Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: 6f46MI/6tk4q6eq9cgUdmsg6/2QpUMUMYVAYSww6gtM=
Subject key identifier: 66:C2:03:91:E2:08:E8:10:F2:3B:2C:A1:38:A2:EF:BD:64:D9:49:E0
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 019D98F46ACFF5ECB8A6B7FA86689992AA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 11E8
Signing time: Fri 17 Apr 2026 01:00:47 +0000
Manifest this update: Fri 17 Apr 2026 01:00:47 +0000
Manifest next update: Sat 18 Apr 2026 01:00:47 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: 7u4Fztr+ohDB+dEa8JEmO8rwwDjCCgJ3u2W3PTKnNKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6a:cf:f5:ec:b8:a6:b7:fa:86:68:99:92:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: Apr 17 01:00:47 2026 GMT
Not After : Apr 18 01:00:47 2026 GMT
Subject: CN=66c20391e208e810f23b2ca138a2efbd64d949e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d5:67:69:ee:04:54:d5:81:6c:23:49:48:9f:
c9:bb:59:73:17:e0:28:78:63:06:51:48:b0:3e:3d:
84:61:15:99:47:99:06:d1:f8:48:56:57:60:28:c4:
2b:ee:99:5b:1b:35:56:99:8b:40:3a:01:3b:a9:6a:
80:fd:83:ea:d8:0b:6a:7f:48:af:d6:9f:8f:fd:78:
49:5f:66:55:eb:88:c3:71:27:1a:95:b8:6e:ce:a5:
9b:d9:dd:91:c4:48:8a:c7:fa:5a:73:11:a0:ea:21:
78:cd:d6:d9:86:d5:1d:91:ea:8a:52:96:88:e0:e5:
09:b0:52:d7:e4:88:fc:19:fe:46:6b:40:60:fc:d8:
c5:8c:ed:c7:6d:04:1a:6c:8e:e9:3d:15:d9:a5:6b:
d7:e3:d2:1a:e8:8f:ac:2a:47:ad:7d:89:d9:35:fa:
51:a2:8d:c8:3b:7f:53:28:56:51:67:bb:2e:90:28:
11:22:af:67:7e:fd:16:8b:4c:3c:96:c3:e7:6c:5f:
12:9f:dd:27:e6:ee:01:b5:98:df:0e:c9:72:06:13:
04:af:bf:5a:7f:49:48:bb:f6:7f:98:a4:1a:22:db:
7b:a9:8c:91:9f:6f:e0:a0:15:aa:38:17:26:14:80:
9a:42:9f:2a:c7:44:0c:99:65:5c:bd:c6:bd:c9:07:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:03:91:E2:08:E8:10:F2:3B:2C:A1:38:A2:EF:BD:64:D9:49:E0
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d3:79:91:f4:ce:35:fd:53:dc:22:4a:ae:4b:d5:cb:54:3c:
54:d5:3e:ff:58:b5:32:62:45:29:23:bd:91:ca:81:20:af:e0:
e4:36:2c:2d:05:4b:f5:ca:51:7b:63:a1:ea:42:0b:d1:09:cb:
8a:c2:ef:86:60:39:36:d8:b4:58:91:19:0c:03:ff:65:ab:bf:
4b:0b:8d:7a:09:2e:6b:8b:31:0c:44:04:41:fa:51:67:89:26:
f0:d2:97:1b:35:75:ae:d3:b2:6c:b8:7b:11:f1:84:bd:ae:8e:
13:56:09:32:56:08:a5:54:aa:1b:0b:0c:81:a7:6e:2c:98:6c:
0d:82:08:7c:90:3b:31:0c:58:d9:be:21:74:ee:85:d3:da:21:
06:31:c2:16:31:ea:25:a0:b4:f4:a0:c0:dd:b6:5d:77:f2:81:
a8:9a:02:06:51:7c:45:b6:0a:23:9b:1b:c3:e7:a6:84:c6:54:
9b:7f:28:75:ae:3f:fe:75:cb:8d:37:ff:0c:f6:23:8e:25:4f:
e6:cf:b3:81:9a:a4:28:7a:67:0d:c9:a3:f5:95:b0:03:f6:e5:
11:1c:7a:37:68:62:45:be:98:c3:de:96:69:e8:b9:97:c7:be:
0d:73:a8:92:a3:58:86:8b:d5:2d:57:26:06:6f:a8:1f:0a:a2:
d7:54:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:30 2026 by rpki-client