Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: 34AUIqqKYAt0LqSoo3eO/OCsBC8CyMzhMVTNhWJhv6Q=
Subject key identifier: B7:89:5E:6B:EB:6A:46:48:59:6C:CF:67:3A:62:57:02:2B:A9:21:6C
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 019FA82B5853FF9026DB4A10A205BF178CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 0857
Signing time: Tue 28 Jul 2026 10:00:40 +0000
Manifest this update: Tue 28 Jul 2026 10:00:40 +0000
Manifest next update: Wed 29 Jul 2026 10:00:40 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: kD9S5/fS6d5k9/S4NnFfY468+/FTrhbkd7wlOP6QD3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:58:53:ff:90:26:db:4a:10:a2:05:bf:17:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Jul 28 10:00:40 2026 GMT
Not After : Jul 29 10:00:40 2026 GMT
Subject: CN=b7895e6beb6a4648596ccf673a6257022ba9216c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:ff:45:7d:bd:5d:98:02:97:ce:ec:67:c9:
7f:f6:71:86:bb:f3:17:60:3e:6a:3b:24:c4:6d:9d:
03:0a:9e:ae:76:33:6f:e2:d9:90:01:a6:aa:fb:d3:
d2:37:58:80:ec:71:7b:01:7a:ac:4d:ee:0c:15:e3:
41:10:15:a8:01:b1:ca:a4:4a:b3:f8:6f:38:ed:6a:
b4:34:c3:92:cf:ac:74:d9:96:1e:24:c2:64:b4:2e:
95:99:49:a3:22:7c:8e:e7:5c:ef:e7:f4:05:01:10:
97:52:d5:38:a4:51:00:ed:4a:b9:a5:ba:83:db:70:
c9:cd:25:7f:67:f9:e8:f8:a4:0a:09:51:cf:97:af:
87:2b:ce:10:c6:3e:c8:de:3e:af:43:af:18:17:79:
04:24:e6:28:ff:63:75:ca:7a:4f:3e:1e:f3:d2:0d:
89:be:43:57:1c:3e:41:a9:1f:43:35:c8:71:23:74:
1d:b6:c2:b6:fe:f7:3b:15:bb:c0:41:13:e1:17:62:
c3:08:38:b6:2a:e3:37:fe:33:c0:0f:37:bf:f0:b0:
dc:26:be:1d:e5:06:03:fc:8f:fb:61:ed:ef:05:2e:
a1:89:6a:10:f3:b9:48:1b:0e:63:18:ba:ad:f8:f5:
8d:8b:64:d3:5c:21:7a:84:95:1b:aa:43:6b:a8:58:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:5E:6B:EB:6A:46:48:59:6C:CF:67:3A:62:57:02:2B:A9:21:6C
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e9:f9:6e:1f:d1:74:90:87:64:31:20:14:90:10:e9:2f:cb:
d0:a2:39:5a:9d:a2:ed:97:d1:de:d6:e2:2c:e9:69:83:03:b8:
6e:62:8d:ae:b8:25:6b:ca:db:0a:30:e4:80:d4:d2:c0:6c:fc:
b4:d9:79:a6:85:f6:c9:e3:fe:c6:a6:00:6c:98:5a:90:86:f2:
a6:47:77:85:8f:e9:c2:02:69:96:b6:9f:ca:a7:78:af:b7:b2:
2e:d1:03:03:dd:92:7d:48:89:e3:bc:bb:63:94:50:46:53:14:
2e:18:8a:13:26:b6:c7:a9:f6:ff:83:42:d0:01:a2:90:4b:03:
3e:eb:e1:a7:36:2e:3f:45:b9:21:a3:e1:93:51:3f:60:c5:52:
7b:66:7f:88:73:c8:cf:d3:83:14:1e:67:b8:d2:89:42:7c:a4:
be:c2:33:ec:bc:11:6c:fb:af:c5:e3:ed:ed:b1:3f:0a:b1:23:
bf:ae:71:58:7f:98:14:a6:ab:5f:06:2a:24:7d:d5:d1:2a:c7:
d8:32:d6:71:f7:8a:16:9c:26:7a:44:22:de:1f:10:f3:e2:6d:
b4:f6:a1:3f:d0:45:bd:ea:9b:d2:74:2f:88:d1:8b:be:5a:c3:
ad:e7:a0:37:33:1a:06:90:48:bd:d2:1d:dc:a1:0b:4b:7a:a2:
b7:34:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:28 2026 by rpki-client