Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: 1+YmDp2reOSEIYNW3dSZlPw3OXa/GEHpd/lAkEp50js=
Subject key identifier: E0:3D:7E:81:DD:13:43:8F:C4:53:9E:19:83:5D:7C:14:D6:40:B2:EE
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019CAD59A9E14F7C058ED81C912FE7159CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 08F4
Signing time: Mon 02 Mar 2026 07:01:00 +0000
Manifest this update: Mon 02 Mar 2026 07:01:00 +0000
Manifest next update: Tue 03 Mar 2026 07:01:00 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: Pl+LJAfmXGqASS6DLoCMB8uQuzqOoXXTUFAQffdNtm0=)
2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a9:e1:4f:7c:05:8e:d8:1c:91:2f:e7:15:9c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Mar 2 07:01:00 2026 GMT
Not After : Mar 3 07:01:00 2026 GMT
Subject: CN=e03d7e81dd13438fc4539e19835d7c14d640b2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:c0:31:0b:df:42:55:c3:df:6c:41:95:e5:
fd:b9:f9:13:71:3e:cc:b7:e3:a2:dd:a6:03:51:f6:
18:d4:51:e1:4e:8f:f5:87:65:de:bf:a0:13:af:1c:
41:93:5e:f6:79:65:35:df:60:b0:d9:a2:b3:11:b7:
d0:06:95:bd:45:99:81:91:38:12:38:ee:49:5a:96:
d8:41:1a:63:7e:ee:90:b6:b8:d9:ba:fa:12:28:88:
f7:cd:3f:56:d1:f4:13:0d:fc:6b:ed:a0:7c:a0:fe:
7a:da:b8:c6:f1:f2:7d:47:ff:2e:8a:97:cf:e8:ee:
55:08:74:21:c0:f0:67:6a:ff:1a:af:6a:cc:e4:22:
de:06:14:7e:de:67:8d:3d:65:85:9a:2d:34:37:0d:
e4:a0:0d:1e:a5:12:4f:87:2f:b9:03:c2:0a:6f:c0:
dd:9b:3f:73:e0:80:66:39:40:0d:04:1c:6c:36:de:
99:86:7f:59:99:11:1d:1f:d2:a1:53:9b:d3:47:63:
b5:bd:66:30:97:30:a7:9c:f6:83:a4:8e:93:6d:32:
51:12:8e:2b:4f:11:4c:ad:3b:53:88:97:43:5b:01:
c5:2f:4f:0a:ad:e4:65:0d:95:e5:da:b4:3d:4b:27:
32:4c:85:08:f1:54:49:b1:47:95:fe:19:62:c5:28:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:7E:81:DD:13:43:8F:C4:53:9E:19:83:5D:7C:14:D6:40:B2:EE
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:37:c6:ae:d3:38:d8:f2:77:84:c0:e0:5c:e4:05:58:1c:94:
25:2a:11:68:a1:af:64:e6:bb:a5:b0:8b:d6:53:f6:9c:89:58:
1c:ca:d7:d9:05:b0:91:2d:74:b9:ad:46:6b:9c:f3:8d:20:d3:
1b:47:72:c6:dc:2b:f3:59:30:9c:21:d0:9e:f2:d7:cb:4f:5c:
d6:b6:d8:41:4e:cb:9a:c4:6b:1b:e2:43:c4:26:8e:62:0f:36:
5a:d2:cd:17:e6:6b:f2:66:06:49:f4:9d:bc:d2:15:1b:34:6e:
86:c1:e7:9c:84:5b:3b:4a:f0:3e:07:36:c9:eb:65:07:4f:bd:
8e:67:3b:f2:d7:5b:7f:c5:68:5a:6f:d2:10:54:cf:1b:fd:69:
21:53:12:6c:a5:7e:ec:27:16:aa:aa:1f:da:b5:87:dc:2c:b4:
2d:7e:e1:46:8f:f0:74:5b:59:72:a1:ab:d8:f8:54:b0:52:11:
a9:35:3f:ad:88:ab:ff:7c:d7:a6:95:6a:95:78:ad:6a:8f:d2:
10:d0:9e:74:35:77:dc:1f:26:00:bc:3e:b4:cd:a9:d5:2b:06:
06:f5:a0:1c:30:60:8e:63:77:b5:5e:a1:ab:d6:12:91:46:8d:
c3:b8:b6:f3:e4:96:13:2a:4f:da:66:18:5a:05:22:ef:9d:74:
93:3f:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:37 2026 by rpki-client