Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: lA5OP0bvNL1lzPAGgJAalcfNZqPlk6+ABJWYf9n3otM=
Subject key identifier: 83:CC:53:52:5F:A7:E0:E9:42:F7:36:D6:7F:72:4E:4B:2E:C6:61:62
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019F189EC8174548BE5EE659E690AAB05454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 1080
Signing time: Tue 30 Jun 2026 13:01:26 +0000
Manifest this update: Tue 30 Jun 2026 13:01:26 +0000
Manifest next update: Wed 01 Jul 2026 13:01:26 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: +591fIebTjozM3Xss6MOq+BC1mM/kEyRnuQLBetYUGE=)
2: hNYIQ5HHhINGm0B4xE-M57SIxF0.roa (hash: FqszJttjAhJJ6gXeV7wcVvhxNzpQaBx6Ggtmu08rd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:c8:17:45:48:be:5e:e6:59:e6:90:aa:b0:54:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Jun 30 13:01:26 2026 GMT
Not After : Jul 1 13:01:26 2026 GMT
Subject: CN=83cc53525fa7e0e942f736d67f724e4b2ec66162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:de:0c:03:5f:50:e1:ad:6c:59:f7:03:bc:
95:2f:44:49:0c:c6:57:bf:61:f0:a7:12:30:11:5b:
ad:3e:73:0e:3b:b1:ce:a2:31:47:47:f8:1d:a8:69:
64:a6:f7:43:7a:d9:20:da:b6:ec:6b:55:ea:e5:f4:
6c:07:a5:78:16:8d:9f:54:c3:f0:d1:ae:6f:80:a7:
09:28:1a:79:66:51:aa:7e:be:f9:84:9d:86:b2:40:
f0:d9:c4:04:4c:87:3e:5c:7e:ef:02:31:a7:4c:3f:
41:ad:3c:7b:cf:ab:17:1a:15:08:e3:19:d5:0f:eb:
07:c8:22:2f:33:fa:2a:18:87:d2:85:db:e8:1c:94:
73:10:61:63:de:a9:25:a3:30:9b:ed:54:bc:3f:c7:
5a:a5:ae:36:34:ed:d8:0f:4a:c0:8c:92:40:2a:8d:
d4:1d:fb:24:ea:10:9d:41:b1:41:3e:2f:54:ff:c3:
37:fc:d6:2b:f4:3c:49:93:6f:30:f7:d9:69:b5:1c:
4a:8a:00:b2:ea:56:ac:ad:c6:05:e0:d4:cf:96:91:
ff:68:7c:21:03:c3:2e:a7:5f:d0:7d:aa:bc:29:a2:
49:de:ef:4a:46:39:23:06:3f:12:ac:9e:87:24:de:
52:6e:e5:5d:63:a5:25:44:f0:58:3d:2b:76:8c:6e:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CC:53:52:5F:A7:E0:E9:42:F7:36:D6:7F:72:4E:4B:2E:C6:61:62
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:af:13:a7:d3:b8:16:fa:45:e1:f4:24:c7:91:78:2d:4f:21:
b8:89:7c:3e:e7:6e:c6:fb:30:8b:24:12:d3:86:5d:40:a1:2e:
c5:56:04:12:b9:67:9d:a5:05:a7:3c:f2:d2:21:3f:69:a7:a0:
8e:f9:4e:10:49:39:ae:aa:54:25:ca:9c:3c:7f:03:fd:54:e3:
4a:fa:b7:b7:e2:4e:d4:44:7f:5d:5d:d6:b6:6e:6c:ab:74:24:
9d:2a:63:02:cd:1d:74:b3:8e:06:1e:3e:4f:07:50:22:e7:82:
ea:36:ed:f2:06:28:66:b1:e2:36:9e:ac:32:ea:9d:e8:c5:75:
99:fe:b5:eb:15:0f:77:5d:16:a9:90:cb:cb:cd:ae:8f:20:a1:
fe:6f:d8:ac:a0:b3:1f:97:7c:96:d5:ec:be:fa:f1:8f:2b:38:
6e:8f:65:5b:97:a8:39:5d:34:78:c0:86:94:ee:dd:5f:bf:b9:
1f:d8:48:f0:c0:5a:6b:fd:f4:a7:d9:f5:5e:63:3b:89:71:2b:
3c:25:9d:5d:17:13:6e:df:dc:df:bb:10:e8:b9:3c:35:e1:46:
e3:ba:2e:20:8d:69:7e:5c:f2:7c:47:c0:68:07:63:eb:8a:36:
c4:7b:e3:28:06:60:05:48:8f:fd:5e:5e:7b:96:16:fc:ff:52:
04:09:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:30 2026 by rpki-client