Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: cNrXm/Xo5fmD9+G0HRICoRV7FjtepRm4PR9sB3AV490=
Subject key identifier: 32:72:A6:F9:4E:58:63:EC:66:DE:A2:8B:8D:64:8C:F5:DB:7C:66:AC
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 019E2F96A21E1A7EEDF1F9E1B99DF5D9559F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 13C6
Signing time: Sat 16 May 2026 07:01:01 +0000
Manifest this update: Sat 16 May 2026 07:01:01 +0000
Manifest next update: Sun 17 May 2026 07:01:01 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: /PKHScGfAs8eqZjLc9PhfySB5Ehs0vWBfmh4rg0RCXs=)
2: sZ_wJd4obInjvojttLVzF1c-iho.roa (hash: 3arQ7GDjRVulm35+QdBtPgi507F8KwHTfe7c2qEyJ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:a2:1e:1a:7e:ed:f1:f9:e1:b9:9d:f5:d9:55:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: May 16 07:01:01 2026 GMT
Not After : May 17 07:01:01 2026 GMT
Subject: CN=3272a6f94e5863ec66dea28b8d648cf5db7c66ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:67:30:69:0c:61:24:73:7b:c4:17:a4:69:f1:
b6:a9:d7:bd:71:29:0d:57:23:4d:5b:b1:1a:2d:bc:
8f:a8:fa:ce:5c:60:ea:21:21:b0:54:53:71:cb:e5:
b3:33:4e:82:83:2c:59:c1:17:32:cc:4a:b7:27:9c:
52:a6:d4:09:10:5c:63:2d:e9:d1:be:c6:ec:a0:0b:
67:e3:41:80:be:57:85:0a:4d:9c:1a:5e:a1:21:07:
9b:bb:13:4a:31:35:f5:4f:e5:52:29:52:3c:a2:01:
8f:66:cf:8d:b8:9e:2d:0c:61:38:69:a4:27:3d:a2:
1e:7b:c9:58:9f:a8:7f:8d:3a:ed:af:10:61:e6:6b:
05:84:b8:1e:29:f4:61:ff:7c:e4:99:94:57:37:84:
da:88:7e:df:03:e9:84:0f:fc:5f:33:15:ba:a6:32:
59:f1:4c:b9:91:a4:0b:2d:e0:40:b0:90:17:63:a0:
e6:be:1e:0c:15:7b:2c:fa:42:95:45:50:24:37:92:
f8:84:c5:95:78:bb:cf:f9:12:e6:19:d2:ab:4e:50:
1e:64:73:0a:a3:1b:e7:c4:3d:12:98:cf:5f:15:f3:
02:e3:bf:6d:d9:fb:a3:39:c7:e3:fc:1c:0f:13:30:
52:ee:59:cf:d3:ef:bc:70:15:a1:5a:13:6c:c6:e1:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:72:A6:F9:4E:58:63:EC:66:DE:A2:8B:8D:64:8C:F5:DB:7C:66:AC
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e8:d6:e0:f9:e2:14:20:a6:24:ac:0d:e1:0b:70:4d:1c:2c:
73:40:fc:f3:36:a7:71:ea:ac:1f:94:98:56:67:c0:2f:c5:6b:
e1:b6:53:68:c1:a0:cc:02:ca:06:1b:dd:d5:5d:48:7d:c2:fb:
46:c2:68:4f:36:be:41:e7:86:0c:48:e9:55:3f:aa:60:bb:56:
38:d0:9f:0b:1e:e6:3c:29:97:71:a8:6f:bc:22:1f:6d:1a:6e:
18:bc:4c:1a:a6:9c:3e:8f:f0:4d:81:ae:a6:fc:a6:ed:af:b6:
c9:95:cb:0c:57:c1:f3:95:fd:01:a4:c4:66:68:29:b7:63:3b:
61:16:4d:4b:e6:39:2e:d4:40:b0:0a:9d:8e:3b:ac:11:3f:93:
9a:31:b2:06:1b:9e:a4:48:aa:58:6b:9c:2d:a4:4a:79:7a:6a:
ec:42:29:21:84:10:0d:bb:aa:68:c0:84:f3:64:97:36:f5:9b:
d7:98:9a:43:aa:c5:ff:3f:6f:5d:b8:7b:f7:ba:66:0a:af:f5:
51:2f:a7:1c:b2:7d:5e:fd:e3:de:d2:de:d6:7d:ff:f5:60:10:
d4:ba:f6:2b:c0:0f:9a:20:7f:be:4a:81:57:d6:04:66:69:ed:
c4:e4:86:66:e9:27:b4:86:14:bf:9e:10:cd:77:16:23:49:00:
4a:83:32:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:33 2026 by rpki-client