Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: thhcUY38gqq1E9VpOUhq3h+aJfpYaOtV8uimnWxKbUI=
Subject key identifier: 88:12:F4:3D:1B:45:5D:F9:B4:95:3E:F4:9E:43:70:CE:D5:E1:4C:66
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 019F189F0DBF3BFADCFF96F051EA3A9867F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 1418
Signing time: Tue 30 Jun 2026 13:01:44 +0000
Manifest this update: Tue 30 Jun 2026 13:01:44 +0000
Manifest next update: Wed 01 Jul 2026 13:01:44 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: r8KNkjjuRHE4v0z0myPccMeYtGKxvVXOlt96rHVJXM8=)
2: hLq5oWkJELQbNcRkoEuFG9HYL_U.roa (hash: yfA7tS4NCGXvzY+87zTkkeYt5A3me3y/07bpWLgYXqg=)
3: oXYPZ4avfp145oFgjMNonlejP24.roa (hash: comOe5RXUAfxCnEHSz+CE1aEiUDNnGCVQ5RAozO2Owo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:0d:bf:3b:fa:dc:ff:96:f0:51:ea:3a:98:67:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jun 30 13:01:44 2026 GMT
Not After : Jul 1 13:01:44 2026 GMT
Subject: CN=8812f43d1b455df9b4953ef49e4370ced5e14c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:94:ab:99:3a:ae:02:f3:d0:52:08:9f:d2:
5b:5d:56:4f:ff:4b:db:c8:87:2b:31:b1:10:9e:94:
9e:b7:1e:9f:45:73:15:58:e7:60:b4:d7:d7:99:5c:
57:d2:01:ce:b0:97:8e:2b:dd:d0:8f:42:2f:d2:e2:
ca:9a:a9:f6:b8:f5:85:f0:40:43:93:1c:47:ba:7a:
3e:ee:91:d7:f2:92:f5:ab:b5:c9:87:62:15:ed:04:
1f:ee:48:7c:d8:a3:07:64:be:f3:f2:80:bf:2b:69:
48:6c:47:2e:f6:28:7b:f4:6a:21:2c:80:69:d6:fc:
c0:20:d3:b0:87:18:62:d5:9a:e4:6a:e7:66:f4:64:
3c:f0:16:39:6e:d5:3d:bd:60:79:7d:b0:a8:c6:c1:
2a:05:1c:cd:45:8e:6a:e2:2e:7d:90:a7:28:07:bc:
8d:97:3b:a1:74:85:9a:be:82:d4:9d:f7:06:fb:67:
79:b4:82:c1:59:62:43:dd:39:a1:9d:73:88:6a:ef:
e3:76:a6:19:39:39:2a:67:d5:bf:7a:a9:7f:fe:a0:
10:68:d3:91:9d:a6:14:fb:87:ff:8f:76:08:9e:f2:
47:76:f0:d2:41:0b:d2:d3:48:8b:a7:18:dd:a5:3c:
ae:52:6d:97:fe:da:e6:76:39:7e:0a:22:d6:24:b0:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:F4:3D:1B:45:5D:F9:B4:95:3E:F4:9E:43:70:CE:D5:E1:4C:66
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:01:2a:b1:e4:3f:e8:ce:88:2c:f0:93:df:4c:c6:46:c0:
d2:55:0e:2d:3e:ad:0f:98:9c:54:8e:0d:eb:f2:b6:d1:c0:40:
c0:02:0f:0d:a7:b7:e7:8a:98:11:68:11:54:8a:b4:50:be:a2:
18:d3:cd:45:da:66:34:1a:cd:8c:a1:5f:60:72:93:e5:d7:3e:
21:63:ea:1b:e0:ec:08:b6:20:22:62:87:74:c0:0f:58:2e:5b:
4f:bf:cd:e2:34:74:b7:df:ed:6a:96:2e:e8:0f:95:c8:98:52:
88:8c:bc:1a:8f:25:ef:93:c7:df:23:22:36:8a:40:bc:b5:7a:
ca:81:8f:26:74:aa:c8:e9:bf:6c:30:5d:a3:82:ee:31:d1:25:
5b:c7:82:0f:61:ef:f9:4a:75:0e:43:12:d7:a2:8b:db:91:8f:
2b:b6:7b:e4:55:b2:00:fb:f2:7d:32:43:e2:c2:ad:31:32:e1:
80:90:df:55:40:65:43:91:17:40:c0:89:52:56:f9:eb:e4:45:
92:32:2e:f4:08:9a:55:49:16:ba:55:bc:78:fa:9d:d9:7e:3d:
7f:bf:fa:3d:92:39:80:cc:b1:d1:f3:93:ad:da:0b:56:84:40:
15:d8:66:0a:c4:85:2e:48:28:2c:70:73:be:9c:0a:ad:72:6d:
a1:1a:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:13 2026 by rpki-client