
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: xCZsyAoTByUp1mkfMlLbGgCAk06SmTBuT+pJHpRskkU=
Subject key identifier: 20:DB:0B:93:4D:50:A4:31:07:3C:6E:23:FA:E2:DE:FF:3A:E1:BF:FC
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 01A0C7EA93355884E68A1B92924E294A1C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 0B14
Signing time: Tue 22 Sep 2026 07:00:34 +0000
Manifest this update: Tue 22 Sep 2026 07:00:34 +0000
Manifest next update: Wed 23 Sep 2026 07:00:34 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: Zxe6s97nZZYXp/QiMxG9cfbaZ+nQVHBrpioUGyycqDc=)
2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:93:35:58:84:e6:8a:1b:92:92:4e:29:4a:1c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Sep 22 07:00:34 2026 GMT
Not After : Sep 23 07:00:34 2026 GMT
Subject: CN=20db0b934d50a431073c6e23fae2deff3ae1bffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:c7:f4:77:79:0f:7e:1b:61:34:fd:12:ea:
bc:47:a9:c3:d7:7b:67:77:3c:36:af:94:d8:5c:ca:
1b:4b:25:32:34:53:16:02:b9:64:67:94:3b:97:39:
fd:4c:72:d1:23:cd:dd:a4:bd:01:3e:f4:fe:72:06:
43:36:f1:32:3d:82:61:e1:61:64:99:6c:5a:8f:62:
fd:47:9f:fd:10:40:2b:27:f4:8f:2e:f7:41:69:ba:
09:59:e0:a6:93:b5:77:4f:1a:df:90:7c:76:d5:cb:
54:2b:de:1d:e7:6d:ef:46:d2:e3:69:2f:be:0c:ef:
6a:6f:28:26:69:09:df:b3:f0:98:ce:67:8c:1b:f0:
86:c9:2c:96:da:5b:c4:d0:3b:b2:58:00:b7:6f:c3:
55:52:eb:40:05:d5:9b:d9:d0:38:4b:db:08:4a:7c:
d4:6c:8e:e6:fb:74:4d:a4:ae:bc:b3:b2:c4:10:e0:
04:19:c7:cc:6d:43:4e:16:bf:e0:5e:5f:49:b4:37:
b2:92:20:5c:2a:d9:93:6d:76:3a:e2:d6:3d:cc:20:
12:fc:21:cc:2f:b9:a2:18:8b:e3:32:85:97:31:75:
ec:01:98:45:99:2f:58:25:19:79:68:95:af:68:06:
c2:8e:0c:1e:90:4c:d2:44:4b:15:78:9b:47:5f:f2:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DB:0B:93:4D:50:A4:31:07:3C:6E:23:FA:E2:DE:FF:3A:E1:BF:FC
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a7:5c:91:d1:35:e4:36:d6:cc:f3:44:90:03:07:88:b8:6a:
01:22:5f:60:e1:f1:d0:64:b8:ce:7a:e6:e7:1e:7e:84:b4:54:
41:df:bf:06:7f:c7:4c:d3:ec:d7:ee:c6:4d:67:2b:ce:81:71:
b3:8c:54:5d:06:02:fe:82:3c:da:7e:61:57:3a:b4:b9:32:6f:
9a:45:57:da:42:b3:cb:b0:be:da:37:f8:00:c7:01:92:e6:73:
c2:22:76:28:70:29:d0:61:ce:64:25:04:27:4f:fa:a5:97:20:
da:e9:f7:e2:5c:ed:62:88:04:0d:2e:2f:95:a5:54:98:dc:20:
5f:1e:a5:bb:f1:44:3b:02:f5:d3:9f:08:84:62:c6:fd:26:ee:
71:51:b1:ff:41:a1:d5:7f:5a:81:80:8d:ac:d9:15:ba:c3:b7:
7b:c2:55:76:d2:4f:7d:2f:03:85:1f:dd:f3:d6:fb:e0:48:32:
1e:91:6a:51:b8:93:19:5f:af:f4:fb:d6:5c:63:cf:59:8b:cc:
04:42:98:b5:e7:00:d5:16:c3:75:4d:6e:1c:93:20:e6:7d:a4:
3d:02:4c:49:1c:17:5e:a2:f6:36:1c:ed:33:02:23:a1:1e:9e:
a8:22:8c:37:b4:8d:7c:7d:ec:49:27:19:c7:8f:7b:b0:09:c6:
ad:d7:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:00:40 2026 by rpki-client