Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: OzrU6EVPulfDq6uKjoTs8FF9hXcR6FVrx37otTGmoM4=
Subject key identifier: DA:1D:D1:5F:86:F5:00:D7:66:0E:BD:03:37:15:3D:5E:4B:C8:73:EB
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 019F1189DB55105C244B2EAB295ADE473462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 04:01:14 +0000
Manifest this update: Mon 29 Jun 2026 04:01:14 +0000
Manifest next update: Tue 30 Jun 2026 04:01:14 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: ks6Dr1sBF3XGLyVKAv51fI7udlAR7XTp0JF0w/EV3IY=)
2: B6iysmHDbleRVKIuBhreNxTvPy4.roa (hash: fb8tZxqx2SdW+lzSZRG1WIbgYJH2tXqvILVLuIwY8Cs=)
3: SRCBhIkP-Hqzoh2rZQemvVRuvuw.roa (hash: p/d5YtiIC7MAwrPek8AUJQpdVyLGSdu9mLSnMckIXnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:db:55:10:5c:24:4b:2e:ab:29:5a:de:47:34:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Jun 29 04:01:14 2026 GMT
Not After : Jun 30 04:01:14 2026 GMT
Subject: CN=da1dd15f86f500d7660ebd0337153d5e4bc873eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:dd:84:de:b2:40:f1:f4:ff:f9:80:6e:ac:
72:9b:e4:31:26:cd:cc:8c:a5:31:69:a4:dd:fc:e5:
df:c1:54:00:55:55:48:f0:21:78:f9:38:4c:1b:ed:
c7:f9:e9:45:22:70:d8:01:01:48:dc:eb:73:c3:8c:
30:51:2b:5b:43:ef:d3:14:8f:a9:7f:30:1b:53:9b:
21:78:27:4d:b8:02:74:72:41:f0:01:ec:bc:23:33:
dd:6b:6a:17:ca:6b:bf:5d:ce:fa:06:ec:73:62:d6:
e1:17:6e:1e:5d:71:bb:1d:54:23:c7:00:5c:4e:e5:
83:ca:d8:8d:e7:f9:6f:12:a4:dd:e0:d1:b5:4c:f0:
6d:44:69:bb:29:ed:00:c0:fe:09:a5:b4:09:e1:28:
f6:1e:01:df:56:6b:4d:76:b0:20:4f:ed:32:f7:8e:
21:1d:97:01:cd:0f:8a:d4:c4:be:13:67:55:81:6d:
d8:02:09:1b:c5:9e:05:89:99:74:c8:ce:e6:42:c6:
a1:78:14:ea:b3:b2:87:c9:c0:63:bd:6b:a2:72:93:
32:94:c1:dc:8f:c9:fb:8e:70:7d:13:90:f5:03:32:
4a:0c:89:d7:f6:00:ce:81:aa:4b:4a:c1:f2:3b:a2:
e3:04:73:da:55:18:3d:4c:a0:d2:cf:a6:dc:b7:96:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1D:D1:5F:86:F5:00:D7:66:0E:BD:03:37:15:3D:5E:4B:C8:73:EB
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:04:2d:81:dd:57:39:a5:a3:b7:15:6a:fc:d4:7b:05:04:
4b:eb:d9:06:37:4d:f5:00:07:3e:dc:04:96:79:8e:94:4c:70:
31:df:ed:90:22:f9:63:48:aa:48:73:f4:1c:2a:93:5d:f2:68:
75:b1:70:87:9d:2f:c2:c5:f7:35:c8:48:70:61:52:a0:e5:10:
68:a5:e8:69:2a:18:ff:3a:6b:ab:74:b9:93:a1:10:03:1f:72:
04:27:a0:82:51:3a:be:13:54:37:73:bb:19:26:7b:27:73:ed:
09:89:6d:99:c0:4f:84:8b:d0:49:d5:da:ee:92:cf:c0:52:0e:
a1:5e:5c:34:b9:14:3e:20:c6:09:40:8d:ac:ef:6b:6c:47:b8:
28:a4:e7:79:7c:00:4a:47:08:a8:f8:ee:b4:40:3c:f1:35:b2:
e7:2a:ed:94:51:9a:75:34:55:bb:f4:09:bd:d1:e1:e9:34:98:
7c:4b:2e:fe:a4:06:c3:43:dc:28:19:22:cd:97:f4:d0:86:26:
63:44:25:8a:f3:17:e8:16:f1:f7:54:aa:53:c9:4e:f6:74:7f:
93:a0:be:ca:80:75:86:8f:2b:03:34:e4:63:5c:8c:ed:3b:13:
d0:95:ec:da:0e:da:4b:0d:93:65:c6:bf:1f:cb:b4:b7:78:c4:
66:bf:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:34:52 2026 by rpki-client