Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File: 5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier: 6EvZpzenQ0MHR19pufeZ9OJ46mmdi/8BE2XqrAQ0VIo=
Subject key identifier: 37:EC:92:AC:BC:96:55:EE:DD:58:BD:24:BD:4E:47:F3:45:E1:8F:9C
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer: /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial: 01A0016F407B7DDD44CF6B7489C60C87952D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number: 1067
Signing time: Fri 14 Aug 2026 18:01:03 +0000
Manifest this update: Fri 14 Aug 2026 18:01:03 +0000
Manifest next update: Sat 15 Aug 2026 18:01:03 +0000
Files and hashes: 1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: XfEHn9wIa/OZy3u0UQC6RPD/VqLI9vimfMv1cJ1YZWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:40:7b:7d:dd:44:cf:6b:74:89:c6:0c:87:95:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Validity
Not Before: Aug 14 18:01:03 2026 GMT
Not After : Aug 15 18:01:03 2026 GMT
Subject: CN=37ec92acbc9655eedd58bd24bd4e47f345e18f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:a0:7e:bf:ad:a3:7c:18:10:b5:b8:8d:e4:
b7:cb:1b:e3:1d:22:11:a4:1a:e9:4d:0c:a3:11:1b:
59:20:d1:d4:66:aa:30:69:58:9f:e4:6f:73:ed:da:
1c:f1:d4:5a:e7:4c:fa:c6:a2:03:92:71:97:35:94:
05:51:88:51:3d:cc:0f:62:22:3d:db:fc:34:73:46:
78:ba:bb:79:e8:d9:f9:71:ca:e9:97:ff:32:12:14:
19:ca:06:b6:52:ba:4b:f2:96:f8:fe:c2:4a:ed:7e:
37:9e:19:84:c3:71:73:74:d2:f7:53:2b:e2:7c:2f:
d9:2f:3c:6c:92:32:e5:9b:87:5d:69:0c:c3:89:c7:
42:e6:ea:e5:18:16:da:71:e6:0d:6b:e3:d8:7c:47:
d4:06:7b:24:49:ce:18:43:f7:2f:db:46:d1:cd:d4:
66:1e:a5:41:49:31:06:b1:10:98:45:03:21:2b:4b:
cc:d7:33:c8:f1:ec:18:d9:fa:78:a2:80:10:ee:f5:
35:60:0d:32:2b:34:34:e6:7c:2a:42:d2:58:2d:88:
27:26:03:53:73:68:46:06:54:2d:07:dc:ec:72:a1:
42:c0:a8:55:0f:cc:57:3e:2b:70:ff:48:9b:d2:42:
4c:01:a6:2f:80:1c:4d:88:e8:a8:b2:fa:6b:6e:4c:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:92:AC:BC:96:55:EE:DD:58:BD:24:BD:4E:47:F3:45:E1:8F:9C
X509v3 Authority Key Identifier:
keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:45:68:ad:fc:dc:e3:f0:20:68:46:05:f6:c8:e0:d0:74:
e5:ac:3e:11:48:68:37:af:56:28:ac:22:f7:b7:63:49:d7:a5:
48:35:d0:0d:91:40:f6:45:a1:9f:da:1a:e6:26:4e:ae:3a:50:
f5:fd:c5:5e:10:1e:9a:5b:c8:42:e3:ed:b0:1f:4f:ec:d6:eb:
b8:31:2b:c6:45:bb:ad:07:82:d4:b1:12:0e:b5:5e:dd:98:15:
b2:7a:7f:a8:7b:4d:aa:24:7e:98:c2:8b:44:16:72:d2:5e:aa:
ea:15:f4:5d:af:c3:22:08:38:3c:2a:6e:a1:28:20:fb:a7:1c:
30:b5:4f:a2:9a:ba:7b:92:27:67:97:f5:a3:d4:39:dc:60:10:
ad:ae:84:91:fd:32:18:1f:68:d5:07:7e:85:c0:6a:a3:b9:58:
72:c8:b6:b4:99:e9:41:85:36:c4:53:f0:6d:f8:0b:ea:09:71:
41:47:6f:59:c5:d1:0d:7a:2d:61:02:8b:c3:6a:bc:39:4c:d8:
5d:d9:23:92:7d:c0:0b:cd:2b:97:70:4b:01:dc:a3:fe:e5:1a:
fe:a1:57:d0:0c:b0:20:2e:48:2b:c6:81:f1:fc:08:2f:7c:c4:
96:8e:21:43:4a:03:3f:5d:d9:20:ad:e5:52:eb:9f:88:47:99:
e0:e2:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:59 2026 by rpki-client