Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: BSH2YEsvSQkoLJ3vIfNOoFWqzzBD1K1mBqH9if3uQts=
Subject key identifier: D2:A4:2D:C1:9C:4A:96:3C:0C:D8:03:52:BA:FF:26:D5:FA:9D:10:5F
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 019F194400E4016378A20624F17945036159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 143F
Signing time: Tue 30 Jun 2026 16:01:54 +0000
Manifest this update: Tue 30 Jun 2026 16:01:54 +0000
Manifest next update: Wed 01 Jul 2026 16:01:54 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: km0bnhX26+jYJrc3r4TFW1+KDVxPwhhjMZGu9pTYuHI=)
2: sZ_wJd4obInjvojttLVzF1c-iho.roa (hash: 3arQ7GDjRVulm35+QdBtPgi507F8KwHTfe7c2qEyJ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:00:e4:01:63:78:a2:06:24:f1:79:45:03:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Jun 30 16:01:54 2026 GMT
Not After : Jul 1 16:01:54 2026 GMT
Subject: CN=d2a42dc19c4a963c0cd80352baff26d5fa9d105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:5c:bd:3f:72:ee:c1:93:95:91:ea:72:69:
1b:db:92:d0:b5:91:23:3d:c7:71:df:11:11:f2:ec:
1b:5a:fc:ed:c4:6e:81:ab:02:70:a0:2d:57:0e:c5:
98:de:10:91:4e:ba:8a:17:3e:d6:f6:04:ab:1b:2a:
e8:dc:2c:96:93:ec:85:66:a6:2a:b1:27:4b:dd:ba:
47:fa:71:d2:e5:12:d5:cf:e0:40:4f:77:57:42:93:
70:2e:b0:e7:e5:68:c3:cc:08:53:4c:d4:92:ea:ab:
1d:83:23:3e:ec:cc:f3:e3:d9:61:4b:45:c6:01:e4:
df:4e:18:f5:a2:82:e7:6e:6c:29:95:a1:2b:59:8f:
a8:98:d1:ce:90:a9:d9:a8:80:45:4e:75:71:bd:aa:
c0:cd:b8:4c:42:f2:8d:0f:75:56:78:8b:81:4b:ac:
48:f4:52:8e:78:e7:34:9f:47:bc:ee:c9:bf:f3:34:
75:dd:ba:d3:e8:9b:c8:46:b8:95:ee:4f:86:69:30:
99:f9:ed:07:6d:8e:07:09:80:d1:74:25:32:5b:aa:
0e:2e:51:0c:8c:cb:d5:2f:7d:6c:f0:a7:e1:60:db:
e4:30:fc:f2:4f:f3:57:75:7a:51:33:6e:09:53:da:
7e:61:e7:d9:c4:29:50:db:ab:01:10:1f:dd:85:3d:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:2D:C1:9C:4A:96:3C:0C:D8:03:52:BA:FF:26:D5:FA:9D:10:5F
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d7:9f:71:42:d8:38:43:64:c7:3c:a8:40:6a:e8:de:80:19:
03:ad:2d:15:19:df:07:32:0a:01:5a:fa:fa:26:65:4c:9f:a1:
31:02:f9:a2:0e:09:60:58:ec:7d:b4:b7:8c:8f:db:b4:31:0f:
fb:27:94:44:1e:19:0e:53:66:d0:03:94:b7:ea:80:e4:7e:fe:
cc:a4:d2:c3:8e:9f:a1:f2:72:0a:57:ab:75:4f:27:e3:bd:8d:
c2:d0:4b:5e:21:d7:ee:ac:9f:9e:3b:c1:44:fe:bb:35:b7:54:
f7:4e:56:f6:07:d3:55:a7:8a:30:8b:ff:06:e1:6b:de:4e:a3:
6b:9e:24:ab:27:81:62:cd:81:bf:78:52:62:25:cc:44:2e:5a:
5e:f6:b9:69:9c:49:02:29:d4:0b:14:e1:23:de:8c:f3:0b:06:
ad:1a:de:e1:69:5e:ef:a7:c5:b4:f2:52:c0:bd:73:0a:35:cf:
e5:87:2b:d7:41:71:96:b8:0e:4d:3d:df:22:5d:05:2b:d3:6a:
f0:de:5d:84:7c:65:4e:df:50:aa:96:8b:bc:7e:6f:2d:b7:31:
6a:9a:19:b9:7b:6c:f0:cb:b8:c3:69:91:79:1a:47:a1:ac:44:
d0:04:33:9d:68:44:43:e3:aa:91:b5:4e:72:07:9e:66:04:f3:
5a:ac:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:55 2026 by rpki-client