Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: hyc/nsmTLXGbIyzUgTXHhBG3yzLkUH/nwsYYUMqwkhE=
Subject key identifier: 91:B8:C4:1E:56:29:2F:5B:74:97:AB:BE:DF:54:B2:69:30:68:55:2D
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 019CADFE288B17F5B875264D96FB97618F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:00:40 +0000
Manifest this update: Mon 02 Mar 2026 10:00:40 +0000
Manifest next update: Tue 03 Mar 2026 10:00:40 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: aHzb7Yn9ZJABb2nX9f9Ju41PKmkx/t+xlqh3N5oBdCw=)
2: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (hash: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:28:8b:17:f5:b8:75:26:4d:96:fb:97:61:8f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Mar 2 10:00:40 2026 GMT
Not After : Mar 3 10:00:40 2026 GMT
Subject: CN=91b8c41e56292f5b7497abbedf54b2693068552d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:7a:93:9e:15:09:ea:d1:69:7d:68:1e:9b:
a8:86:f5:9f:22:8e:75:29:c9:24:2f:40:b5:24:11:
cb:56:54:e8:47:ed:b6:04:e3:f1:69:0e:6a:17:45:
b1:97:5b:e7:b7:1a:22:3f:6f:19:08:b4:1a:09:ca:
b3:24:cd:1a:77:e3:9e:57:4f:ec:b5:1f:f3:b3:75:
4b:ce:27:ca:17:72:84:57:35:de:ab:75:a3:9e:7a:
11:bf:3d:fa:c0:4b:67:9f:b6:bf:45:e4:4c:8c:c8:
23:2b:ac:9c:c3:3f:fc:bc:f4:6d:3f:0d:23:a6:04:
f2:65:c0:5d:c8:ab:00:dd:b6:46:88:bc:31:79:7d:
08:38:9c:40:39:86:e2:55:90:16:ca:6a:3b:09:66:
ca:bb:51:db:b6:0c:d2:08:55:0d:4b:74:30:3a:e2:
1a:45:50:b0:54:8f:a1:66:48:1c:28:4a:e8:c2:1a:
ac:80:58:d4:e7:24:49:3e:c4:1f:ec:8c:2d:7c:13:
fa:65:9b:10:4e:e2:28:de:af:5b:89:96:c2:c2:d6:
53:04:9f:3b:11:13:64:95:84:34:55:49:1d:a7:44:
00:3b:f4:5a:b8:87:ea:97:ee:ed:12:55:3c:6e:73:
23:9a:0a:c9:e7:8f:09:59:3b:24:38:d7:ff:73:58:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:C4:1E:56:29:2F:5B:74:97:AB:BE:DF:54:B2:69:30:68:55:2D
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:81:0f:ff:f7:4c:c7:08:25:62:82:c6:fe:d8:2f:e3:4f:6e:
00:75:1e:27:2a:32:12:4c:01:c3:e5:a1:04:be:ad:94:58:ed:
e1:3b:29:6a:51:58:6d:77:7b:d3:89:cb:ce:67:b3:8d:71:53:
22:75:44:0e:f3:63:85:ed:08:cb:88:84:5f:c7:22:4e:46:91:
e7:a3:06:05:5f:5f:01:da:e7:ef:b2:53:ee:26:f8:95:ad:1b:
6a:47:2d:63:c1:d6:4b:c2:ce:82:c6:d9:04:81:66:d2:45:84:
4f:77:91:2e:e4:0b:58:10:34:91:e9:3d:df:c5:60:55:56:16:
42:e9:c6:94:00:ce:d7:a3:cd:9f:c7:9e:aa:6c:70:13:67:2e:
2d:4f:0c:b3:44:6b:04:0f:60:b0:ee:a1:66:9c:44:56:0b:b8:
58:76:65:8e:31:ba:56:fd:e7:21:85:9e:34:7d:96:29:e3:db:
c0:ef:f0:05:f6:c5:00:96:9e:0c:40:39:ac:26:41:86:02:81:
3b:24:87:9b:a0:04:aa:35:f6:4f:bd:30:20:61:e7:6e:fb:84:
e9:6d:d5:93:11:50:07:a4:be:bd:7d:e5:46:3c:8f:09:b8:1e:
37:6c:f2:a6:21:29:b8:d7:0d:3a:89:2b:fe:26:e2:49:f3:8c:
7a:c6:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:15 2026 by rpki-client