Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier: VYwDysLOJ3EdxzP15Gi+K5DedGCk947r97e9d8cvdlc=
Subject key identifier: 48:45:E6:F9:97:3E:FF:8E:30:75:06:09:80:64:E0:84:FB:31:C2:51
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial: 019F194339631CA4EBD618A7AB3CCF7B9CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number: 17A7
Signing time: Tue 30 Jun 2026 16:01:03 +0000
Manifest this update: Tue 30 Jun 2026 16:01:03 +0000
Manifest next update: Wed 01 Jul 2026 16:01:03 +0000
Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: sZCJEvW3kJbaZh+bwsbvpdjY+9XZe1sM83ci4cGaxus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:39:63:1c:a4:eb:d6:18:a7:ab:3c:cf:7b:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Validity
Not Before: Jun 30 16:01:03 2026 GMT
Not After : Jul 1 16:01:03 2026 GMT
Subject: CN=4845e6f9973eff8e307506098064e084fb31c251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ea:6b:54:4b:85:09:73:ac:9a:57:f8:29:a7:
19:e0:52:a9:f1:e2:11:ce:e4:70:96:12:4c:82:fa:
35:51:44:13:30:83:f8:cb:64:57:04:50:9d:aa:4e:
bf:29:57:5d:de:33:62:fd:78:b2:d2:09:e8:cc:54:
42:c2:1b:aa:da:e5:33:7e:87:f4:c1:08:d8:18:fd:
6f:54:6a:a2:eb:31:d1:8c:7d:37:34:e0:42:8a:ac:
0e:1d:1d:00:e4:e6:e2:e1:86:35:28:d5:dc:4b:8d:
70:38:5b:4d:ec:d9:90:3f:cf:32:1a:3c:59:bf:1d:
bc:a9:cc:19:86:d5:2a:06:0e:76:62:64:ee:33:9c:
8e:08:41:26:b7:33:21:24:2f:ff:de:66:8a:da:4c:
07:67:13:61:07:08:e8:2b:32:35:52:97:59:75:22:
f4:89:9f:46:9c:21:6f:a1:53:c2:74:99:3a:98:ac:
3b:7a:c3:98:ca:94:8f:0d:47:72:ee:37:0b:ae:d4:
64:55:cf:67:0b:0b:b9:1d:31:54:0c:e8:19:0d:5e:
e4:aa:bb:2a:0d:1d:b7:b7:27:4f:9b:91:d1:48:f5:
76:7a:be:0c:0d:95:c8:50:01:4f:6d:f2:f8:ce:9f:
9b:b1:1d:6d:ee:f3:91:a6:1c:d9:d9:df:ac:5c:dd:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:45:E6:F9:97:3E:FF:8E:30:75:06:09:80:64:E0:84:FB:31:C2:51
X509v3 Authority Key Identifier:
keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:44:04:63:f4:85:ea:4e:2b:52:c1:f9:20:68:49:99:39:d7:
45:9f:19:fc:64:e2:21:a7:b9:df:7d:31:9e:d6:f3:bb:ef:94:
78:00:75:3c:54:0b:ba:dc:3b:e9:37:01:83:4e:d0:65:71:70:
59:c2:83:0a:a3:df:79:88:93:9e:ae:27:e3:12:1f:1f:b1:f1:
39:9d:9f:65:47:9e:a9:fd:dd:0b:3a:57:e2:e8:37:47:32:14:
e0:22:9e:b3:2d:df:a3:f9:9f:cf:1c:ba:44:26:29:b5:98:ba:
8d:d8:35:b2:ab:52:d2:b0:45:02:0e:34:0f:d4:7e:d4:ee:72:
cd:08:02:a9:d4:44:a2:43:5c:77:e7:4c:c6:a0:89:a9:29:7e:
60:99:5c:1a:d7:9e:02:12:20:a7:84:81:0f:b8:06:10:aa:ba:
cf:c4:3f:0e:4c:ca:98:42:53:f1:72:98:74:89:57:87:08:f4:
72:3b:f0:57:83:a3:5b:86:10:33:31:0d:8f:48:63:09:4b:b4:
00:81:72:ec:4c:30:2e:1a:4d:6f:9e:2c:ca:84:cf:46:6c:22:
f5:bb:fd:7f:70:48:b0:75:20:2b:4f:4b:5a:62:8a:4c:ef:b2:
d9:8b:29:51:b9:6d:24:f6:c6:79:c3:71:e5:42:12:36:84:83:
b8:cf:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:12 2026 by rpki-client