Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: WyQ/waQqmv6GpU4fCZDr0ljPMtypXk6f3i590fLN4gA=
Subject key identifier: 77:5C:C4:E9:5B:46:E2:AC:6C:3A:F8:44:39:CD:C0:B9:AC:50:E0:9E
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 01A0D1928CBF49FD8FB383B657BD9498371F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 04:00:37 +0000
Manifest this update: Thu 24 Sep 2026 04:00:37 +0000
Manifest next update: Fri 25 Sep 2026 04:00:37 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: yvMxJHNScqlYp1JDFPErtuHsegUm4duoU2tjp3mkqZA=)
2: B6iysmHDbleRVKIuBhreNxTvPy4.roa (hash: fb8tZxqx2SdW+lzSZRG1WIbgYJH2tXqvILVLuIwY8Cs=)
3: SRCBhIkP-Hqzoh2rZQemvVRuvuw.roa (hash: p/d5YtiIC7MAwrPek8AUJQpdVyLGSdu9mLSnMckIXnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:8c:bf:49:fd:8f:b3:83:b6:57:bd:94:98:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Sep 24 04:00:37 2026 GMT
Not After : Sep 25 04:00:37 2026 GMT
Subject: CN=775cc4e95b46e2ac6c3af84439cdc0b9ac50e09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:00:7a:49:de:b4:1e:0d:85:6e:e9:15:2b:
32:88:c0:55:ee:50:44:27:04:ce:9c:8f:c3:f4:f7:
0f:af:72:3b:9a:90:4b:9d:84:31:ce:a4:7b:f9:eb:
d9:51:bc:d9:0e:0a:1a:51:f7:21:85:af:6b:9a:3c:
c2:51:9c:dd:4a:e6:46:68:a9:d6:34:b8:63:d1:14:
3e:9a:b9:84:c2:b8:9b:af:59:ac:0c:d1:eb:14:1b:
09:96:9c:d2:d9:78:ff:75:bc:92:61:90:e5:18:c5:
b4:83:74:57:cd:9a:b3:b9:54:d6:f2:08:f9:ff:ad:
f4:05:63:e3:25:7b:84:40:b5:80:16:f8:54:0c:f1:
d4:34:9a:5d:ff:76:5d:47:71:d9:d8:96:35:b9:eb:
32:42:3f:74:f4:17:80:d8:19:ad:af:23:ae:dc:b9:
7e:6a:6c:46:3c:b4:b8:ab:66:a8:5d:73:01:27:70:
f2:a2:7f:47:0d:48:7e:31:b3:b1:44:df:a0:ee:3c:
0e:c0:8c:3b:08:c9:e9:17:19:e6:f8:66:4c:a4:98:
67:3c:f2:65:56:99:dd:dd:b1:2b:c6:04:70:21:e3:
11:46:1b:8c:67:83:6c:2a:04:b7:6f:a2:96:a5:03:
94:d2:89:10:a4:04:af:c8:7b:f1:10:0b:03:62:11:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5C:C4:E9:5B:46:E2:AC:6C:3A:F8:44:39:CD:C0:B9:AC:50:E0:9E
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:52:3a:47:f7:57:48:5c:d2:3b:05:3d:3f:06:f6:f6:9e:1c:
86:a2:f9:9e:bd:8a:70:1d:66:f6:93:cb:e4:2e:25:dc:b1:9a:
e8:18:f7:9a:a4:87:55:93:a5:19:97:91:97:10:7b:24:4c:6d:
c8:78:d3:89:8c:f2:c5:9c:3d:e8:0c:1d:be:83:15:fd:04:30:
f5:da:f8:55:18:a9:6c:ef:4f:6a:00:54:d7:15:8b:11:a4:dc:
4e:f0:7d:9c:0d:9b:2b:35:83:e5:1e:a1:f1:be:1d:43:09:f0:
e7:5a:af:1d:e5:17:1f:e6:6b:99:de:41:2c:a8:9e:fa:f6:a3:
86:84:e3:f9:57:c0:a8:35:24:a3:20:a2:6c:cb:bf:86:ba:f1:
88:e1:dc:d6:6a:a4:e9:04:28:ff:03:f5:0c:c8:39:8b:a3:2e:
6f:44:25:ac:d4:81:2c:f8:39:2d:0e:0b:64:71:f5:23:db:ef:
20:de:fc:52:25:01:a8:57:1d:26:e3:be:68:29:dd:f1:9e:8e:
41:91:29:0f:e7:dc:c1:ae:3e:81:48:5b:1b:1f:47:31:b3:25:
c8:1c:b3:8f:d5:08:b1:79:41:ec:8a:3e:71:8b:1a:05:e1:62:
77:22:78:a6:52:b7:bd:81:e0:68:0e:68:86:92:11:68:61:c8:
c4:38:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:12:08 2026 by rpki-client