Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: 98Ez44iVES62GxeZCJ2CH1fijOL4xvHAXI+Qa5PV8K4=
Subject key identifier: 0F:54:DC:A9:8A:C5:E9:CB:04:98:3E:78:D2:D4:DA:1D:0C:AF:FF:E0
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019F189E081CA10AA743252265E03B88AD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0AE3
Signing time: Tue 30 Jun 2026 13:00:37 +0000
Manifest this update: Tue 30 Jun 2026 13:00:37 +0000
Manifest next update: Wed 01 Jul 2026 13:00:37 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: aMFnecFkeQHB7IgBkGe799STBEWLSqDwsLUASGfKMfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:08:1c:a1:0a:a7:43:25:22:65:e0:3b:88:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Jun 30 13:00:37 2026 GMT
Not After : Jul 1 13:00:37 2026 GMT
Subject: CN=0f54dca98ac5e9cb04983e78d2d4da1d0cafffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:d9:19:b2:a3:8e:d9:63:01:e8:5e:09:b8:
5e:af:c4:5e:7f:f9:8b:37:62:f6:77:1d:54:87:5b:
e7:7f:04:99:70:31:78:de:b7:a3:45:8b:13:10:1c:
2e:5b:b8:19:6e:59:a2:6a:c2:28:d6:ac:4f:66:cf:
f9:70:5c:b8:ec:b7:e2:fc:8a:c5:7c:c5:b2:8e:ec:
03:74:66:1f:87:cf:6e:ba:a6:e0:f4:b1:2d:4c:cd:
a2:bd:81:9a:88:64:34:3b:d0:e0:70:0d:67:fc:28:
4f:b1:5f:55:20:5e:b0:03:88:9a:a5:80:7c:7c:cf:
16:84:08:01:78:1b:1c:d3:fe:99:6e:51:da:a7:a8:
99:d5:49:17:9c:91:48:d9:d7:37:bb:5c:88:eb:7f:
c9:a2:04:c5:83:2a:8c:33:43:73:32:a6:8c:6c:05:
79:ab:6d:7c:1a:c8:74:09:27:b6:05:4c:7a:0e:27:
3d:22:05:fd:15:80:d0:77:d0:c3:1f:df:e0:4b:bd:
4a:90:dd:2e:06:38:6b:fb:f3:cf:2a:cd:34:d3:35:
15:06:20:8c:ea:eb:03:cf:5f:59:6d:a7:83:bc:66:
51:70:5a:7a:4d:7a:de:cb:de:12:49:96:8a:a7:02:
2a:e9:1d:3c:29:0d:8a:77:9b:50:c3:81:7a:96:0b:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:DC:A9:8A:C5:E9:CB:04:98:3E:78:D2:D4:DA:1D:0C:AF:FF:E0
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:54:43:94:b0:d1:70:46:2b:0b:e1:48:5b:75:3d:2e:5a:c8:
44:f0:33:b7:22:e4:0a:97:d9:62:4d:15:b9:61:6d:53:49:65:
71:cf:5a:a6:a8:e9:ca:66:93:64:4c:cd:3a:97:b4:71:00:9f:
aa:0f:48:3a:5b:14:09:5d:12:19:ee:58:8f:1a:14:c0:2a:d2:
bf:a5:df:72:28:ab:ab:c2:44:34:c3:30:87:fb:b3:d5:90:7f:
30:63:6f:0a:80:ba:08:04:30:3e:31:bd:4b:57:09:35:64:8f:
19:47:94:03:d0:41:75:0c:26:9e:a0:c2:04:ce:ba:3a:d5:b2:
35:a9:f8:95:02:63:61:5b:0a:3f:e6:79:b5:ef:9b:96:de:38:
fc:44:ce:0d:45:9d:24:13:dd:01:16:62:af:8d:da:d6:76:76:
fa:52:6b:4d:f2:ee:a6:4c:62:37:be:f5:fb:42:fa:e3:49:51:
c1:a3:01:ee:43:c4:f4:bd:97:72:a6:ec:11:27:3f:53:db:eb:
13:d9:27:e6:76:b9:98:2b:16:4d:a7:3e:20:9a:2a:34:a1:53:
b5:a6:f6:62:76:b8:64:29:83:45:1e:b8:38:23:a2:14:f6:e0:
c3:b9:f6:85:cb:84:c8:e3:70:d5:ed:42:47:dc:c3:38:20:04:
31:41:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:52 2026 by rpki-client