Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier: HwY848/3+oECZbp5mgKpzY+/X9fHyo2uVP7ldzBIPfo=
Subject key identifier: 42:35:5C:3F:CB:7C:9F:16:78:3E:B5:ED:83:1D:7D:CA:C6:EB:97:BB
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial: 019F17C288C52DF4C6B2A48B123AA9ED3044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number: 17D6
Signing time: Tue 30 Jun 2026 09:00:52 +0000
Manifest this update: Tue 30 Jun 2026 09:00:52 +0000
Manifest next update: Wed 01 Jul 2026 09:00:52 +0000
Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: kKp2qSFMXYUy1v04hKYxM+Fec46+jxm3ynm+SFRRW3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:88:c5:2d:f4:c6:b2:a4:8b:12:3a:a9:ed:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Validity
Not Before: Jun 30 09:00:52 2026 GMT
Not After : Jul 1 09:00:52 2026 GMT
Subject: CN=42355c3fcb7c9f16783eb5ed831d7dcac6eb97bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:13:05:6d:f9:f3:ef:6c:86:6a:83:16:7b:
8c:cf:75:2c:fd:b5:0f:50:03:13:36:08:b9:e4:84:
c3:b2:f2:9b:34:e0:b9:f3:da:50:e7:28:4b:12:44:
0c:92:a3:65:6d:4c:c3:ca:49:bb:fc:7c:17:6a:67:
72:b1:09:52:2e:9d:5f:ee:a0:4c:0e:3a:0d:71:eb:
f9:91:b9:2a:5c:2f:77:3c:11:bd:ee:1f:e7:d7:c6:
6f:f5:ab:51:a8:52:b7:09:07:c5:74:74:03:52:8a:
b8:52:66:74:14:09:44:19:45:54:79:ee:96:72:e0:
e2:5f:02:5e:58:c4:c9:a0:72:a6:19:d3:8c:26:d7:
5e:4f:b9:24:6b:7d:3c:0d:c3:9e:52:8a:cc:24:17:
30:3c:2e:60:47:e8:4d:8f:dd:29:91:a8:92:8a:0d:
f2:b6:7b:52:86:03:6c:77:a0:c7:9c:77:68:01:7c:
41:d9:6b:ac:a0:67:81:6a:6a:39:6f:43:95:d0:e0:
44:8b:82:ae:c9:03:b9:bf:8e:06:cf:51:77:1b:21:
34:62:2a:39:9e:cc:d3:5d:b0:d7:79:0e:05:3b:f8:
fb:cd:1c:81:1e:de:68:93:08:80:eb:7c:7c:4a:0a:
0d:ae:ea:c1:05:17:e9:95:00:43:e2:04:a6:f0:27:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:35:5C:3F:CB:7C:9F:16:78:3E:B5:ED:83:1D:7D:CA:C6:EB:97:BB
X509v3 Authority Key Identifier:
keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e1:4e:6e:94:09:6b:65:02:1a:8c:a3:e8:ac:6d:51:28:ad:
10:01:a6:5d:b9:a2:b8:82:2b:ee:70:f5:3d:b2:5c:ab:2d:e5:
ca:85:0b:46:9d:39:8a:0e:d2:4c:1f:51:20:85:18:b0:10:02:
80:f4:53:47:8d:50:88:a8:c2:a2:c4:c9:2b:91:d6:9b:1d:fa:
c5:2b:14:b1:07:ba:7b:3c:28:30:b4:f3:50:70:fd:60:9b:da:
f1:c4:05:7e:e7:f1:a6:c0:48:b5:d5:9c:29:c5:5b:99:e4:12:
40:e7:bf:4f:33:8f:f8:31:85:8e:a4:5c:db:08:89:14:57:20:
11:0f:5c:b5:94:3b:30:42:44:65:9e:bc:bf:b0:00:ff:0f:2d:
eb:31:6d:79:61:17:bd:b7:21:b9:c9:a5:8d:a8:b3:ff:c5:8e:
50:66:6c:bc:8e:0c:61:66:fe:83:ed:34:21:29:3b:ac:c5:f5:
ba:1f:d7:ab:94:a2:19:6d:79:9b:b8:1e:88:87:1c:63:a5:fb:
28:31:74:0f:ab:2e:4a:15:a5:11:60:0c:15:bc:b1:ee:36:14:
5d:7e:bf:1b:80:f1:1b:a4:27:70:8d:06:12:91:a9:58:af:66:
a8:84:b9:c1:ff:dd:81:dc:0c:89:2e:d4:1b:8d:bd:5b:df:35:
b5:e6:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:20 2026 by rpki-client