
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: 1M65Sed7/1j4KNmHfF+MbTTqU8I8tHE0H3CHV8L9nQA=
Subject key identifier: C3:D8:4C:AE:DC:C2:8B:56:77:70:63:66:B0:47:93:21:0F:A4:B0:B9
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 01A0D5A6EEF70874643E618F3E416C492E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 1A10
Signing time: Thu 24 Sep 2026 23:01:21 +0000
Manifest this update: Thu 24 Sep 2026 23:01:21 +0000
Manifest next update: Fri 25 Sep 2026 23:01:21 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: yLqREE5p4wPn9xhiSp04qOAOoU9ekRBZAAtWSSBKlx8=)
2: zL-LWx-Rz7OMaI1EPMJkxLg31_M.roa (hash: cgNfkZmen0X8xi6X3N5ufjIJZAx+Um78IAgsseJM+y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:ee:f7:08:74:64:3e:61:8f:3e:41:6c:49:2e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Sep 24 23:01:21 2026 GMT
Not After : Sep 25 23:01:21 2026 GMT
Subject: CN=c3d84caedcc28b5677706366b04793210fa4b0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:2e:eb:99:8c:8c:19:f7:85:18:03:8e:84:
31:64:8e:80:8f:1f:57:f7:cd:45:3c:dd:7f:33:c5:
60:b8:3c:ca:05:8f:e2:49:ad:9e:12:87:69:16:64:
0f:d2:6d:52:06:b0:a6:90:08:da:15:dd:01:df:79:
62:30:e4:71:04:e4:ca:38:ee:98:c8:0b:52:be:39:
75:07:1b:2f:a8:a4:ce:b9:c6:52:10:e4:ef:99:53:
8c:ab:58:11:87:05:59:85:e5:82:7e:92:31:73:75:
1b:d6:76:e2:52:83:92:72:df:7e:b3:39:fd:b9:02:
69:a1:78:c4:18:17:8d:95:17:bf:5e:c9:80:69:7f:
d8:a4:56:c6:82:95:c9:a3:b7:c3:f6:90:3c:35:d2:
a1:08:94:3b:eb:fa:1f:b6:f6:cf:6a:86:9f:f0:02:
7c:a6:58:be:b8:84:ef:10:c1:c9:4b:d6:66:73:53:
b8:1d:2d:63:45:d0:75:18:45:d2:e7:2e:a9:d1:75:
c3:57:ba:7b:b4:37:b5:90:c9:23:80:64:9c:5a:9f:
64:5b:39:57:8e:b3:9d:cb:d7:bb:03:1b:e6:7f:35:
7a:d5:36:fb:40:8d:3c:ad:78:9f:6f:61:2c:5c:51:
49:b9:c5:db:b3:12:a6:7d:33:98:5e:9a:1a:cd:cb:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:4C:AE:DC:C2:8B:56:77:70:63:66:B0:47:93:21:0F:A4:B0:B9
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d0:65:2f:bd:fd:96:15:a9:e6:13:c2:b5:e6:9d:4a:0c:e1:
c5:9b:f4:3c:52:6d:e5:b6:3a:81:d2:19:f0:61:9a:95:77:72:
f9:43:be:1b:5b:b4:3a:01:1b:12:09:dd:fb:91:8c:32:b0:02:
02:ed:03:23:4f:73:e0:6e:d7:6f:93:b0:70:83:9b:8a:60:ca:
49:f0:25:9f:4b:c8:a7:b4:07:cc:8b:16:cb:96:c3:d7:9f:b5:
0f:3f:8e:14:c8:96:df:2d:45:b6:4e:d7:5f:53:90:44:3d:92:
37:ef:0e:44:fc:5a:e5:87:7a:94:e1:f8:11:98:15:d1:0e:4b:
e2:31:86:6b:18:fb:26:52:a7:2f:b0:1c:d2:d0:8f:31:19:78:
96:6d:c1:a9:27:a0:a8:c5:cf:6a:8a:67:5e:48:7b:04:3c:10:
d8:6f:a5:a5:14:b0:c3:6f:f4:4d:81:ef:69:aa:9c:b4:f1:e6:
bd:7b:60:3a:e2:8c:f1:da:b8:ff:cd:66:65:ba:d0:de:1f:f8:
fb:4a:83:94:55:96:31:44:20:05:e7:66:0d:bd:ad:1d:4f:74:
5a:b6:95:30:03:b5:25:6f:d5:61:c2:20:23:82:14:f1:63:21:
bd:57:33:39:f6:e1:2c:c3:a6:a8:08:f2:e1:7e:e0:5a:cd:47:
0f:ea:85:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpu73CHRkPmGPPkFsSS4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2RmMTU1Yzg3YTU5MGFjMWU1Mzg1NDRjZjMzNTZlNGZj
ODE3NDgwHhcNMjYwOTI0MjMwMTIxWhcNMjYwOTI1MjMwMTIxWjAzMTEwLwYDVQQD
EyhjM2Q4NGNhZWRjYzI4YjU2Nzc3MDYzNjZiMDQ3OTMyMTBmYTRiMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN0u65mMjBn3hRgDjoQxZI6Ajx9X
981FPN1/M8VguDzKBY/iSa2eEodpFmQP0m1SBrCmkAjaFd0B33liMORxBOTKOO6Y
yAtSvjl1BxsvqKTOucZSEOTvmVOMq1gRhwVZheWCfpIxc3Ub1nbiUoOSct9+szn9
uQJpoXjEGBeNlRe/XsmAaX/YpFbGgpXJo7fD9pA8NdKhCJQ76/oftvbPaoaf8AJ8
pli+uITvEMHJS9Zmc1O4HS1jRdB1GEXS5y6p0XXDV7p7tDe1kMkjgGScWp9kWzlX
jrOdy9e7AxvmfzV61Tb7QI08rXifb2EsXFFJucXbsxKmfTOYXpoazcvNpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPYTK7cwotWd3BjZrBHkyEPpLC5MB8GA1UdIwQY
MBaAFOc98VXIelkKweU4VEzzNW5PyBdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQt
ZGRkN2JmOTNkMzU2LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQtZGRkN2JmOTNkMzU2
LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9BlL739
lhWp5hPCteadSgzhxZv0PFJt5bY6gdIZ8GGalXdy+UO+G1u0OgEbEgnd+5GMMrAC
Au0DI09z4G7Xb5OwcIObimDKSfAln0vIp7QHzIsWy5bD15+1Dz+OFMiW3y1Ftk7X
X1OQRD2SN+8ORPxa5Yd6lOH4EZgV0Q5L4jGGaxj7JlKnL7Ac0tCPMRl4lm3BqSeg
qMXPaopnXkh7BDwQ2G+lpRSww2/0TYHvaaqctPHmvXtgOuKM8dq4/81mZbrQ3h/4
+0qDlFWWMUQgBedmDb2tHU90WraVMAO1JW/VYcIgI4IU8WMhvVczOfbhLMOmqAjy
4X7gWs1HD+qFMQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:38 2026 by rpki-client