Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: iv+yTA7Z5xpCzmH2sHzSGQEdWBAywYwJKxi73BJdMgs=
Subject key identifier: 94:75:CA:CA:3D:82:34:C6:B4:E2:7D:88:B1:70:94:78:36:B0:65:F3
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 019D2703963E3892F709891DD63474D8C90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: o9GB4Biq0srGUZyLaKmvVfFlfB2qm7BYX5pIhZ9qwKc=)
2: B6iysmHDbleRVKIuBhreNxTvPy4.roa (hash: fb8tZxqx2SdW+lzSZRG1WIbgYJH2tXqvILVLuIwY8Cs=)
3: SRCBhIkP-Hqzoh2rZQemvVRuvuw.roa (hash: p/d5YtiIC7MAwrPek8AUJQpdVyLGSdu9mLSnMckIXnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:96:3e:38:92:f7:09:89:1d:d6:34:74:d8:c9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=9475caca3d8234c6b4e27d88b170947836b065f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:7c:c1:8b:3c:55:89:c3:5c:18:5d:76:2f:
ce:2d:53:d7:a5:5c:13:50:43:8e:71:ee:88:bf:ea:
c2:e6:0b:e9:c3:03:b3:1b:ce:0c:c0:f1:77:e5:90:
5f:3a:d4:3a:b4:c1:c9:59:4f:5e:6b:9f:19:a9:70:
ac:fa:23:bf:1b:43:c2:cf:61:2f:26:52:f7:cd:a3:
d3:0d:5b:ea:b8:b5:05:2a:2e:1c:fd:58:8f:50:3e:
b8:c9:11:1e:0b:65:d8:e3:e6:83:13:7e:46:e2:28:
e4:45:a8:8b:2f:b4:94:b3:aa:c0:b4:e0:4f:6a:85:
65:92:9d:aa:20:83:a5:ae:75:bc:90:31:a2:7c:e5:
3a:c2:2a:39:58:01:7f:16:fe:fb:f5:49:09:04:24:
ad:27:7e:6b:7d:c5:d9:2b:8d:23:3a:ae:8c:23:36:
13:a2:8e:05:ed:e9:ab:00:14:7b:09:0b:11:1a:02:
da:48:b8:38:f7:a9:31:b2:a7:6a:57:4f:5d:74:5f:
f4:7f:80:ca:6d:ac:36:4f:44:e6:c1:0d:78:24:00:
10:42:02:8c:5d:20:a4:b9:7d:36:22:36:18:b8:eb:
52:cf:54:78:3c:a2:4e:7b:3a:c0:8d:c6:98:6f:34:
41:4a:34:85:82:50:be:2a:4b:0c:68:83:47:be:cd:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:75:CA:CA:3D:82:34:C6:B4:E2:7D:88:B1:70:94:78:36:B0:65:F3
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4d:84:ea:f3:83:7b:98:5c:2c:76:9c:3b:a7:e0:a4:b7:f0:
49:2e:85:e1:b9:31:c0:99:4a:9c:67:ca:30:0d:b5:5e:46:0a:
23:0f:51:b8:02:a2:99:a6:8d:bf:a2:aa:80:26:98:1f:bb:36:
37:30:04:36:f0:cf:e9:d3:6d:c3:41:3f:55:36:1b:fb:24:0a:
ed:83:5b:c3:51:55:45:77:0d:21:ef:27:da:f5:af:63:c0:c8:
6d:aa:f0:ea:8e:2d:1d:e0:64:b2:ce:fa:94:e9:6c:99:bb:5d:
27:12:b7:ab:5d:26:e1:89:6f:b1:d0:15:82:cd:39:67:d7:a8:
55:b7:52:5e:b7:d6:1e:88:aa:08:28:47:d7:b5:04:cb:50:b5:
38:12:a2:11:48:24:3b:b1:67:8b:9e:bd:df:65:91:6b:4d:3c:
04:53:55:64:02:5f:9d:b1:a7:85:be:25:61:8c:61:cb:43:99:
b2:9d:01:e5:f8:40:ef:4e:59:fa:99:78:97:b5:7e:e0:f0:7a:
36:43:4b:ce:44:fc:45:d5:60:36:b4:42:65:92:00:bf:22:8e:
a4:a6:0e:95:c6:0f:9f:fc:82:31:3f:49:cb:05:30:2f:a6:40:
96:71:9b:2e:e0:82:db:8f:2b:a5:c1:23:e6:c7:96:27:be:4c:
73:e5:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:08 2026 by rpki-client