:
f2:a7:0b:c6:f9:85:1e:8f:94:58:5d:70:f6:76:d3:
8d:fa:f5:39:f1:c8:53:a9:1e:98:0e:ea:5d:ec:7e:
97:41:b2:3d:db:bb:4b:58:77:ea:05:87:9f:e6:e5:
cb:bb:e4:a1:0b:3d:43:e2:6b:f4:54:a1:ff:e6:01:
28:6d:67:6d:a2:2c:41:5c:43:b2:10:98:4e:5a:80:
06:07:63:78:59:af:52:eb:12:bf:dd:90:df:91:0e:
18:71:9e:d2:e8:cd:d3:d3:f5:8c:71:83:a2:82:68:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:67:98:E0:73:9C:1F:6E:7A:5B:EF:3B:E4:64:6D:2C:0F:EC:17
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:58:2b:b3:0e:cc:51:45:ca:72:f8:a8:35:b2:89:17:23:d0:
25:55:79:e0:1b:88:cf:36:9a:26:7c:d8:c0:e9:17:ea:f2:46:
8e:e8:b0:18:4b:f5:86:53:db:dd:6f:b6:d4:d1:32:48:20:c7:
df:b5:73:3f:c4:58:df:d7:bf:12:c1:48:08:f5:ad:bd:8c:7f:
51:40:ea:84:4b:eb:e8:d8:07:66:f7:72:35:f7:9d:37:b1:fd:
f8:76:14:4a:c2:7e:54:20:ab:d2:56:ba:3b:00:f6:98:bf:df:
14:1c:3a:ec:40:41:2f:27:5d:28:a9:22:45:81:13:cc:d0:b5:
9d:ef:7e:63:96:6f:2e:d1:3d:d7:aa:01:d9:6a:00:bf:91:30:
24:e3:d1:0b:a0:92:d6:88:b3:92:03:70:e2:63:a0:83:74:5e:
94:de:f5:89:80:74:1f:16:af:b5:20:1a:b2:08:4e:8b:3d:91:
85:bd:6c:51:5e:b2:a6:89:73:67:15:bb:25:47:1d:1d:6b:d6:
0b:3d:90:95:19:68:a6:a0:85:7a:13:f4:4c:d2:27:e6:8b:6f:
59:dd:e9:2d:d0:97:4f:0f:00:87:28:f9:d4:f3:e2:e2:f6:72:
48:9a:d4:8f:21:e6:76:14:dd:46:3c:49:3d:e8:1e:86:72:2d:
d1:ff:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:52 2026 by rpki-client