Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: 46JCgsNG/Oen5NcO9CPobAIPDVXEZhleI4nEyzOm7Jc=
Subject key identifier: 13:44:2D:0F:30:40:4B:18:C9:9A:9C:3F:42:89:9D:9A:FB:52:64:AD
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 01A0C632BF0AE95BE6D3484DEA98105638CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0BC2
Signing time: Mon 21 Sep 2026 23:00:09 +0000
Manifest this update: Mon 21 Sep 2026 23:00:09 +0000
Manifest next update: Tue 22 Sep 2026 23:00:09 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: vGrnJVk8NuDtUspwoH2mcXoWwbiSROhOWw004HFNPjY=)
2: RgCJAWuDIXQYJVvsP_U18nK8KFw.roa (hash: GmGWQR9N7Jh5zTJJFcgEYZ0TXkMlpQARksYHHrtwKmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:bf:0a:e9:5b:e6:d3:48:4d:ea:98:10:56:38:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Sep 21 23:00:09 2026 GMT
Not After : Sep 22 23:00:09 2026 GMT
Subject: CN=13442d0f30404b18c99a9c3f42899d9afb5264ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:22:11:7f:5a:d9:3a:b5:71:05:8f:20:38:
d5:3e:42:b5:50:45:15:25:a8:89:5b:41:e3:76:9e:
f6:bc:4e:2f:bd:94:86:bf:0c:a7:2c:87:91:79:8b:
6c:35:32:43:7e:41:20:10:64:98:aa:b6:cd:00:a1:
29:b8:3f:15:5e:47:52:fd:ac:fd:24:c9:f5:06:bc:
14:64:3f:e6:7f:48:be:5a:fa:61:cf:96:f6:ea:ad:
a4:56:9a:4b:40:7a:c6:0d:b6:8d:31:72:91:de:9a:
0a:44:0b:83:60:6d:a0:77:43:17:38:e7:76:43:c6:
67:e7:8b:e4:78:a6:46:26:50:f8:55:a0:ab:31:6b:
1c:a4:17:6e:e2:da:ce:ec:80:38:4c:ca:60:3f:8c:
a3:37:42:ae:df:c8:90:d4:3d:38:12:b4:5a:b3:b8:
c5:e3:14:a7:7c:bb:5e:3c:8b:04:85:1b:ee:d7:92:
ea:3d:96:05:3c:a0:62:4d:f2:28:64:73:6f:ca:d2:
0a:42:a8:f8:d6:09:7a:3c:a9:5d:ad:b8:90:bb:a9:
82:4c:d8:2a:f1:5f:5b:62:06:b6:ed:a3:be:ba:79:
6d:7a:86:84:73:74:c6:99:c6:96:a7:11:ae:fc:e1:
91:0e:a2:2e:e5:20:4f:35:0b:70:af:79:54:e8:f0:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:2D:0F:30:40:4B:18:C9:9A:9C:3F:42:89:9D:9A:FB:52:64:AD
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8d:a0:d2:c9:00:ad:1f:61:e1:db:52:b4:5d:78:c0:25:7e:
30:36:d6:35:01:be:30:e6:e1:ac:ea:15:0c:67:ca:3a:19:d8:
64:44:65:ac:5e:90:65:88:94:29:bf:1b:53:44:a5:ee:23:e9:
e8:5b:a9:99:17:13:57:ed:9b:ed:22:52:e0:1e:b3:1f:52:1b:
13:e0:d8:f7:22:0a:fe:86:47:02:9d:c6:63:f5:ad:c8:3e:17:
9f:2c:30:45:e8:10:7f:f6:04:fb:54:6d:8a:47:b2:8c:96:ad:
1c:0f:c0:56:aa:e7:3f:e1:11:4c:a2:70:9d:f4:d9:e0:aa:ba:
6e:f6:33:3c:ba:60:91:7b:6b:26:54:72:f0:a2:17:d6:d6:d1:
c5:51:f3:4e:53:d6:27:c4:e0:b5:89:b9:4d:d9:20:49:d4:35:
df:36:53:ae:0c:ce:65:f6:6d:54:42:a8:99:f7:7c:57:66:e3:
a1:0c:7c:15:42:2e:36:0a:ff:6a:ff:44:70:b3:4c:e9:36:d4:
df:75:7a:b2:7b:f9:58:f5:33:ee:37:24:84:82:96:68:02:39:
f0:18:d8:7e:dc:b2:1b:2d:92:4c:bd:c2:22:ba:e4:a2:50:b8:
2c:f3:74:b4:6f:03:55:40:2e:95:c4:b1:29:52:ff:75:7a:94:
7c:8a:f1:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGMr8K6Vvm00hN6pgQVjjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Mzg2YzE3YjQ1NjEwYjU4YmJlMDljZDMwY2E5ZmIwYzE5
NjFmZDMwHhcNMjYwOTIxMjMwMDA5WhcNMjYwOTIyMjMwMDA5WjAzMTEwLwYDVQQD
EygxMzQ0MmQwZjMwNDA0YjE4Yzk5YTljM2Y0Mjg5OWQ5YWZiNTI2NGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlQiEX9a2Tq1cQWPIDjVPkK1UEUV
JaiJW0Hjdp72vE4vvZSGvwynLIeReYtsNTJDfkEgEGSYqrbNAKEpuD8VXkdS/az9
JMn1BrwUZD/mf0i+Wvphz5b26q2kVppLQHrGDbaNMXKR3poKRAuDYG2gd0MXOOd2
Q8Zn54vkeKZGJlD4VaCrMWscpBdu4trO7IA4TMpgP4yjN0Ku38iQ1D04ErRas7jF
4xSnfLtePIsEhRvu15LqPZYFPKBiTfIoZHNvytIKQqj41gl6PKldrbiQu6mCTNgq
8V9bYga27aO+unlteoaEc3TGmcaWpxGu/OGRDqIu5SBPNQtwr3lU6PAdxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNELQ8wQEsYyZqcP0KJnZr7UmStMB8GA1UdIwQY
MBaAFOc4bBe0VhC1i74JzTDKn7DBlh/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYt
NmJiZDY4NWQ5MjMxLzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYtNmJiZDY4NWQ5MjMx
LzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUo2g0skA
rR9h4dtStF14wCV+MDbWNQG+MObhrOoVDGfKOhnYZERlrF6QZYiUKb8bU0Sl7iPp
6FupmRcTV+2b7SJS4B6zH1IbE+DY9yIK/oZHAp3GY/WtyD4XnywwRegQf/YE+1Rt
ikeyjJatHA/AVqrnP+ERTKJwnfTZ4Kq6bvYzPLpgkXtrJlRy8KIX1tbRxVHzTlPW
J8TgtYm5TdkgSdQ13zZTrgzOZfZtVEKomfd8V2bjoQx8FUIuNgr/av9EcLNM6TbU
33V6snv5WPUz7jckhIKWaAI58BjYftyyGy2STL3CIrrkolC4LPN0tG8DVUAulcSx
KVL/dXqUfIrxWQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:46:32 2026 by rpki-client