Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: S8hpBbtosdNIluFKJt2bycZlK1aFsyMgV2E4ayfQNF4=
Subject key identifier: 93:7C:21:2A:E6:10:87:D0:0C:77:E8:CF:4E:01:BC:25:76:E2:F3:45
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 019D2997505C6ED1007234A3BBB45F67A648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:15 +0000
Manifest this update: Thu 26 Mar 2026 10:01:15 +0000
Manifest next update: Fri 27 Mar 2026 10:01:15 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: Bqc637Gu0pWhoUpZILb3npjAhRqkuLQWP5Jwsp5Tdnw=)
2: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (hash: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:50:5c:6e:d1:00:72:34:a3:bb:b4:5f:67:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Mar 26 10:01:15 2026 GMT
Not After : Mar 27 10:01:15 2026 GMT
Subject: CN=937c212ae61087d00c77e8cf4e01bc2576e2f345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:bc:0f:68:03:da:4e:fb:d8:f6:bf:04:f5:
02:ad:63:dd:d1:44:b5:ec:ac:75:f8:c3:50:90:9d:
c3:69:08:32:a5:82:19:78:c4:8e:78:f5:fb:c6:49:
68:ee:6a:0b:6f:87:ed:82:f4:28:7c:4d:0b:40:11:
f6:4c:73:9d:81:3f:20:9a:6b:5c:da:e2:66:34:6a:
d9:a9:64:e1:1c:34:d6:f4:83:f7:3b:88:82:7c:5f:
93:39:a8:80:78:c9:a0:f1:aa:91:bd:71:21:1e:c3:
a1:a2:4a:77:c9:2c:34:7d:46:a4:c6:f1:21:f0:ca:
81:5d:9d:26:7c:dc:1b:f7:2c:bc:de:af:c5:be:82:
99:ef:f1:76:1d:98:ca:22:1e:69:90:dd:bb:0e:b5:
ff:fc:cc:83:1f:f7:2f:6f:8f:77:c5:07:f7:f0:a7:
e9:28:e7:8e:3f:5a:01:a5:25:b9:65:ab:ca:c0:b1:
f6:0f:d0:0d:1c:0a:06:92:3e:a6:ce:dc:9f:dc:a5:
f6:87:e6:8f:0f:c1:dd:9a:34:ba:eb:c1:39:a8:87:
51:8b:87:62:2f:8f:17:2c:07:8d:5a:47:64:7b:3a:
94:c3:0b:c8:b0:09:24:4e:58:3d:92:b0:33:3f:7b:
61:46:22:22:04:0d:b0:f4:ac:e9:b6:22:4a:cb:76:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7C:21:2A:E6:10:87:D0:0C:77:E8:CF:4E:01:BC:25:76:E2:F3:45
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:09:24:7f:69:1b:6b:05:38:a8:2d:61:c1:85:1e:b9:2b:2b:
76:bb:f2:a6:16:dd:6f:cb:6e:73:3b:91:f9:d6:00:4a:ca:74:
4e:3d:39:ff:16:d9:9d:d2:1a:f1:dc:13:8a:b6:df:48:f9:c3:
b2:4f:5d:18:b5:30:41:50:32:64:a4:7d:f4:7c:79:0a:c0:70:
ff:53:a5:b6:93:ce:38:3f:86:fe:7e:23:ee:f6:fb:96:53:cd:
59:75:39:ef:2f:fd:90:ce:91:5f:01:c2:fd:6d:4a:91:d0:46:
c9:85:ed:74:8e:ec:9f:18:54:0d:1a:b7:ef:59:66:cb:2f:bd:
92:2b:b8:83:48:4b:58:df:ba:2d:d2:b4:1e:f4:f9:a6:33:68:
9a:0b:41:e4:a2:f3:db:3f:80:74:75:af:7c:91:1b:5b:aa:57:
f4:25:e3:f3:d6:de:c4:9f:45:a4:72:e1:7f:90:61:b6:9f:29:
fb:fb:1f:08:c5:97:db:19:c6:ab:16:0b:3d:c9:1d:3c:ad:43:
07:dc:e5:d6:64:35:ed:ca:b1:75:fe:06:55:da:ec:3a:49:d4:
3c:c3:03:63:94:b0:e8:f0:ec:e9:66:a6:64:33:c3:fe:50:a4:
ae:9c:f5:85:bf:8c:1b:0d:83:2a:56:cc:67:5f:b0:62:a1:36:
59:4f:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:47 2026 by rpki-client