Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File: 5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier: /mar5Q8u/fo3iVFknOZ72xZJf4HCDb1oshKQ0VZPAs0=
Subject key identifier: F7:B5:C0:30:FA:38:C5:24:7C:E9:17:C7:5D:A4:88:B0:81:B4:0E:E4
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer: /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial: 019FA93D9FA9EC913EB635D424C9328FCFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number: 16FC
Signing time: Tue 28 Jul 2026 15:00:15 +0000
Manifest this update: Tue 28 Jul 2026 15:00:15 +0000
Manifest next update: Wed 29 Jul 2026 15:00:15 +0000
Files and hashes: 1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: AH5wfOEFTz2LiRmYpnfJE+LY2l2CiNVxyH4Zenh2LtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:9f:a9:ec:91:3e:b6:35:d4:24:c9:32:8f:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Validity
Not Before: Jul 28 15:00:15 2026 GMT
Not After : Jul 29 15:00:15 2026 GMT
Subject: CN=f7b5c030fa38c5247ce917c75da488b081b40ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:8f:70:ff:91:24:7b:3e:92:ab:f5:93:77:
a5:f2:66:43:50:9f:a9:ba:c0:23:39:bd:52:83:b3:
88:16:57:7b:a2:86:99:b4:34:76:27:72:a0:80:f1:
d2:f8:eb:97:3d:03:e2:e6:5c:ac:08:52:97:2c:3a:
38:68:c7:40:b0:b7:31:23:e8:42:93:33:13:16:7e:
3c:d7:42:e6:ca:d2:6f:2f:de:ff:03:f5:8e:3a:0f:
09:48:0a:c5:c3:79:5f:99:69:21:83:84:b4:60:10:
94:54:51:3b:64:c7:8a:09:73:e5:fb:2d:8d:32:14:
88:e8:9f:24:3d:fc:72:ac:79:30:7c:d3:f4:a2:e0:
0c:fd:06:09:6a:de:93:8d:cd:94:48:89:00:05:12:
ff:e1:0e:83:1c:b6:e4:eb:91:5e:19:c8:23:0e:04:
05:ad:14:d6:d0:a3:30:f8:42:35:ff:4e:d4:1a:8f:
79:e4:9e:b6:87:e1:be:c8:15:57:50:45:f9:71:cd:
30:8b:81:75:d5:6e:f6:45:bb:08:39:ad:93:0a:75:
e0:b3:e5:93:2e:af:65:7d:5e:9a:86:ee:ca:0e:77:
34:7e:21:4f:38:3f:ee:e7:4c:73:f0:9d:fe:3c:95:
70:19:dc:c7:1a:b5:3b:11:7b:a5:a8:cb:5d:cf:2e:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B5:C0:30:FA:38:C5:24:7C:E9:17:C7:5D:A4:88:B0:81:B4:0E:E4
X509v3 Authority Key Identifier:
keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:18:15:6e:6c:55:35:1f:3a:2e:48:bb:1f:6f:07:f3:75:52:
53:ef:c4:bc:7a:79:1e:17:9e:26:1b:f7:f8:85:c4:d7:79:fc:
b0:e0:8e:b6:48:5b:be:7e:1e:2c:37:35:14:50:0e:19:62:47:
78:cf:fd:85:68:a0:b6:38:ce:b4:bf:ff:c4:27:3c:bf:a2:f3:
ae:a7:06:85:45:d6:f5:41:f2:14:77:11:2d:cf:79:6d:6c:7e:
76:6b:d4:39:20:64:04:52:3d:c3:54:7a:12:b2:a0:4e:d8:90:
18:7d:ab:a5:0f:e6:09:bc:38:af:4d:a2:8e:9e:f4:18:f7:cc:
00:c0:03:41:7c:3d:84:84:4b:04:50:75:65:52:f1:82:f7:63:
ae:1a:23:e6:2f:3d:3b:ac:bd:82:0b:9e:fd:76:ee:43:a2:3b:
dc:d1:96:4a:14:4c:6c:b9:36:1c:9d:54:e9:37:e0:1f:41:28:
56:20:bb:fd:02:a7:18:79:d2:2e:cf:ca:c1:7c:c9:55:b3:d3:
89:2d:53:81:e6:21:05:e5:6d:9f:d6:5e:70:66:1b:62:ef:ad:
aa:a6:b3:ed:13:83:41:e1:f5:72:b9:f9:39:14:f4:74:72:8e:
10:25:90:90:11:17:b8:11:01:88:d5:e8:3a:02:62:e7:a6:7d:
8b:57:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:09 2026 by rpki-client