Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier: +ZR+0eAIoEEIuof8+Zz09WJGG1FIdZEzs0OFsEwExXI=
Subject key identifier: EC:EF:1F:0E:A6:05:A5:FA:4A:54:23:4B:CE:E4:BA:FD:74:76:2B:EA
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial: 019FA9AC0A14428B2AC614C34B82DCC98C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number: 10AA
Signing time: Tue 28 Jul 2026 17:00:52 +0000
Manifest this update: Tue 28 Jul 2026 17:00:52 +0000
Manifest next update: Wed 29 Jul 2026 17:00:52 +0000
Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: fx3ykLcrHErf3ul/YWqy+Z8SzassbSUQBphKl+ocQ6o=)
2: X3KSPRpScg7W0Ns5vBLAW7YVOAY.roa (hash: gCWNoXRiXdqXJ9sAUoBn9JpM+1ZIHNyGOsBQSFKX4Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:0a:14:42:8b:2a:c6:14:c3:4b:82:dc:c9:8c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Validity
Not Before: Jul 28 17:00:52 2026 GMT
Not After : Jul 29 17:00:52 2026 GMT
Subject: CN=ecef1f0ea605a5fa4a54234bcee4bafd74762bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:1f:98:73:55:fa:5d:0a:6f:93:ea:9d:62:
de:a0:a9:a4:2a:b0:02:55:d3:8f:ea:a5:88:79:55:
c3:a0:39:5b:a9:11:e6:49:ba:42:65:79:b1:18:e0:
ac:d2:94:87:44:8a:d8:21:2c:e1:b8:35:a7:0a:1a:
4c:78:44:2e:c7:af:3a:68:35:86:89:21:d3:35:ff:
4c:4c:3e:6a:06:b9:42:b9:7a:74:01:df:47:77:75:
d0:74:cf:2b:04:a8:ff:79:e6:49:07:c3:f8:df:81:
a2:b8:6d:3e:2f:68:cf:78:ac:7f:ea:be:f0:92:5e:
4f:80:31:ec:80:bc:f4:b9:15:21:e3:8c:1c:b9:96:
c8:81:c5:15:ed:d1:16:ac:bb:b4:70:68:fa:ac:b1:
0d:fe:c0:2c:0e:ab:6b:84:96:0b:64:7e:80:a8:b6:
da:51:d3:51:5f:7a:7a:70:a5:80:47:82:eb:62:3c:
3b:77:00:30:1c:5d:5a:90:34:90:a6:3f:db:fb:1c:
26:b0:58:46:4b:a0:8b:69:75:cb:2a:17:55:29:38:
00:a9:c6:d2:dd:1c:23:a3:e9:de:f6:54:c8:8b:6a:
a8:bb:93:dd:4b:4f:8b:53:6d:4b:03:a5:61:12:59:
8a:af:af:9f:54:81:aa:0b:f1:10:ac:63:65:88:fe:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:1F:0E:A6:05:A5:FA:4A:54:23:4B:CE:E4:BA:FD:74:76:2B:EA
X509v3 Authority Key Identifier:
keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d3:e0:5d:63:7d:dd:47:1c:4d:63:88:d0:cd:9a:f7:c0:b0:
d1:11:78:e9:fb:91:9e:49:73:35:0c:24:75:f8:13:16:b1:a3:
d3:42:a9:a9:da:e0:bb:4d:33:2a:d4:97:29:66:c9:50:ac:73:
26:42:2a:f7:10:26:83:55:e1:59:d7:e6:35:e8:db:c6:ed:0a:
66:b5:e1:29:39:dc:42:16:86:3c:64:c0:c3:ab:9b:b5:4d:59:
fe:87:53:f7:34:7a:0f:d8:29:b8:0d:32:97:3e:9d:9e:53:88:
3c:63:7c:4e:b4:e7:21:ab:18:62:2b:c2:1d:1a:97:29:6a:5a:
88:8a:fe:9e:9f:16:03:43:99:f8:b4:2d:09:fe:46:35:ec:56:
2a:d5:f2:d7:6c:08:40:66:e9:60:05:f7:f6:47:c5:1f:7d:c3:
53:bb:52:b6:d7:8d:f0:36:70:40:ec:66:ed:e3:5f:5b:5e:89:
52:8e:13:ea:87:e9:f2:1b:a8:2b:fc:d6:0d:1b:fa:2b:47:00:
97:e4:b8:ed:2c:2c:d4:ee:84:af:b0:17:39:66:7f:71:98:4d:
e4:bb:89:28:af:bd:58:88:26:c3:09:f8:d8:09:ec:e2:59:d3:
90:da:c1:77:ef:8a:56:2e:06:73:74:69:58:4a:d1:68:7c:51:
db:fb:ce:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prAoUQosqxhTDS4LcyYwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGEzM2E1OGZiNDc2MzRkNjE0ZWMwOWE2ODk4ZGUwZjU4
MDA2ZmUwHhcNMjYwNzI4MTcwMDUyWhcNMjYwNzI5MTcwMDUyWjAzMTEwLwYDVQQD
EyhlY2VmMWYwZWE2MDVhNWZhNGE1NDIzNGJjZWU0YmFmZDc0NzYyYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkkfmHNV+l0Kb5PqnWLeoKmkKrAC
VdOP6qWIeVXDoDlbqRHmSbpCZXmxGOCs0pSHRIrYISzhuDWnChpMeEQux686aDWG
iSHTNf9MTD5qBrlCuXp0Ad9Hd3XQdM8rBKj/eeZJB8P434GiuG0+L2jPeKx/6r7w
kl5PgDHsgLz0uRUh44wcuZbIgcUV7dEWrLu0cGj6rLEN/sAsDqtrhJYLZH6AqLba
UdNRX3p6cKWAR4LrYjw7dwAwHF1akDSQpj/b+xwmsFhGS6CLaXXLKhdVKTgAqcbS
3Rwjo+ne9lTIi2qou5PdS0+LU21LA6VhElmKr6+fVIGqC/EQrGNliP6G/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzvHw6mBaX6SlQjS87kuv10divqMB8GA1UdIwQY
MBaAFOTaM6WPtHY01hTsCaaJjeD1gAb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMt
NmNlNjAyMjZhOWU4LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMtNmNlNjAyMjZhOWU4
LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNPgXWN9
3UccTWOI0M2a98Cw0RF46fuRnklzNQwkdfgTFrGj00Kpqdrgu00zKtSXKWbJUKxz
JkIq9xAmg1XhWdfmNejbxu0KZrXhKTncQhaGPGTAw6ubtU1Z/odT9zR6D9gpuA0y
lz6dnlOIPGN8TrTnIasYYivCHRqXKWpaiIr+np8WA0OZ+LQtCf5GNexWKtXy12wI
QGbpYAX39kfFH33DU7tStteN8DZwQOxm7eNfW16JUo4T6ofp8huoK/zWDRv6K0cA
l+S47Sws1O6Er7AXOWZ/cZhN5LuJKK+9WIgmwwn42Ans4lnTkNrBd++KVi4Gc3Rp
WErRaHxR2/vOww==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:28:21 2026 by rpki-client