Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: 0kAqVoh5Nr60fcsZltnll8xHf2Kk6cpfOxB+0qXNTI0=
Subject key identifier: 63:B4:8A:6E:65:CA:B9:2A:B1:90:C7:00:8F:7D:52:EB:5C:11:EC:65
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 019E3185CC0F4F74EC1B2BECCE54E78A007A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 1237
Signing time: Sat 16 May 2026 16:01:52 +0000
Manifest this update: Sat 16 May 2026 16:01:52 +0000
Manifest next update: Sun 17 May 2026 16:01:52 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: ltsVJVDNL3tKGtKkzcjwjM/l72E5eWbSl4m2n4TEqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:cc:0f:4f:74:ec:1b:2b:ec:ce:54:e7:8a:00:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: May 16 16:01:52 2026 GMT
Not After : May 17 16:01:52 2026 GMT
Subject: CN=63b48a6e65cab92ab190c7008f7d52eb5c11ec65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:ce:9b:2f:e6:84:dc:da:a8:95:37:7e:c9:
1e:56:24:78:07:b0:7c:32:7e:19:df:7e:b8:ec:4d:
09:e7:10:c8:c3:11:89:83:1d:d9:2d:00:6c:fa:79:
8a:6a:fd:e1:12:59:a7:bb:9d:6d:5c:ed:66:f3:27:
11:bb:2d:58:ea:92:7d:be:fd:e3:fc:99:34:e0:b5:
1a:04:4d:c8:44:fd:d0:20:f2:59:1f:ee:c3:34:31:
2f:63:f2:9e:6d:b5:16:30:e4:ba:f7:4c:b4:bc:f4:
82:d6:8e:a7:6c:f4:5d:56:f3:e5:32:3f:39:43:3b:
7a:2d:3a:8c:b0:6a:ce:bf:99:3b:0a:ed:bf:a8:4f:
af:34:1a:bb:11:95:f9:43:69:9a:e6:85:a8:20:08:
e7:86:ca:8c:3b:a4:fa:a3:04:2b:f3:2e:7e:2b:cd:
a2:96:58:7d:77:e7:a2:b2:18:8a:46:7e:63:ef:88:
1c:bb:71:0e:3d:f7:dd:ed:e1:f9:94:bf:cd:88:22:
60:e0:c8:fd:bb:24:ee:e5:a8:55:31:cd:6e:64:af:
c1:85:e8:32:41:54:44:26:9e:e0:de:41:37:df:79:
ba:cb:97:04:91:51:40:72:23:55:9b:a1:25:5c:e1:
c7:26:79:fd:ef:38:ff:df:f9:61:94:1a:cf:ec:11:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B4:8A:6E:65:CA:B9:2A:B1:90:C7:00:8F:7D:52:EB:5C:11:EC:65
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1b:73:32:88:ab:71:d9:d2:ac:58:2e:d8:06:c4:8c:05:ce:
66:9f:8c:78:a7:06:5e:78:25:6a:52:a0:24:89:fe:d4:24:7e:
cc:27:b5:f3:9d:32:0b:7e:b3:98:35:7e:36:49:88:9f:58:5d:
9d:bd:7d:d7:93:dc:6b:16:3f:81:0b:6c:ca:35:31:97:c2:40:
4c:3e:a8:c1:07:f4:d6:49:dc:f1:2d:72:af:8d:cf:47:ca:ea:
2e:19:95:a3:a6:6b:e1:07:a1:9f:d2:2e:c2:8d:b8:a8:e5:5f:
59:3f:ee:41:07:64:ca:20:e0:2c:ae:45:f6:6f:1b:2c:e5:3b:
8b:53:ba:66:12:38:ad:4f:eb:45:78:b4:29:89:06:2c:bd:18:
61:51:fc:a7:97:b6:ad:fc:ab:3f:db:38:b8:75:a5:00:44:10:
36:f5:b3:d9:2d:4e:59:dd:c3:c5:fd:91:74:55:50:b1:6d:8e:
5f:3e:6e:70:57:1e:cf:7c:92:93:75:ec:6b:b4:27:39:e2:91:
94:a4:92:1e:df:07:54:7b:98:80:46:fc:60:8b:fd:d7:e3:7a:
b2:8b:9b:47:ef:ca:ec:6a:73:58:9a:4c:dd:dc:f3:04:26:b6:
4f:c4:37:dc:05:5d:a2:dc:48:46:00:42:bd:46:c9:36:06:b3:
a7:38:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:48 2026 by rpki-client