Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier: tWTcnvElXZfrgyCjHzK4ZcYm+EzlNv6CGVpnjNIj94M=
Subject key identifier: 64:E6:99:58:7E:E3:E8:9C:BA:41:25:76:B3:96:01:E6:CA:32:45:BA
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 01A13F020FFC473D149E79BA2BF41E762EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 10:01:01 +0000
Manifest this update: Thu 15 Oct 2026 10:01:01 +0000
Manifest next update: Fri 16 Oct 2026 10:01:01 +0000
Files and hashes: 1: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: 9mTFvHxtig4qb7M4hAL5k8SIW0kJSxRktXEC8aHUu+s=)
2: op_F057a4GgIgBhETNDsjlr7XoU.roa (hash: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:0f:fc:47:3d:14:9e:79:ba:2b:f4:1e:76:2e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Oct 15 10:01:01 2026 GMT
Not After : Oct 16 10:01:01 2026 GMT
Subject: CN=64e699587ee3e89cba412576b39601e6ca3245ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:b9:50:5c:2e:fc:8e:89:8a:d4:40:bb:05:
5b:8c:e4:18:b2:ee:9c:fe:b3:43:3f:2b:45:a1:a7:
2b:2c:f5:57:01:bb:92:84:b3:cf:16:05:cf:02:0a:
5f:f9:59:95:e4:1d:99:fd:77:6e:44:e8:34:fc:af:
25:b4:74:fb:0a:06:90:35:ee:14:49:dc:9b:39:9c:
0f:44:59:9d:e3:32:cb:5c:9a:d9:18:dc:11:be:37:
20:f0:4a:77:7b:bc:ad:9e:50:6e:3d:f1:a9:0a:ee:
99:9f:0b:4e:7b:de:2c:96:d5:6b:4f:6b:fc:41:48:
88:7d:90:1f:87:c7:35:d9:68:49:60:9b:1b:a5:4e:
64:58:73:7a:4b:0a:50:47:eb:3c:a4:60:ed:58:56:
ce:1b:23:d7:05:4d:f9:6c:9e:fd:d3:a9:82:39:35:
37:5c:ef:61:27:c0:7c:c1:f7:3e:b0:a7:77:79:1d:
31:81:37:49:5d:dd:4b:b2:34:46:b6:87:f3:c9:83:
5c:68:a2:0a:0a:03:45:56:d3:61:1f:41:02:5f:03:
2e:b4:37:49:b5:7e:e5:35:ed:38:84:70:7c:07:77:
9c:5c:6b:49:a3:e3:b3:4b:54:43:92:8d:f8:ce:db:
e5:20:dc:b5:dc:22:d1:b9:5f:0d:41:02:19:37:97:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:99:58:7E:E3:E8:9C:BA:41:25:76:B3:96:01:E6:CA:32:45:BA
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:be:6f:e3:48:f7:3a:15:47:c5:5c:e3:87:3d:57:84:ce:f5:
83:30:b5:84:7a:57:d1:c7:42:25:59:be:a0:b2:36:af:a6:a8:
d4:7d:b5:85:ad:a9:00:14:0a:d6:ab:65:3c:6a:d0:0c:c6:c6:
ce:24:77:49:3a:f4:06:b9:d8:bb:8d:b7:7c:7f:e5:77:24:10:
bc:47:d2:90:cf:08:d4:fb:4a:16:70:99:b8:af:1e:5a:0e:cb:
4f:70:87:a6:01:69:31:81:59:a2:78:2a:26:1b:08:54:34:a2:
12:42:ed:01:5c:64:0a:f0:c7:70:a1:8a:f3:c9:b0:5a:b6:3f:
14:63:99:36:70:e3:39:f9:fa:12:99:9f:e8:af:ef:33:97:90:
95:6b:8c:5c:8e:09:48:ef:84:e1:80:be:ca:37:de:d8:fb:8f:
b6:21:7d:72:8f:74:55:76:86:c9:a5:04:e9:5b:b9:29:fe:de:
66:50:22:14:28:9f:bd:81:7d:08:92:44:23:a6:b9:4d:20:67:
0e:85:59:0e:8c:86:06:ff:f3:30:7e:58:6c:11:f7:23:81:8f:
35:99:e7:f6:77:d3:7f:c9:1d:b3:a7:73:5b:62:29:49:1a:4d:
d0:bc:3a:a6:de:db:bf:82:4d:8a:25:2a:6d:b0:49:55:56:ba:
26:fd:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:35 2026 by rpki-client