Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
File: 5zil-TBkI5q0_3k9-Kh54bqo4cc.mft (raw, json)
Hash identifier: wsokTP7jSCEzfqkVx+Est4owWqxKkc5usCb2GeJ+VJ4=
Subject key identifier: F3:74:73:91:E6:60:EF:9A:CC:1B:94:AD:C0:28:F7:40:94:38:71:C7
Authority key identifier: E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
Certificate issuer: /CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Certificate serial: 019D2A72A25E06E2B1A1D29D3E8FA3CFFCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
Manifest number: 1586
Signing time: Thu 26 Mar 2026 14:00:48 +0000
Manifest this update: Thu 26 Mar 2026 14:00:48 +0000
Manifest next update: Fri 27 Mar 2026 14:00:48 +0000
Files and hashes: 1: 5zil-TBkI5q0_3k9-Kh54bqo4cc.crl (hash: fVL2g9ZSz7L6DoyliD1hNBPsBJ2Yxpsqup29zaCEQ5Q=)
2: ShCcGsFHIiXE6iQ9mjukZmgKlpI.roa (hash: CWzStSwFtF0yAwYVo/sI4q7AfdF95XDfRyeTmtd1nsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:a2:5e:06:e2:b1:a1:d2:9d:3e:8f:a3:cf:fc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Validity
Not Before: Mar 26 14:00:48 2026 GMT
Not After : Mar 27 14:00:48 2026 GMT
Subject: CN=f3747391e660ef9acc1b94adc028f740943871c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:b9:1e:65:8e:5e:38:8f:4c:a9:d8:53:22:
8e:54:ce:76:50:d6:2a:01:61:06:f7:da:de:c3:69:
8f:c2:b3:a5:84:f7:41:a0:3b:50:2d:18:22:6e:9b:
fa:83:54:41:e8:6b:94:a7:f8:7c:04:bf:ff:e9:51:
eb:b9:3a:be:1a:a2:f6:cd:02:cb:86:c4:5d:40:4f:
48:27:3b:0e:68:14:0f:58:bc:e2:bc:b0:3c:e3:3a:
a7:19:ca:f2:a0:41:94:e3:f4:07:82:b0:44:38:30:
22:e1:86:a6:d4:c9:74:16:12:6e:6d:ce:db:57:c7:
84:d4:99:f3:71:ea:b8:ae:14:87:1f:a8:36:c0:e6:
a1:1c:7c:cf:7d:82:1b:4e:96:ea:ba:7a:1a:d5:f8:
ec:c3:68:01:a3:ea:ce:f3:58:ce:2f:a8:d3:ee:44:
41:f7:bf:3f:c9:fa:36:f6:9a:3d:f7:ff:42:5e:b9:
da:2b:7a:be:b5:9c:c9:6b:85:a3:e4:9d:ae:40:7d:
ad:80:ad:15:70:8f:dd:7f:91:ca:41:b4:af:53:61:
75:6f:5c:1f:d4:41:0b:e2:f7:38:84:9f:3c:71:a4:
46:68:36:83:9f:2f:12:bc:d0:35:92:8d:e1:e6:2f:
b3:b7:09:6c:fb:b3:36:68:11:6d:b7:86:46:c1:43:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:74:73:91:E6:60:EF:9A:CC:1B:94:AD:C0:28:F7:40:94:38:71:C7
X509v3 Authority Key Identifier:
keyid:E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:68:7d:6f:5e:60:a8:5f:96:87:7b:59:33:20:e1:66:58:
0c:54:4f:ca:28:f0:c7:42:e1:e5:60:6d:26:60:e9:a4:07:fe:
