Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: ZxjqGLjwuFWTTda7xg5E8TW5v5k9tDfPtuXxy6vdPwc=
Subject key identifier: 90:C8:EF:98:2E:B5:71:57:0F:8F:5C:2C:AC:70:19:6B:DB:BA:74:58
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019D284DF5344D8296EEF23B1587E02F2E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 09E2
Signing time: Thu 26 Mar 2026 04:01:30 +0000
Manifest this update: Thu 26 Mar 2026 04:01:30 +0000
Manifest next update: Fri 27 Mar 2026 04:01:30 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: p1RIgTl0AOP/v2NOLdHZX9NS5sUlUR/bgQDSFnSDS2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f5:34:4d:82:96:ee:f2:3b:15:87:e0:2f:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Mar 26 04:01:30 2026 GMT
Not After : Mar 27 04:01:30 2026 GMT
Subject: CN=90c8ef982eb571570f8f5c2cac70196bdbba7458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:a6:ce:74:05:4b:28:5d:91:d4:7d:96:7a:
ff:e3:29:d5:eb:63:5c:e0:43:64:ae:08:54:4a:63:
12:b2:ca:75:dc:4e:0a:26:93:51:72:91:bb:71:25:
aa:b9:5a:f8:24:57:fc:d9:ba:cf:df:61:a0:a2:f7:
5a:9b:fa:c8:4f:03:23:7d:70:7c:f1:4d:27:30:76:
15:bd:43:47:d3:81:83:62:35:a9:cc:92:68:8a:17:
30:5e:41:d9:7a:87:ea:7b:91:e5:7e:8f:3a:4f:7a:
28:81:33:8c:b5:a4:f1:8e:e1:aa:08:36:86:8b:3c:
9a:d7:80:3e:a7:43:f0:7b:27:b3:9e:25:7d:e2:6a:
79:41:de:55:4e:94:00:d8:5b:df:44:53:c1:0f:17:
82:89:60:e9:65:d4:1f:f3:0d:e7:a4:0f:d7:98:90:
ee:12:14:ab:2c:8d:04:d3:5a:67:1d:09:df:da:5b:
d7:ca:b1:39:3e:91:0c:34:6e:c2:7f:f9:52:2b:79:
3d:0a:79:03:4b:f4:6e:cd:c7:f5:0f:79:66:ea:bf:
f6:91:cd:7f:b5:8f:86:98:df:0c:2a:98:7d:4a:32:
63:aa:e8:c4:d2:a2:33:fc:75:75:d3:20:bf:ea:1c:
bb:35:9c:90:60:70:49:8f:21:2f:21:fd:ba:7d:f7:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C8:EF:98:2E:B5:71:57:0F:8F:5C:2C:AC:70:19:6B:DB:BA:74:58
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0c:78:79:73:c7:1c:3e:aa:d3:4f:67:3c:23:6d:0c:02:06:
3f:d4:24:66:fd:54:41:f9:cc:a7:37:82:e3:2b:45:d2:6e:c7:
c5:fd:5c:4b:6d:2f:04:07:16:6d:b0:9d:52:65:a8:71:3e:37:
de:93:2d:dd:1c:25:d9:15:9e:1d:ec:34:7f:ed:69:41:11:b5:
a5:9f:26:c2:ae:32:74:f2:b6:57:93:90:e5:5d:19:5a:3a:3a:
99:df:38:77:cf:ea:91:da:09:5f:6b:e5:e1:cb:c6:8f:46:a4:
ac:bb:5d:96:ce:b2:b3:c6:fd:54:e3:0d:eb:ed:90:9e:ce:85:
f4:ae:14:9c:d8:09:30:d5:13:47:7d:79:f3:ab:db:6b:44:14:
16:65:9f:05:b6:2f:17:92:39:b8:2d:d5:17:41:df:e8:32:35:
4d:5a:de:65:43:27:56:48:fc:d7:f9:57:70:25:ad:3c:f9:e9:
c6:39:ca:59:86:5b:f2:d8:00:92:3c:e9:6e:42:f7:9d:a1:8c:
3b:ce:27:62:91:46:7c:bc:af:e2:61:90:64:9d:45:3f:2d:f3:
a6:e0:fb:3a:77:0d:ba:ca:11:18:b6:61:97:6b:0d:89:dd:78:
81:92:ba:f9:cb:ad:d6:61:dd:86:36:cb:ab:f5:a6:5e:bd:35:
3a:10:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:49 2026 by rpki-client