Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier: YBq2R0jUMFw+X1/Xdp+u5M3zVpkMeZIsfUSZ2ukUvFE=
Subject key identifier: 89:60:60:EA:09:30:26:E2:10:9B:9C:DD:79:F8:23:2B:53:77:63:64
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial: 01A0D56FD11D078F1DE9A981F09568A15C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number: 188D
Signing time: Thu 24 Sep 2026 22:01:10 +0000
Manifest this update: Thu 24 Sep 2026 22:01:10 +0000
Manifest next update: Fri 25 Sep 2026 22:01:10 +0000
Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: OEpy6H4sIN6SFlItru5SJgKFZXb4RUl6/poRTXM9yMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:d1:1d:07:8f:1d:e9:a9:81:f0:95:68:a1:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Validity
Not Before: Sep 24 22:01:10 2026 GMT
Not After : Sep 25 22:01:10 2026 GMT
Subject: CN=896060ea093026e2109b9cdd79f8232b53776364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:9a:09:55:c6:ec:06:00:91:b0:78:f5:e7:
b4:e4:58:12:b4:f3:b2:3a:f1:36:ec:f1:6d:6c:a7:
1c:cb:95:5e:4d:f5:82:86:3a:10:10:d0:a9:a9:d9:
d6:41:01:42:31:c9:76:a1:29:21:7b:60:c8:fb:ee:
2c:35:0d:fc:da:49:ff:0e:ae:0e:c9:bc:3e:20:52:
49:4d:a4:0a:bd:5f:04:4d:0d:c0:a2:f0:28:62:28:
3b:7c:8a:a5:75:53:67:57:88:76:ba:71:a3:6e:db:
15:9e:b9:65:d5:f1:a3:b9:9e:e3:bb:6b:d4:86:33:
20:52:9c:ec:9a:d4:1a:64:0a:ef:92:93:66:03:f7:
cb:6b:20:f3:cf:51:5d:36:ed:ba:b4:27:80:c3:dd:
1c:15:05:81:20:58:b2:db:0c:2e:95:6d:b0:99:81:
d9:e6:b8:cd:81:02:91:5b:28:dc:6a:f3:6d:50:62:
b7:d1:bd:91:b8:2e:ff:ad:a8:ea:2a:db:e7:0d:8b:
14:1a:6c:88:79:4f:4d:6c:78:f3:59:7e:3e:35:dc:
da:26:e6:63:7c:86:41:26:91:79:91:c6:cf:5e:8b:
21:67:ec:bf:64:a7:5b:63:e0:e3:73:13:1f:8b:d6:
48:c2:f9:bd:5c:45:10:2f:9a:bd:95:02:6b:6d:c9:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:60:EA:09:30:26:E2:10:9B:9C:DD:79:F8:23:2B:53:77:63:64
X509v3 Authority Key Identifier:
keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ea:84:ff:2f:0b:80:b0:a4:b1:37:fc:59:28:f0:5b:fb:29:
ee:96:64:5e:d8:8b:27:07:02:34:08:b5:63:ad:41:38:df:01:
0f:78:ce:90:8e:c8:09:9e:5f:c0:0e:0f:b2:aa:d8:5e:23:1a:
6e:68:8a:88:cc:b6:49:c5:6c:de:c6:73:e8:e3:5a:91:f5:6f:
f2:83:da:e4:7c:dd:30:45:4a:73:b0:0c:ab:2b:36:6a:af:80:
1d:05:e8:9d:4f:da:4a:62:68:56:9f:d0:1c:13:c5:f5:1c:35:
98:15:36:e3:05:9a:0b:48:42:e5:72:cf:62:19:cc:88:40:96:
96:83:3f:83:c3:00:53:00:aa:fe:6b:9c:ca:0f:a1:ce:83:59:
6a:e4:8b:68:5a:67:71:ed:3e:6a:05:2a:d9:56:4a:1a:20:e4:
a2:e8:66:f6:8b:ed:6f:b2:59:63:c1:3b:a9:8b:d0:56:21:30:
c4:a1:02:67:ee:7d:fe:d9:d1:35:1a:a9:b2:77:71:99:44:93:
c8:b3:fb:92:b7:16:1b:02:2b:ab:0b:78:38:eb:3d:3e:29:84:
84:25:ef:4a:3a:84:64:3a:ff:3d:96:75:f3:03:10:92:82:48:
d3:22:64:31:1d:42:60:e4:4a:b3:5b:9a:c5:b8:2e:e8:26:8d:
85:35:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:46:09 2026 by rpki-client