Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: tcmMUVjUocWwKYByZCJHEm58P5iP/rYlEzZyVjnTYtY=
Subject key identifier: A3:45:71:47:22:55:EF:E4:09:DD:17:33:F7:61:06:3F:5E:89:D3:67
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 01A0005C1D7AAD4423476AEEA65A3A88700D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0B5B
Signing time: Fri 14 Aug 2026 13:00:31 +0000
Manifest this update: Fri 14 Aug 2026 13:00:31 +0000
Manifest next update: Sat 15 Aug 2026 13:00:31 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: uhRSPtBKQCfgY6lhW1U8MEP1QjQlKC84/CqwVA12Dss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:1d:7a:ad:44:23:47:6a:ee:a6:5a:3a:88:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Aug 14 13:00:31 2026 GMT
Not After : Aug 15 13:00:31 2026 GMT
Subject: CN=a34571472255efe409dd1733f761063f5e89d367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:11:ef:a9:00:f7:4e:7a:bd:19:37:49:73:
59:85:1d:96:c2:54:30:46:f7:76:77:16:b2:3b:56:
06:38:00:46:c7:ef:4d:a4:dc:50:61:bb:74:a5:62:
18:55:b1:49:11:df:44:b1:cb:2f:c9:1f:b3:3b:1b:
58:21:d5:59:18:11:ae:ee:37:ec:75:4a:0d:0f:7e:
32:9d:cd:65:d4:2a:f8:4d:2c:32:bf:97:49:b3:3f:
22:7a:af:6d:fe:65:3a:52:73:f2:74:6c:bb:b0:1e:
b1:2d:a4:9e:26:3f:b6:4d:a6:95:a4:39:72:14:7f:
07:7d:3d:7a:06:dc:cc:44:b2:03:ed:75:b8:03:7e:
51:ed:e8:02:ce:7b:f2:21:aa:6e:23:99:03:d2:1e:
24:ed:5a:4c:58:f5:5e:52:0f:96:cc:08:4f:c5:e4:
aa:e7:f2:05:fb:b3:b4:de:ec:36:b6:3a:63:63:86:
9d:38:08:f5:d4:5f:9d:c1:da:3e:ab:14:3b:61:e7:
4f:83:85:d6:30:29:2f:ac:2b:6a:1b:f2:89:19:98:
75:46:dc:0d:88:25:0c:0d:09:bd:23:68:36:b9:6d:
4f:d2:22:f8:fe:8f:2e:1d:82:1f:08:7a:4d:0a:92:
3c:21:13:2f:9a:15:ea:0c:8a:d9:7e:ec:42:98:86:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:45:71:47:22:55:EF:E4:09:DD:17:33:F7:61:06:3F:5E:89:D3:67
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ee:9e:41:17:6a:65:3c:f6:4e:37:6e:16:45:b1:de:73:03:
c8:8e:28:39:bd:ff:02:48:f3:6f:1f:dc:37:9e:fa:8a:d4:b8:
09:87:31:9a:81:b3:41:b0:f2:d5:73:eb:2d:ca:84:b7:4d:fc:
7d:8d:69:0d:bc:0c:a7:9a:86:7f:3b:73:a2:04:e5:f6:c3:3c:
f7:2c:91:56:0d:77:48:9e:b7:fe:c7:9a:9a:23:60:da:46:fb:
63:87:cb:8b:b3:5f:11:d3:0d:49:03:11:56:57:ec:38:12:60:
60:75:33:48:04:b6:f1:da:b2:00:b5:88:d7:ed:60:b6:96:92:
39:f9:0b:78:0a:a6:1c:61:29:16:04:0a:3b:48:99:fe:30:7c:
6a:e7:b1:60:d6:f2:15:72:20:c8:41:3b:71:0e:e6:1d:df:c2:
17:30:19:83:21:0b:70:a9:a0:b6:bc:2d:00:2e:60:ee:8a:56:
7d:bc:bf:cb:77:47:03:34:e7:cf:76:e0:86:1d:a0:af:1f:01:
39:6f:c6:c1:7c:fc:52:02:8b:5d:ac:7c:2f:e5:2a:44:8b:de:
c1:ae:54:9f:d3:dc:d3:55:27:fd:e4:49:3c:b7:57:77:ee:90:
e9:d3:8c:69:6d:6b:5f:e5:aa:fb:ac:35:a9:d0:3a:b9:9b:4b:
8c:3d:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:57 2026 by rpki-client