Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: i8yul8URcQeplnbWURjAtst44qpq84EEpN+nTNILNew=
Subject key identifier: DD:F7:33:09:0B:AF:EF:C3:C9:3B:8D:D9:51:13:BE:15:4C:E0:1D:74
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 01A0C4450E3C796FB77FB4F08269FA0C833C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0BC1
Signing time: Mon 21 Sep 2026 14:00:55 +0000
Manifest this update: Mon 21 Sep 2026 14:00:55 +0000
Manifest next update: Tue 22 Sep 2026 14:00:55 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: 89udeY5lOn+WD5f4EAFWAtStYbdSlBI+si99Q/uFfVk=)
2: RgCJAWuDIXQYJVvsP_U18nK8KFw.roa (hash: GmGWQR9N7Jh5zTJJFcgEYZ0TXkMlpQARksYHHrtwKmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:0e:3c:79:6f:b7:7f:b4:f0:82:69:fa:0c:83:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Sep 21 14:00:55 2026 GMT
Not After : Sep 22 14:00:55 2026 GMT
Subject: CN=ddf733090bafefc3c93b8dd95113be154ce01d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:94:b5:75:0d:18:82:c9:d5:6f:c0:3a:05:
a2:e4:f9:52:c4:63:0b:e4:de:55:14:21:75:a9:85:
38:5c:f3:90:5b:56:3a:f5:e0:fd:78:27:67:5a:20:
a9:77:6b:2b:c2:ef:48:84:8b:74:7c:99:03:2f:0c:
26:23:ce:89:f9:25:37:03:43:d1:52:12:2a:ae:6b:
86:db:c0:34:24:0c:9b:cd:e9:a6:12:9f:de:41:e8:
29:54:c1:44:e9:59:53:7a:c2:90:90:95:7c:86:19:
6b:42:f3:7c:f2:27:6d:fb:42:b2:46:b2:2f:58:d3:
c9:d8:1e:95:72:80:31:ff:19:58:e5:5d:f1:d3:39:
ed:c0:8a:31:26:ac:e3:4d:01:52:96:10:bb:79:9c:
75:5f:62:96:1e:4f:47:ac:ed:0e:9b:7f:6c:c7:62:
89:c9:28:3b:0c:a8:65:57:42:bb:3a:90:f7:84:2d:
6b:6c:b4:54:24:8a:3b:4f:f4:8b:cf:4a:7a:8a:5a:
b2:fd:d9:f3:6f:c6:48:e0:79:30:a0:4c:a5:e6:18:
59:5c:df:e0:b3:68:78:a6:d2:25:2d:ec:50:e4:4e:
84:9d:83:b0:14:ae:c0:ee:24:6f:18:a5:fa:58:44:
94:dc:2c:ea:1b:37:a8:59:53:36:e8:62:06:7a:e4:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:33:09:0B:AF:EF:C3:C9:3B:8D:D9:51:13:BE:15:4C:E0:1D:74
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a4:4e:b9:3b:3e:ab:e6:95:e5:65:8c:fb:7d:ed:86:08:e0:
d4:53:0b:72:c5:36:52:7c:96:dd:ea:8f:2b:f6:0f:d5:31:65:
56:9a:e8:42:3a:83:36:68:f0:7a:85:e3:ca:41:9a:42:9f:0f:
6c:47:6f:d3:9d:42:39:c6:d7:e7:7a:92:cc:e8:49:6c:f6:d5:
0a:cf:f1:1e:62:73:9e:33:4b:4d:0b:d0:fe:94:94:98:65:a2:
a0:37:d6:8f:7f:5f:1c:66:2a:d2:69:62:e8:58:c1:57:38:ab:
cd:aa:3e:67:82:89:cf:af:be:6d:3f:9c:be:be:31:90:a1:22:
e8:b9:e8:fd:c2:2c:e4:3d:92:48:13:fd:77:12:89:bd:ac:39:
cd:00:29:6c:9b:ac:0b:b2:e6:c6:d9:62:d4:c2:a9:f2:f1:23:
97:08:a9:29:d0:97:f3:d4:4d:bf:cc:51:e4:0e:08:57:ae:62:
1e:ee:85:38:e1:0e:77:6a:05:be:b4:ef:f2:b0:ea:10:69:5e:
af:07:27:bd:8b:00:52:6d:1c:8c:39:81:6b:a1:d4:f5:55:1b:
c2:5b:78:5b:c8:fa:22:ba:8d:20:d7:df:b3:fe:44:cb:27:f4:
7f:da:de:5a:ea:0c:14:8e:0e:2f:e3:ca:cf:b2:20:93:6f:45:
82:ff:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:23:32 2026 by rpki-client