Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: i3lHxvrbPr6tj42FqXdp10s8wiEjmLndmLP53aWeHUs=
Subject key identifier: 5F:28:AE:40:31:DC:4C:77:09:56:13:47:69:F6:E8:AD:1B:97:F0:38
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019CAAC6428BD8904D68E2930346C4F390AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 09A1
Signing time: Sun 01 Mar 2026 19:00:45 +0000
Manifest this update: Sun 01 Mar 2026 19:00:45 +0000
Manifest next update: Mon 02 Mar 2026 19:00:45 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: 2p5OPAdNwHtdzUznvzbuik0zm0UGeQHjLnAqrNMlbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:42:8b:d8:90:4d:68:e2:93:03:46:c4:f3:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Mar 1 19:00:45 2026 GMT
Not After : Mar 2 19:00:45 2026 GMT
Subject: CN=5f28ae4031dc4c770956134769f6e8ad1b97f038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:b8:91:09:a8:80:2e:22:0a:6f:db:8d:63:
e2:5d:49:0d:26:cf:d7:11:15:59:6f:09:54:74:cf:
9c:4b:aa:10:71:29:6f:ad:b9:19:da:c4:0b:d2:6f:
d3:6e:76:8c:33:c3:53:86:25:56:8e:4f:3b:55:12:
be:a9:9e:e6:3e:ec:ae:b0:42:71:54:a3:75:85:54:
c9:1e:d5:23:cc:76:73:6e:97:65:2f:4a:e6:29:8b:
ad:25:2f:ac:e3:d5:1d:c5:93:69:5c:7d:13:49:9d:
65:c0:42:52:8d:42:53:a5:c9:ba:bf:6f:fa:23:e5:
fb:f8:02:de:e8:70:29:2e:6b:40:7f:62:c8:5d:24:
59:26:1e:1a:d4:f1:da:2e:a7:3f:ea:5a:25:87:39:
2a:fa:1b:b6:63:86:bc:42:56:01:4f:46:ca:7f:26:
77:35:33:48:db:1f:7d:41:5e:46:b9:a4:c9:fe:b3:
5b:40:af:1e:9e:8c:92:ed:54:f9:04:05:7e:ee:13:
b7:c7:ee:ee:36:3d:78:8d:0b:75:d3:bc:36:05:6f:
e8:b8:d8:1c:4c:ae:1b:50:be:3e:14:51:49:c7:36:
09:bb:2d:e0:a2:15:45:fa:ab:5d:b3:90:f0:1a:25:
7a:b5:75:eb:09:5f:b5:1a:ff:ca:db:0c:ad:a5:3b:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:28:AE:40:31:DC:4C:77:09:56:13:47:69:F6:E8:AD:1B:97:F0:38
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:04:2b:e1:84:62:d8:9d:79:08:b9:76:70:c5:6c:b9:7c:
50:bd:2c:7e:4e:7c:6b:75:5a:62:49:16:31:78:c1:4a:79:a9:
5a:e4:c6:85:80:de:25:d0:13:09:4f:f5:db:39:c2:d2:0f:74:
23:2b:ee:62:cb:cc:a1:85:28:28:30:78:19:d1:46:75:ba:be:
41:54:e6:a8:07:a4:1f:85:ab:f7:65:c4:11:df:63:2c:7d:9c:
55:62:f0:9a:69:3f:61:33:91:29:3b:65:3d:c8:e8:06:e4:ac:
db:8a:bd:0f:f4:22:54:1d:a2:d9:cd:16:67:7f:78:19:b9:21:
9b:64:15:1f:e1:18:bf:52:25:62:fa:c8:f7:9d:7b:59:ae:cc:
27:8f:6b:fd:2f:d2:ca:a3:05:f5:35:a6:51:9b:28:38:fe:97:
69:28:68:07:de:51:08:20:d2:e7:7c:f4:16:a3:f3:46:d4:79:
b0:44:d9:88:38:d9:be:d7:fb:4a:9a:5a:a5:ce:e0:61:f2:0e:
45:e6:96:65:e2:f1:a2:f0:b8:ab:cb:19:db:05:e0:da:9e:fe:
9a:7f:84:6b:63:cc:a4:9c:c4:5d:08:04:9e:a3:de:3e:ac:6f:
99:25:91:9c:91:d7:86:3a:88:2a:8f:38:83:d9:ca:53:b6:38:
b5:28:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:55 2026 by rpki-client