Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: r3eVKYzB5i7g5T7SOrHzbXqYfF1leG8mdRuHoHtPLHc=
Subject key identifier: 13:BB:B7:C8:1C:14:FD:AB:F2:B9:FD:6F:CD:6D:CF:9B:61:10:E0:10
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019FA974A1B43844D9FF61D96DD313F374AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0B2E
Signing time: Tue 28 Jul 2026 16:00:20 +0000
Manifest this update: Tue 28 Jul 2026 16:00:20 +0000
Manifest next update: Wed 29 Jul 2026 16:00:20 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: U0p9bP//kXUspXAYkSw5NeCdSRAxN2uiatpoeTYORmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:a1:b4:38:44:d9:ff:61:d9:6d:d3:13:f3:74:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Jul 28 16:00:20 2026 GMT
Not After : Jul 29 16:00:20 2026 GMT
Subject: CN=13bbb7c81c14fdabf2b9fd6fcd6dcf9b6110e010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:50:a8:43:01:97:92:68:cf:d0:13:eb:37:
c2:62:7a:b5:84:f3:77:e1:a0:7f:b7:d7:fb:59:db:
89:6d:bc:9d:f2:4c:a6:cc:2a:73:6c:1f:c8:62:5f:
91:7a:49:b4:7f:92:bc:27:0b:93:d4:42:2e:21:95:
da:5f:7d:4d:74:af:a8:77:a8:e2:8f:1d:30:2a:f2:
8c:2a:4b:c7:82:1f:cd:82:c1:1a:5a:3a:0f:3f:13:
7b:6a:9d:fe:36:e2:af:65:97:cc:83:86:28:11:41:
67:6a:7d:90:6a:34:78:95:1d:4c:63:01:29:f5:36:
3f:b0:6b:76:4a:59:08:03:0b:2c:c1:89:2f:82:3d:
dd:b5:39:c4:e6:f6:20:1e:27:53:40:2f:df:92:71:
7c:72:e1:f7:17:e9:b0:9d:88:ae:4a:83:fa:eb:02:
1a:c3:c6:23:78:49:50:8d:c0:bb:7a:3b:e1:62:e2:
b3:6c:ff:02:7d:bb:fe:ea:97:63:12:b9:da:8e:5a:
2a:70:3b:22:2d:09:7b:73:41:69:94:12:bf:91:56:
91:aa:61:a9:26:40:2d:40:e0:ac:9d:43:b9:de:3a:
63:0f:86:63:41:c2:93:5f:b6:64:81:65:61:d5:fc:
0a:6e:f5:83:c7:17:af:c4:57:30:0f:2b:b8:3c:5d:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BB:B7:C8:1C:14:FD:AB:F2:B9:FD:6F:CD:6D:CF:9B:61:10:E0:10
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2b:d7:e2:1f:bc:93:06:d2:58:b6:fb:a9:82:36:4a:d0:09:
d2:89:a0:4d:34:7b:39:7e:70:49:eb:ca:24:cd:db:49:70:4c:
6f:be:c9:6c:1e:7c:c0:33:9e:1e:be:df:fe:ed:f9:f0:d1:32:
66:1a:c3:28:3f:5d:24:96:14:c5:e0:7c:08:b8:e9:da:85:00:
37:8f:15:e3:87:f2:4d:3f:6b:a8:a4:5e:36:28:e9:7c:47:4f:
0b:fc:df:85:fb:42:d8:fa:58:1b:9d:de:35:c4:e3:07:22:6a:
70:0d:12:e3:d4:5e:27:4b:73:f1:b0:ed:05:18:61:ae:c8:c4:
c8:2b:42:11:e3:fc:18:0e:9b:32:08:03:9a:eb:2d:44:4d:23:
ee:86:f9:0c:64:1f:af:b9:c8:2f:9d:bc:4f:f6:ac:cf:40:3a:
c5:09:64:78:2b:96:f7:d0:be:9b:d7:8e:ef:6f:47:7b:21:55:
30:ef:33:2a:fa:66:fb:ae:19:5e:7b:31:13:01:c9:66:fa:7a:
dd:ec:f6:31:a4:78:d2:f0:4f:34:bf:d1:77:4a:96:2c:a5:7b:
90:3f:bb:f5:84:f7:5b:e3:ce:85:ff:3a:31:f1:d6:a4:99:e5:
3f:c8:8e:0e:df:82:fd:83:dc:aa:02:a0:47:33:1d:7d:04:96:
23:da:21:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdKG0OETZ/2HZbdMT83SvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Mzg2YzE3YjQ1NjEwYjU4YmJlMDljZDMwY2E5ZmIwYzE5
NjFmZDMwHhcNMjYwNzI4MTYwMDIwWhcNMjYwNzI5MTYwMDIwWjAzMTEwLwYDVQQD
EygxM2JiYjdjODFjMTRmZGFiZjJiOWZkNmZjZDZkY2Y5YjYxMTBlMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosRQqEMBl5Joz9AT6zfCYnq1hPN3
4aB/t9f7WduJbbyd8kymzCpzbB/IYl+Rekm0f5K8JwuT1EIuIZXaX31NdK+od6ji
jx0wKvKMKkvHgh/NgsEaWjoPPxN7ap3+NuKvZZfMg4YoEUFnan2QajR4lR1MYwEp
9TY/sGt2SlkIAwsswYkvgj3dtTnE5vYgHidTQC/fknF8cuH3F+mwnYiuSoP66wIa
w8YjeElQjcC7ejvhYuKzbP8Cfbv+6pdjErnajloqcDsiLQl7c0FplBK/kVaRqmGp
JkAtQOCsnUO53jpjD4ZjQcKTX7ZkgWVh1fwKbvWDxxevxFcwDyu4PF12kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBO7t8gcFP2r8rn9b81tz5thEOAQMB8GA1UdIwQY
MBaAFOc4bBe0VhC1i74JzTDKn7DBlh/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYt
NmJiZDY4NWQ5MjMxLzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYtNmJiZDY4NWQ5MjMx
LzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfivX4h+8
kwbSWLb7qYI2StAJ0omgTTR7OX5wSevKJM3bSXBMb77JbB58wDOeHr7f/u358NEy
ZhrDKD9dJJYUxeB8CLjp2oUAN48V44fyTT9rqKReNijpfEdPC/zfhftC2PpYG53e
NcTjByJqcA0S49ReJ0tz8bDtBRhhrsjEyCtCEeP8GA6bMggDmustRE0j7ob5DGQf
r7nIL528T/asz0A6xQlkeCuW99C+m9eO729HeyFVMO8zKvpm+64ZXnsxEwHJZvp6
3ez2MaR40vBPNL/Rd0qWLKV7kD+79YT3W+POhf86MfHWpJnlP8iODt+C/YPcqgKg
RzMdfQSWI9ohow==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:43 2026 by rpki-client