Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: eKP34OLcW2SF7WG1YstKFPvue9ccJ3UiGh+BlGTRhPM=
Subject key identifier: 87:78:B3:34:44:5A:08:FE:AE:CD:EB:5A:F2:05:C0:9D:62:27:9A:CE
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 019E20C80997A3E20E0C0B33B99516176F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 10:00:40 +0000
Manifest this update: Wed 13 May 2026 10:00:40 +0000
Manifest next update: Thu 14 May 2026 10:00:40 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: hmBOcjFr09zeimKvVFXFWLIjXt+ZGYuXRPrPJhoSYyQ=)
2: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (hash: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:09:97:a3:e2:0e:0c:0b:33:b9:95:16:17:6f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: May 13 10:00:40 2026 GMT
Not After : May 14 10:00:40 2026 GMT
Subject: CN=8778b334445a08feaecdeb5af205c09d62279ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:5c:ea:35:07:95:4e:ca:98:d6:87:a6:fe:
97:a9:90:0b:0e:7e:82:a8:39:99:04:a6:24:c1:de:
30:35:3f:31:97:d1:27:bd:69:90:32:b8:4a:53:53:
18:06:43:9c:9d:6f:ba:92:7d:ee:ff:be:d6:52:39:
34:ab:06:7f:4d:fb:89:a7:9b:59:b8:fa:c2:c0:de:
79:2f:67:8c:22:f6:5f:9a:97:7f:d4:77:8a:0b:89:
3d:17:d5:1d:db:b3:82:1a:9c:d9:39:a2:cd:f6:3c:
18:cb:1c:ed:3d:03:7b:f3:53:3c:4d:47:00:94:7a:
75:39:2d:ba:aa:a6:88:95:33:45:0a:82:0d:2c:cb:
fd:7d:72:c9:f3:15:e1:b4:ee:7b:f9:85:6c:d6:e4:
79:50:9a:f3:b1:82:d9:7f:55:a3:70:b1:a4:33:ec:
c8:36:81:94:57:4e:82:c2:4c:d8:e7:7d:15:e6:a3:
64:aa:16:07:d4:fe:63:18:c9:ba:97:d3:e0:18:fc:
4d:5e:0c:d6:31:ca:6c:42:a7:71:d6:a7:74:fb:df:
ce:ee:5a:01:3c:4d:6b:dc:b3:b3:25:e5:94:81:0f:
00:71:b9:88:07:3c:1e:ca:40:16:77:8f:64:92:85:
7f:98:cb:96:51:e6:77:31:7a:94:73:0d:fc:01:17:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:78:B3:34:44:5A:08:FE:AE:CD:EB:5A:F2:05:C0:9D:62:27:9A:CE
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1a:09:75:c6:6e:66:c3:57:aa:76:7a:4b:a2:8d:31:38:84:
51:4b:5e:3a:7b:58:72:c9:0c:f2:a6:d2:b3:6f:b1:e3:e3:b6:
1d:b6:00:44:81:26:9a:7d:ad:7f:a9:9f:f4:2f:86:f0:f2:b7:
5b:7a:99:f2:af:ca:2a:0c:0a:99:37:9f:39:e3:23:48:a4:82:
bf:b3:ad:2a:bf:d5:3e:4c:38:13:b6:5f:d3:4e:6c:21:e3:8f:
34:dc:e8:9c:d9:be:67:59:6c:2f:32:1a:9f:fd:43:a8:b2:2b:
3c:c8:8a:d5:79:b2:8d:6b:f0:3f:18:f6:d9:e3:43:4d:6d:fa:
da:c0:3d:e1:22:c9:2d:43:c8:2d:df:35:ed:f4:8c:52:a7:69:
f5:87:cb:92:3c:6a:ac:ac:a9:8d:d7:1b:33:55:df:06:c1:d1:
25:54:dd:81:91:6e:d2:d6:2d:68:6f:5a:05:9b:43:7a:26:97:
b2:e1:d5:09:f1:0c:da:68:16:b1:4c:31:cf:d3:fa:94:42:71:
b1:7f:12:f5:b0:8f:22:90:91:0b:42:b1:e3:fa:51:cf:ab:09:
4c:4a:0d:24:12:56:08:00:d5:23:dc:b6:90:88:28:0d:1b:ae:
81:0b:8e:96:09:e4:4a:48:e3:8d:b0:a6:2b:08:3c:4e:37:3c:
38:f1:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:33:35 2026 by rpki-client