Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
File: 421ZT1_jgr7Czo46Majyjm2XwB4.mft (raw, json)
Hash identifier: mnAmynyxZppevhbAWq1gm1fGlCGltSrlRbaBMsQtxsM=
Subject key identifier: D5:15:EA:3D:76:98:B2:F3:BE:FC:1D:9E:22:F9:EB:88:D4:E3:18:CF
Authority key identifier: E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
Certificate issuer: /CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Certificate serial: 019FA74FE64F86EF7135EA17D43754CCCEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
Manifest number: 73
Signing time: Tue 28 Jul 2026 06:00:59 +0000
Manifest this update: Tue 28 Jul 2026 06:00:59 +0000
Manifest next update: Wed 29 Jul 2026 06:00:59 +0000
Files and hashes: 1: 421ZT1_jgr7Czo46Majyjm2XwB4.crl (hash: fskDJZT5yjIl/eqmRjc7uIrvym4A9zq3Auq9u0UIPsw=)
2: 4kp9Gd2mxG804RIdTKshm3Dwmdo.asa (hash: eGP/nycwexU78v/Fn01o7w+Fu0NVubrmTB5+YYDpoOY=)
3: rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa (hash: gCYbQwWeJazWuKam4wgBrsfYsq8VV5PKDsC6OZTN4xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:e6:4f:86:ef:71:35:ea:17:d4:37:54:cc:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Validity
Not Before: Jul 28 06:00:59 2026 GMT
Not After : Jul 29 06:00:59 2026 GMT
Subject: CN=d515ea3d7698b2f3befc1d9e22f9eb88d4e318cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:cf:69:cd:de:9b:8e:ec:7e:31:d3:cd:1b:
d3:24:0f:ac:c3:f9:24:26:91:41:3e:c6:59:3e:bf:
58:f8:8a:ee:57:61:a3:9f:4d:87:e4:16:1a:18:3d:
2e:58:49:59:b2:ed:a1:d0:23:18:e9:31:d3:78:38:
23:09:1e:0b:7e:96:3c:33:ac:c4:ec:be:0f:3a:9f:
07:92:97:0e:9c:3f:b0:e7:06:c9:52:8b:ec:be:8f:
4c:d1:b5:97:d8:db:61:42:0b:1f:12:e3:40:3f:dc:
6e:2d:4c:1c:36:c2:5b:36:c2:fc:af:b1:f4:85:9e:
5f:1f:ea:24:25:72:03:0c:c8:3d:23:5a:7a:30:96:
8d:a7:d1:db:a3:47:9b:be:c0:d2:b5:c5:b2:c7:92:
74:82:59:f4:5d:8f:28:3d:a4:e2:6c:c2:bf:90:eb:
7d:7a:b1:6f:d7:9b:dc:13:b1:b1:1d:4b:6f:9f:43:
9b:2d:2b:ef:46:2b:15:8b:38:a7:f8:3b:04:16:2f:
af:1b:9b:35:bd:86:8a:a5:02:90:68:45:9b:2f:63:
54:36:a9:ca:6c:e1:1e:b1:12:47:26:9c:ac:fd:fb:
2d:8a:46:19:c0:4e:4b:8e:cc:4f:48:ca:4d:ce:94:
39:09:f2:64:10:9d:7f:96:10:79:0c:5c:bb:6f:68:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:EA:3D:76:98:B2:F3:BE:FC:1D:9E:22:F9:EB:88:D4:E3:18:CF
X509v3 Authority Key Identifier:
keyid:E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:32:ee:74:85:54:7a:a8:5e:a8:25:3f:f3:6a:77:64:6b:12:
d8:0b:d1:3a:95:fd:09:a3:1e:f9:1a:f2:a8:4f:1d:d1:ac:ed:
90:7f:f0:16:9f:e3:fc:af:ae:09:3b:cd:cb:be:d7:5e:73:11:
e5:00:f1:fa:78:f1:54:d1:68:6d:f5:fc:c5:8a:76:81:19:94:
66:35:74:08:10:e3:68:85:fd:31:7f:1e:c5:cf:05:e9:c3:de:
ce:76:89:f7:6f:fc:ab:af:a1:c1:4e:73:13:88:b8:c8:43:82:
03:77:c0:d8:25:e4:63:5d:24:a9:59:ac:d5:f5:9e:94:df:5e:
53:92:c4:31:00:cd:5a:bc:67:57:65:87:45:01:f6:a3:63:24:
b8:44:20:ce:cd:9d:71:24:b5:59:c5:43:d1:6c:13:cd:7f:3d:
e3:dd:9c:da:09:bc:21:51:6f:b1:94:9f:7f:03:0d:7f:09:ff:
7b:29:a8:6b:fb:3d:ab:a0:f7:c0:b5:f2:04:46:c9:c7:ff:16:
b2:08:36:d3:c0:83:d5:8f:fb:67:33:87:81:f2:65:3c:7a:1d:
34:03:8b:e2:f3:3c:b6:5b:51:d9:fe:0c:30:ea:09:5d:ca:48:
8f:05:da:8a:24:34:25:63:85:84:f8:59:e1:3f:03:de:8c:d1:
e7:bc:eb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:45 2026 by rpki-client