Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: RVIiMBq4yBoxECqQ0C4sSUz751oGhDNYScM9hp2UV78=
Subject key identifier: 9D:2B:1B:81:38:B4:79:01:AC:70:3C:6D:CE:0B:86:13:67:7B:68:B3
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019E1D9065433F8A98A1B2D2A6E7DCC0CCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0A61
Signing time: Tue 12 May 2026 19:01:02 +0000
Manifest this update: Tue 12 May 2026 19:01:02 +0000
Manifest next update: Wed 13 May 2026 19:01:02 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: /P/4Fi3/IvFLol5BBO4cGXvXSgnUySNoOT0eDvDoqws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:65:43:3f:8a:98:a1:b2:d2:a6:e7:dc:c0:cc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: May 12 19:01:02 2026 GMT
Not After : May 13 19:01:02 2026 GMT
Subject: CN=9d2b1b8138b47901ac703c6dce0b8613677b68b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:cc:cf:3e:2e:59:67:32:fe:0e:ed:79:8c:
4e:68:f5:7b:ad:a4:34:76:fa:50:a7:6c:69:a1:9c:
9f:d3:9a:72:68:d7:ed:f6:2e:74:71:f0:67:70:82:
ee:43:7f:08:1c:54:d4:24:97:0d:39:f2:91:32:68:
42:19:13:13:d7:b0:ae:7a:77:28:5d:76:a5:8a:58:
99:78:02:13:53:2f:e8:a5:78:15:1d:7f:d8:d6:fa:
2d:38:0e:03:a6:50:16:23:ae:a0:67:0b:24:0f:76:
45:17:15:d4:ad:88:d8:6d:83:61:88:ff:10:a9:b9:
56:f4:76:e3:52:03:e8:ea:d7:dc:ab:e5:fe:d0:ae:
79:ff:8d:6d:9b:4c:ac:85:2f:a5:f9:5a:01:b4:34:
f2:53:95:8b:0e:d1:43:64:07:bd:38:e6:8e:90:38:
37:b7:4a:5a:97:e4:10:ea:03:9f:bf:e0:d9:99:6b:
f0:8b:64:25:73:b9:2e:49:89:0a:5c:30:67:83:43:
5f:d2:ac:78:76:a9:63:fb:ec:ad:bf:7e:7f:65:2f:
b4:4c:67:c8:2f:75:c9:8f:15:b1:84:da:64:21:27:
f6:77:58:5f:80:18:24:d0:c3:16:78:19:9a:de:77:
e0:5a:d9:cb:d0:f8:cb:64:0e:df:32:44:aa:5b:b6:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:1B:81:38:B4:79:01:AC:70:3C:6D:CE:0B:86:13:67:7B:68:B3
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:07:a9:9f:ae:59:ce:d2:75:32:bb:0e:ef:bf:2c:c1:6c:37:
ed:1c:ad:53:7b:2b:3e:2b:5f:32:0a:aa:5e:a0:7c:9c:6f:35:
76:de:db:cd:91:25:0e:6b:3e:4c:68:26:3c:33:77:04:f1:a5:
20:ac:b5:34:8d:b3:01:3c:68:b5:8e:fd:c5:56:fa:8e:dd:cd:
06:a5:c2:ce:5e:df:84:b2:14:68:e9:40:b1:26:9f:f1:5c:de:
64:dd:70:69:ee:d2:3e:12:19:f6:07:65:e9:32:de:23:d2:4a:
eb:5b:e2:94:79:36:22:07:34:ad:a6:2b:c9:e5:6d:96:5f:a9:
16:47:68:c7:4b:b8:e2:c2:a4:f1:8d:31:7d:3d:75:94:a0:8e:
7f:7f:5a:b4:df:c8:57:80:db:f0:d3:9d:46:db:1b:ca:b5:27:
97:5d:4d:c2:b9:42:8b:4d:41:c3:0c:20:81:6f:9e:c9:40:07:
ee:4c:2a:3d:b8:62:a4:02:b2:20:34:1f:dc:a5:77:8d:f9:a2:
e1:2f:0f:03:a3:7b:27:90:5c:a0:fb:cf:03:5d:44:61:24:b2:
97:9d:ec:1e:f4:be:13:61:74:67:9e:30:15:4a:5b:8d:72:38:
e3:96:b8:4c:58:d4:89:f7:04:71:41:fb:97:b2:73:61:83:68:
42:14:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:00 2026 by rpki-client