Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier: dAUCknA5PLOmcuOMZ2C2JVaES4RXPG+h4bejjkYRd/Y=
Subject key identifier: 7A:26:2A:47:87:18:19:27:C6:FA:95:41:BB:B5:7E:DE:30:45:19:45
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 019D9998EEB96C49051704030F2352D5E0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 04:00:29 +0000
Manifest this update: Fri 17 Apr 2026 04:00:29 +0000
Manifest next update: Sat 18 Apr 2026 04:00:29 +0000
Files and hashes: 1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: IF7Ll2kvEpbv9doPpWmK07Up/UZuP1PsHG47bDikUMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ee:b9:6c:49:05:17:04:03:0f:23:52:d5:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Apr 17 04:00:29 2026 GMT
Not After : Apr 18 04:00:29 2026 GMT
Subject: CN=7a262a4787181927c6fa9541bbb57ede30451945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:99:63:0d:a3:c1:4f:f9:30:1e:d6:be:33:
cc:ca:fc:84:7d:3c:fc:bd:f2:ca:38:dd:fb:60:0a:
9a:77:e3:3f:d0:34:43:fe:51:0c:ee:41:80:78:8e:
74:1c:7c:72:4e:fc:cd:59:89:bf:2a:a6:a7:64:84:
19:f0:09:02:a0:1f:b9:ee:80:68:7f:db:a3:b9:c4:
54:24:40:07:04:e3:1d:98:20:8a:e0:a9:f3:da:50:
e5:30:e6:0e:34:c8:23:4c:7b:46:d3:e8:e3:11:66:
cd:6d:33:90:58:ea:38:cf:54:00:dd:db:9e:7d:23:
af:d4:67:91:ce:e9:97:25:02:9d:ca:af:01:0c:bc:
e5:7c:7e:6b:ed:ef:18:54:42:32:e2:b2:c4:12:fe:
a9:d9:4f:cd:3b:a1:6e:f1:d8:dc:9f:5e:26:3a:85:
26:ea:fd:63:8b:de:c1:4f:9e:54:46:3b:a0:c7:53:
17:a6:b0:3d:83:7b:ef:bd:0c:9c:f9:61:60:d9:ba:
49:df:78:81:84:d8:fd:7b:8b:51:8c:90:77:e1:f4:
9f:4d:c5:75:3a:f3:51:5d:a5:7d:7d:fa:71:b7:c9:
75:0f:7d:17:4f:3d:e0:7e:8c:da:62:d0:78:b1:7a:
f8:8a:54:50:85:35:6e:36:90:3c:88:e5:16:66:7c:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:26:2A:47:87:18:19:27:C6:FA:95:41:BB:B5:7E:DE:30:45:19:45
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d7:8a:f1:9b:e3:62:62:47:29:68:a4:11:d2:c9:f3:53:4f:
a1:20:d7:b2:62:1e:93:73:b2:29:95:e3:a1:42:4d:c0:d9:6a:
44:cf:6f:76:80:c3:da:c7:f7:f7:9c:d2:29:ed:e1:fe:b7:86:
55:be:c9:71:1c:e0:cc:85:a5:9a:08:19:b1:69:09:d2:2e:6c:
c3:a8:99:81:ce:63:e7:a4:3e:0a:e4:38:07:e0:04:bd:5f:d0:
8b:1a:da:b1:6a:2f:0b:32:ed:44:bd:c8:72:b5:68:93:2e:6e:
0f:00:24:40:ea:39:db:72:10:ba:94:80:a0:64:ef:93:d0:47:
38:3f:9c:84:c3:e8:7c:04:c2:66:34:15:7f:5c:05:c4:5d:4e:
e3:7a:5b:e4:aa:68:7c:79:d1:aa:18:9d:69:ec:6c:ea:8e:ce:
4d:35:17:c3:5b:89:f7:df:82:8e:13:a1:7e:11:e9:c5:c8:2a:
f2:de:42:b0:ff:e2:f1:e9:b6:4a:64:83:0a:ac:07:95:7b:d3:
88:23:0f:42:96:1c:a2:67:58:40:a7:6a:9f:02:9a:68:3b:78:
fa:1a:06:55:e6:c6:a3:2f:d6:ea:a3:4a:9a:d2:fc:e5:7b:e9:
e5:0e:f1:18:5b:6c:89:5c:a6:27:59:03:66:7d:19:6e:41:19:
65:60:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:23 2026 by rpki-client