Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: NmDZqDa9SPd8GVsKrQl3uJ+YFnRBdaKfmyYQZ17u+LA=
Subject key identifier: D8:6B:94:9D:92:70:5F:09:92:F2:07:20:F1:3E:AD:A9:C9:73:6A:F8
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019FAA19A6BA1107137B1993495D066DE566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 0A80
Signing time: Tue 28 Jul 2026 19:00:35 +0000
Manifest this update: Tue 28 Jul 2026 19:00:35 +0000
Manifest next update: Wed 29 Jul 2026 19:00:35 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: 3ZjuGozLvUqHqLj/YjfLDV83WgR2kE//XAFgn1J8n1I=)
2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:a6:ba:11:07:13:7b:19:93:49:5d:06:6d:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Jul 28 19:00:35 2026 GMT
Not After : Jul 29 19:00:35 2026 GMT
Subject: CN=d86b949d92705f0992f20720f13eada9c9736af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:ca:4a:0c:d2:a3:81:43:61:68:f1:e6:32:
3b:64:d7:da:7d:b0:df:e6:fa:d6:0d:4f:8c:2d:71:
9f:bf:11:7a:76:cc:60:7a:d1:76:a0:79:71:64:f8:
7a:af:54:43:d1:6b:a3:c3:94:b1:13:2e:a7:b4:85:
68:ab:08:d8:34:a1:b6:23:bd:36:d6:5e:14:b0:85:
e6:11:3a:04:3a:34:37:06:28:7a:e0:21:d6:e9:84:
f6:7d:ea:43:d4:13:fe:9c:06:54:9f:cd:2a:63:39:
79:18:0d:09:88:e8:df:12:f5:87:5b:45:71:24:30:
44:05:f7:a4:b2:60:5f:8c:4c:65:93:a3:34:a9:05:
23:a4:bf:05:c4:78:91:2c:13:f1:e3:ab:bb:e8:8c:
a5:6f:8d:8f:1b:65:50:c2:13:f8:33:97:b5:85:d0:
71:a3:ea:72:6b:69:46:b1:2f:b4:10:e7:9a:c9:f7:
e1:5e:f2:ff:17:28:2c:d8:e8:8f:5f:6a:90:02:39:
af:06:4f:cc:03:43:54:0e:31:3f:59:0d:64:62:51:
1e:ee:bb:0b:54:c9:93:db:0b:92:3b:b6:f8:79:1a:
bc:d7:2f:b1:3e:58:98:47:6c:ac:fb:e3:61:00:39:
da:00:fa:1b:89:66:24:39:42:37:38:52:27:b9:05:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:94:9D:92:70:5F:09:92:F2:07:20:F1:3E:AD:A9:C9:73:6A:F8
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:87:65:3f:1f:44:1a:7e:75:e8:3e:80:1f:0a:5e:49:7f:0f:
39:4d:0a:69:85:bb:29:d4:f5:49:55:91:7a:ce:91:f9:b8:c7:
fb:13:73:b5:e0:c4:e4:ba:2f:25:56:d9:0d:85:0d:df:49:0c:
3d:30:6c:7f:f8:ee:07:c3:68:e0:b1:3f:7c:7b:5b:7e:6f:a3:
ba:85:cf:d3:27:e6:98:90:d5:72:5d:b7:ce:df:38:3e:b5:8c:
13:58:6b:d6:d9:8e:a3:ba:80:6d:d3:29:4f:09:d9:da:48:45:
84:09:e1:4b:8f:f2:b2:fb:de:c0:44:bc:0e:b4:c1:c9:c1:39:
00:4b:1a:0b:72:b9:9f:28:a1:f4:40:d7:ae:3d:57:6c:36:55:
8d:20:1c:ce:17:d0:07:f1:7e:ff:95:f7:5a:6e:62:c5:4b:b9:
ff:53:99:5b:c7:65:6e:1d:73:4b:26:33:84:dc:7a:71:ca:54:
39:c2:5b:c1:11:b1:e5:95:7e:cf:86:32:d8:07:69:f8:3a:0c:
bd:1a:a2:fb:71:ab:e8:6d:ec:83:49:d0:3d:d2:8b:01:3a:78:
cf:38:69:db:8c:98:76:ed:57:75:ac:13:7a:c1:f2:1b:c9:6c:
6a:83:be:f7:dd:80:fe:8e:35:d9:21:25:90:8d:b6:67:44:c2:
95:64:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:49 2026 by rpki-client