Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: mlHX3PGVIZTppix9rLbAZfOkX8oEUql9tU4qfWN+OKM=
Subject key identifier: 89:66:F0:98:C5:7A:12:10:D7:25:78:47:E6:56:68:7B:AF:8A:33:21
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019FA975A2ABD8CCE7707D36D4676E697EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 10CB
Signing time: Tue 28 Jul 2026 16:01:26 +0000
Manifest this update: Tue 28 Jul 2026 16:01:26 +0000
Manifest next update: Wed 29 Jul 2026 16:01:26 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: +NNO6fDoBvNV5T5vzFqfur376vP+w62xJOh0y1i75iU=)
2: hNYIQ5HHhINGm0B4xE-M57SIxF0.roa (hash: FqszJttjAhJJ6gXeV7wcVvhxNzpQaBx6Ggtmu08rd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:a2:ab:d8:cc:e7:70:7d:36:d4:67:6e:69:7e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Jul 28 16:01:26 2026 GMT
Not After : Jul 29 16:01:26 2026 GMT
Subject: CN=8966f098c57a1210d7257847e656687baf8a3321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:86:be:ab:f6:2f:99:9f:4b:eb:08:fa:6e:
5c:e3:63:0a:6f:ac:0e:ad:8d:d5:d2:ce:bc:58:d6:
78:ad:0d:ff:a4:c9:a6:dc:fa:9d:8b:b8:c1:d5:3d:
da:4a:d0:31:d0:cb:2a:86:46:e0:b0:d3:10:82:75:
a9:69:1d:0f:1b:42:e8:fd:68:b4:1a:e5:8c:b4:3a:
8d:e0:2e:5c:d8:c1:ca:c1:3b:0f:08:9a:85:de:9f:
ca:7d:a1:4e:f3:17:19:8c:14:e0:08:f4:d2:55:8a:
49:20:70:53:d2:2c:93:ad:cb:73:e5:13:b0:d5:41:
d4:9e:ab:1d:01:3a:b3:e4:d3:c4:39:56:4f:d9:88:
33:dd:3b:ef:64:67:a3:8e:2a:be:bb:fb:89:36:0b:
a6:79:90:88:15:3b:90:25:29:b7:09:61:60:cc:3d:
2e:ec:d5:98:d6:63:f2:0a:8f:55:4f:fc:07:3f:b5:
e6:d4:bd:11:9b:28:62:88:b2:40:73:ad:1d:f5:66:
26:d3:6a:b9:68:a5:d9:f4:b5:d7:4f:73:4b:27:05:
1b:38:16:e9:18:35:71:f8:25:f2:ed:a6:4d:7a:71:
82:d1:e8:17:c3:8c:cc:3e:6d:2d:99:91:66:ed:01:
06:73:64:66:22:8b:02:5e:c2:0f:27:c7:32:cc:4b:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:F0:98:C5:7A:12:10:D7:25:78:47:E6:56:68:7B:AF:8A:33:21
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6a:54:31:e3:09:4e:ee:f5:ac:54:94:f4:94:86:48:99:40:
12:8c:1a:05:7d:89:95:3a:62:6a:8d:58:63:03:2a:bf:ae:c8:
1a:7f:33:3c:3a:5b:b8:06:7d:fb:b2:80:42:74:34:57:c4:f9:
1d:5a:d9:a3:79:89:e7:7f:15:53:3f:9c:75:ba:3e:fb:0e:f6:
3c:33:4a:b1:33:94:bb:e3:17:e6:b7:52:29:16:ce:06:62:92:
17:3c:2e:c3:35:6b:70:dd:83:84:b8:a0:58:5a:7e:99:b8:3d:
16:ae:43:6c:74:40:69:0d:b4:b6:df:af:58:dd:39:b2:e3:f6:
b5:18:28:3d:30:e4:bd:bf:8a:78:c8:f4:43:47:d0:38:8d:83:
4c:f5:f3:c0:e6:13:dd:7f:30:66:09:ba:fb:ad:45:3d:d1:28:
94:e1:26:63:d8:63:6a:61:6c:d6:a7:00:e8:24:63:02:f9:f0:
a5:1f:62:4e:69:7e:65:d5:d6:54:6a:c6:f5:43:8f:26:b6:ad:
9e:43:27:9a:44:0c:8d:28:b8:be:1b:64:d4:fa:92:72:85:94:
ee:6e:02:6d:92:e7:a4:14:50:aa:eb:f5:f1:28:44:9c:a9:69:
a4:37:48:b0:51:09:21:47:7f:2d:b6:7b:0f:71:ea:96:41:aa:
f9:cb:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:50:17 2026 by rpki-client