
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File: 5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier: eFANascGo6pX5zi73Gx27siavqL5c+plr5qj2MbW7dY=
Subject key identifier: F7:00:F7:52:3A:C3:F4:EE:FC:27:60:B0:A0:27:BF:AE:05:A9:A1:97
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer: /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial: 01A0C40DA07624BD3ED504B45F7063CCE72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 13:00:22 +0000
Manifest this update: Mon 21 Sep 2026 13:00:22 +0000
Manifest next update: Tue 22 Sep 2026 13:00:22 +0000
Files and hashes: 1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: ZVjsI23/COcn12mIWGsA7lpURuvbaWH/dxCR/eWPubo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:a0:76:24:bd:3e:d5:04:b4:5f:70:63:cc:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Validity
Not Before: Sep 21 13:00:22 2026 GMT
Not After : Sep 22 13:00:22 2026 GMT
Subject: CN=f700f7523ac3f4eefc2760b0a027bfae05a9a197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:25:9c:36:2c:14:ba:f3:03:25:5a:8f:76:
8c:19:94:3b:67:19:eb:13:ca:d5:67:ce:dd:d9:1a:
d6:f8:85:0b:4f:99:25:4c:51:28:f5:03:cd:66:c6:
5f:72:b1:a5:d0:31:0f:05:b2:33:29:1e:35:67:33:
f2:9b:20:0d:96:00:47:c0:44:00:4d:5b:7a:0f:ec:
51:61:a9:07:f6:a9:63:83:05:8d:11:eb:6f:bf:63:
28:bb:05:06:fd:4d:45:fa:1b:93:12:88:50:21:59:
23:4a:78:cb:9e:9f:83:bc:56:4c:23:84:5f:d6:0d:
48:52:2c:7d:92:b8:c3:d8:a1:90:95:b4:1a:c1:b8:
f5:f5:d8:c9:e0:55:ad:f2:cf:f5:ab:3d:d2:55:1e:
ee:c2:8e:c4:c7:40:84:28:12:4f:cd:61:62:51:e6:
71:fc:d7:76:fd:7a:fb:cc:79:a1:01:1b:03:82:20:
00:88:1b:0f:cc:72:de:05:29:ba:12:3b:d0:58:fb:
38:27:8b:a3:b4:a6:fe:a7:0b:31:c9:59:8e:59:16:
b8:f3:ad:12:35:2b:69:4a:28:2d:73:19:e9:6b:86:
ea:66:72:b0:d1:7d:12:5c:db:04:1a:1c:a9:a7:a0:
ed:29:d1:f5:0c:19:ec:17:c9:cd:30:f2:34:68:d1:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:00:F7:52:3A:C3:F4:EE:FC:27:60:B0:A0:27:BF:AE:05:A9:A1:97
X509v3 Authority Key Identifier:
keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:32:75:97:48:0f:02:81:96:9c:11:f0:2d:84:fd:61:5f:43:
0d:be:35:fb:08:de:5c:d5:21:48:56:31:f3:12:21:d6:03:ea:
3c:b5:39:7e:da:a6:b0:2e:77:3c:69:b7:e3:d6:a6:11:0d:f3:
7a:be:02:a4:59:8e:fc:8b:a1:fd:b1:1a:46:5d:0d:f8:e6:09:
1e:48:54:63:e9:12:85:3c:5d:25:c7:31:26:d8:a9:e9:b9:64:
f6:81:64:28:d4:26:33:ff:c0:22:97:cb:00:44:4c:7a:b7:00:
14:c6:30:71:4f:fc:bf:6d:12:90:d8:db:b4:d7:da:2a:1f:cb:
a8:ac:9b:f5:be:fc:8b:67:3a:4e:88:2a:0d:db:66:48:0b:56:
80:0a:8c:b0:0f:fe:f6:8b:49:22:5a:54:a5:6c:04:91:65:91:
c7:8b:91:b3:25:90:71:54:16:19:d9:0c:01:4e:21:92:81:09:
b1:c1:c1:3a:ca:ff:1f:f0:e1:4f:8d:cd:af:4a:0f:80:0f:72:
b1:78:ea:ea:09:16:2f:be:a2:1b:4b:57:47:88:07:e7:9f:cd:
54:f2:01:b1:9c:a1:82:70:42:83:46:5f:d8:32:7a:53:5c:b2:
a1:5b:9b:36:43:8d:c4:31:27:26:a9:f6:a2:09:15:f3:84:d4:
02:b5:3a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDaB2JL0+1QS0X3BjzOcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ODI5OTU4ZDgwMGNhMWFkZTZlMTNjYTdiMjgwYjIyOWNl
NjYwMmUwHhcNMjYwOTIxMTMwMDIyWhcNMjYwOTIyMTMwMDIyWjAzMTEwLwYDVQQD
EyhmNzAwZjc1MjNhYzNmNGVlZmMyNzYwYjBhMDI3YmZhZTA1YTlhMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IQlnDYsFLrzAyVaj3aMGZQ7Zxnr
E8rVZ87d2RrW+IULT5klTFEo9QPNZsZfcrGl0DEPBbIzKR41ZzPymyANlgBHwEQA
TVt6D+xRYakH9qljgwWNEetvv2MouwUG/U1F+huTEohQIVkjSnjLnp+DvFZMI4Rf
1g1IUix9krjD2KGQlbQawbj19djJ4FWt8s/1qz3SVR7uwo7Ex0CEKBJPzWFiUeZx
/Nd2/Xr7zHmhARsDgiAAiBsPzHLeBSm6EjvQWPs4J4ujtKb+pwsxyVmOWRa4860S
NStpSigtcxnpa4bqZnKw0X0SXNsEGhypp6DtKdH1DBnsF8nNMPI0aNFSPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcA91I6w/Tu/CdgsKAnv64FqaGXMB8GA1UdIwQY
MBaAFOSCmVjYAMoa3m4TynsoCyKc5mAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQt
MWQ1YmMwMDFhMWRlLzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQtMWQ1YmMwMDFhMWRl
LzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTJ1l0gP
AoGWnBHwLYT9YV9DDb41+wjeXNUhSFYx8xIh1gPqPLU5ftqmsC53PGm349amEQ3z
er4CpFmO/Iuh/bEaRl0N+OYJHkhUY+kShTxdJccxJtip6blk9oFkKNQmM//AIpfL
AERMercAFMYwcU/8v20SkNjbtNfaKh/LqKyb9b78i2c6TogqDdtmSAtWgAqMsA/+
9otJIlpUpWwEkWWRx4uRsyWQcVQWGdkMAU4hkoEJscHBOsr/H/DhT43Nr0oPgA9y
sXjq6gkWL76iG0tXR4gH55/NVPIBsZyhgnBCg0Zf2DJ6U1yyoVubNkONxDEnJqn2
ogkV84TUArU6+Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:45 2026 by rpki-client