57:a5:9d:fc:60:e8:89:34:b9:af:e2:e1:8d:2f:06:a5:d0:ad:
e7:ac:ef:9e:8f:ce:de:eb:45:35:62:bb:09:b5:4d:9d:7f:0f:
52:d6:d2:0d:c6:a8:fb:0a:10:7d:15:f3:12:13:61:b3:a4:23:
5e:2a:aa:83:97:5a:db:9c:29:c0:56:7b:92:31:c8:3e:51:e7:
74:2e:b8:82:f2:ae:d3:65:75:2f:54:07:7b:e7:b6:9d:58:b3:
35:84:b5:d1:b5:cd:6f:21:17:e6:0d:49:38:15:98:43:75:4f:
b3:a0:2c:e4:ca:2f:f4:da:8f:c9:dc:ef:1c:a7:d5:aa:87:ba:
a6:ae:af:ff:4b:81:9c:f1:13:0c:74:ad:de:fc:57:ed:dc:ad:
f4:56:81:e2:66:cf:c4:86:e3:f2:4f:06:7c:60:8c:41:09:ee:
13:c4:e8:89:80:85:b1:be:0d:8d:48:23:eb:6d:3b:d4:29:20:
22:d2:38:e2:34:87:7d:01:25:b3:a5:22:02:a3:92:fa:0c:bc:
07:f7:40:b3:77:75:59:eb:ea:c5:28:14:96:24:1a:be:9f:f9:
4a:c4:96:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcqJeBuKxodKdPo+jz/ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzhhNWY5MzA2NDIzOWFiNGZmNzkzZGY4YTg3OWUxYmFh
OGUxYzcwHhcNMjYwMzI2MTQwMDQ4WhcNMjYwMzI3MTQwMDQ4WjAzMTEwLwYDVQQD
EyhmMzc0NzM5MWU2NjBlZjlhY2MxYjk0YWRjMDI4Zjc0MDk0Mzg3MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC+5HmWOXjiPTKnYUyKOVM52UNYq
AWEG99rew2mPwrOlhPdBoDtQLRgibpv6g1RB6GuUp/h8BL//6VHruTq+GqL2zQLL
hsRdQE9IJzsOaBQPWLzivLA84zqnGcryoEGU4/QHgrBEODAi4Yam1Ml0FhJubc7b
V8eE1Jnzceq4rhSHH6g2wOahHHzPfYIbTpbqunoa1fjsw2gBo+rO81jOL6jT7kRB
978/yfo29po99/9CXrnaK3q+tZzJa4Wj5J2uQH2tgK0VcI/df5HKQbSvU2F1b1wf
1EEL4vc4hJ88caRGaDaDny8SvNA1ko3h5i+ztwls+7M2aBFtt4ZGwUOJrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN0c5HmYO+azBuUrcAo90CUOHHHMB8GA1UdIwQY
MBaAFOc4pfkwZCOatP95PfioeeG6qOHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXppbC1UQmtJNXEwXzNrOS1LaDU0YnFvNGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lNzY3MDEtOTg3My00ZmUwLTliNzEt
Zjg5YmNmZjY5NTlmLzEvNXppbC1UQmtJNXEwXzNrOS1LaDU0YnFvNGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lNzY3MDEtOTg3My00ZmUwLTliNzEtZjg5YmNmZjY5NTlm
LzEvNXppbC1UQmtJNXEwXzNrOS1LaDU0YnFvNGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlV9ofW9e
YKhflod7WTMg4WZYDFRPyijwx0Lh5WBtJmDppAf+V6Wd/GDoiTS5r+LhjS8GpdCt
56zvno/O3utFNWK7CbVNnX8PUtbSDcao+woQfRXzEhNhs6QjXiqqg5da25wpwFZ7
kjHIPlHndC64gvKu02V1L1QHe+e2nVizNYS10bXNbyEX5g1JOBWYQ3VPs6As5Mov
9NqPydzvHKfVqoe6pq6v/0uBnPETDHSt3vxX7dyt9FaB4mbPxIbj8k8GfGCMQQnu
E8ToiYCFsb4NjUgj62071CkgItI44jSHfQEls6UiAqOS+gy8B/dAs3d1WevqxSgU
liQavp/5SsSWfA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:41 2026 by rpki-client