Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File: RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier: jIWEkv3CYxmdEZQ0chmDYT4M8Pe4TJovzs1EeeQM8QE=
Subject key identifier: 00:20:53:81:21:20:73:87:FC:C4:90:2F:FA:4A:EE:B0:E9:9D:11:70
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer: /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial: 019FA07250A7DAEAC607B5FE67B1674C51C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number: 19CA
Signing time: Sun 26 Jul 2026 22:01:13 +0000
Manifest this update: Sun 26 Jul 2026 22:01:13 +0000
Manifest next update: Mon 27 Jul 2026 22:01:13 +0000
Files and hashes: 1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: bTbPKWkZBhQ3OGJuAuv72UEk5ixRnpFJEyPNGX+Pl64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:50:a7:da:ea:c6:07:b5:fe:67:b1:67:4c:51:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
Validity
Not Before: Jul 26 22:01:13 2026 GMT
Not After : Jul 27 22:01:13 2026 GMT
Subject: CN=0020538121207387fcc4902ffa4aeeb0e99d1170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:a8:14:d0:62:16:eb:2d:c5:16:d2:41:e8:
a0:ec:0f:c1:d1:38:60:2d:0e:39:c4:ad:8b:cf:62:
93:16:9f:7c:53:a8:42:93:38:ba:01:12:a7:70:02:
56:8a:71:59:9d:09:fd:bc:09:91:c6:ba:c6:6f:be:
65:2d:6d:7c:44:fa:5f:73:1d:1f:62:73:ec:9a:06:
03:fe:a2:d0:6b:b6:77:01:39:a5:d4:ee:3f:2c:be:
a6:24:9a:9f:e9:62:53:f9:5f:f1:0c:c0:f2:e8:88:
c0:ca:3b:4a:ec:88:7e:41:0b:86:9c:04:dc:a0:87:
5a:4f:ce:84:63:af:55:6d:d0:29:23:84:93:4d:83:
10:c9:0c:78:7f:30:76:95:da:02:47:32:3e:bf:26:
b0:70:8f:c3:f4:b9:38:59:d4:93:a7:6f:35:b3:9a:
ae:b5:98:98:d3:a3:dd:c9:9c:6d:35:c8:a3:22:fc:
75:c6:3b:1f:32:33:17:d7:1a:d2:bf:9b:ff:da:1e:
ac:96:c9:92:67:a2:0a:2f:43:46:33:b2:65:9d:3e:
74:ef:66:fa:25:6a:1b:8a:54:95:06:95:b1:26:dd:
99:9e:2b:e0:ea:30:f8:4f:a5:c2:cc:5a:bd:c4:09:
af:22:da:07:c6:68:16:fb:1b:00:f5:74:5f:70:2f:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:53:81:21:20:73:87:FC:C4:90:2F:FA:4A:EE:B0:E9:9D:11:70
X509v3 Authority Key Identifier:
keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f1:3b:df:25:80:e1:73:5d:77:31:d8:ef:f1:b8:58:fd:61:
f7:aa:df:cf:86:3c:c8:03:87:7b:10:ee:28:d0:99:e6:3c:66:
da:0d:bb:2e:24:ce:35:d7:2d:54:ee:5b:9a:6f:5b:01:dc:86:
c5:0b:61:3e:63:a7:be:bc:0b:b6:12:e0:5a:e5:cf:43:01:7d:
d4:23:9f:26:c3:1d:78:8f:9d:41:36:e8:fc:24:b8:6c:21:59:
c2:a9:b2:c3:3a:2b:b2:fb:79:70:ae:bb:1b:b6:b2:45:55:c6:
4a:ef:56:54:95:20:9b:a9:72:91:e8:1e:9b:05:1c:1e:16:39:
63:df:2f:a6:c9:9b:28:3a:5c:78:95:ea:99:d3:2b:d0:db:54:
6c:6b:95:c3:a4:cd:8e:4d:57:1f:46:75:26:7f:4c:67:a8:da:
60:41:ff:41:81:d1:a8:55:e3:8d:7c:9d:cb:57:40:f1:93:c1:
d7:df:65:07:61:64:09:f4:89:7a:9b:e2:71:41:8a:fc:05:37:
78:4f:20:ea:3b:e9:50:2d:25:41:f4:b6:ba:2d:ae:46:d4:3f:
fd:32:d8:f0:9e:40:71:5b:21:74:0e:80:9a:5f:f9:66:b8:d7:
86:66:7d:12:74:58:1b:76:13:d5:58:1b:65:c5:ac:4d:43:da:
eb:1b:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:28 2026 by rpki-client