Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: of9oHtad9dLqUUnD/0kQ8RlUrCJElPfOdkezBMGblRM=
Subject key identifier: 86:BD:34:0C:92:E4:E7:54:C5:7D:45:7A:CF:FF:FA:5D:BF:B0:27:1A
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 01A0CB22FD0AF4F70BD2F9242C9926B21FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 14F9
Signing time: Tue 22 Sep 2026 22:01:02 +0000
Manifest this update: Tue 22 Sep 2026 22:01:02 +0000
Manifest next update: Wed 23 Sep 2026 22:01:02 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: yDbbFqr5yJPgsT99vaWp1R0rj+1I3Ze50mDgsY2C+es=)
2: hLq5oWkJELQbNcRkoEuFG9HYL_U.roa (hash: yfA7tS4NCGXvzY+87zTkkeYt5A3me3y/07bpWLgYXqg=)
3: oXYPZ4avfp145oFgjMNonlejP24.roa (hash: comOe5RXUAfxCnEHSz+CE1aEiUDNnGCVQ5RAozO2Owo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:fd:0a:f4:f7:0b:d2:f9:24:2c:99:26:b2:1f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Sep 22 22:01:02 2026 GMT
Not After : Sep 23 22:01:02 2026 GMT
Subject: CN=86bd340c92e4e754c57d457acffffa5dbfb0271a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:9c:2c:b1:db:0a:93:cb:54:9e:61:21:53:
f6:92:90:43:af:51:73:5c:ed:78:64:5a:aa:9a:d1:
1e:db:ae:4a:2e:a9:33:38:30:ab:a9:00:fa:a4:71:
de:fb:3a:fe:30:ff:39:5b:a4:ef:64:7e:33:73:4c:
77:a1:08:73:fc:0a:d9:f5:0a:ef:98:b9:f1:f0:d8:
bb:41:79:6b:a0:06:23:d7:0a:50:1f:70:4e:02:75:
ee:24:30:7f:17:4a:42:b9:68:65:88:0b:9a:a7:1d:
22:0a:a3:3b:9a:02:d8:66:1b:14:33:6b:6a:d1:17:
97:18:bd:ce:46:18:0d:bd:86:9f:a0:b1:54:0d:38:
9f:a9:45:fc:77:4b:1e:cf:0c:4f:18:08:53:c4:2e:
c6:1a:c0:39:87:25:57:ee:4b:69:1d:e2:a4:56:14:
79:14:b5:86:c1:1f:53:ad:53:8f:8a:09:4c:cb:b2:
99:54:83:ea:84:17:45:c5:e4:ef:48:06:00:3b:e4:
a2:d9:83:b0:8a:00:8e:8d:bf:b9:bb:4e:93:2a:68:
50:89:44:2e:f5:67:d9:99:cf:96:a5:a1:c8:e5:73:
55:3c:b0:e2:cf:82:ac:6e:5a:da:1a:64:33:79:da:
b6:aa:9c:14:1f:1a:e1:b9:b7:a7:6c:d4:c6:d7:9f:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:34:0C:92:E4:E7:54:C5:7D:45:7A:CF:FF:FA:5D:BF:B0:27:1A
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:61:13:cd:25:b9:47:6c:84:c4:f4:4e:de:4b:98:1e:16:aa:
9f:1e:50:bc:cf:db:ad:bc:fb:04:6a:8d:45:37:24:07:e1:46:
73:38:ac:72:68:e9:45:b4:3e:55:b3:e0:b8:23:42:4f:e5:98:
24:99:57:a9:fa:68:dc:d0:6b:8b:cd:62:4e:25:76:82:fc:b8:
d4:3a:75:55:11:6e:5d:0a:64:1d:b8:fc:50:15:d2:8b:a7:7b:
03:1d:87:27:50:1e:77:e8:2c:70:28:9b:26:bb:ff:af:e3:a7:
66:a0:ee:7a:33:56:01:e4:12:78:5b:c2:ec:a0:25:bd:96:9b:
ac:cf:a8:e5:7f:96:cc:ee:1b:12:a6:93:14:61:bb:06:64:9c:
bb:a1:9a:b3:60:aa:4f:74:69:55:f3:ca:bb:97:65:87:58:33:
52:e8:5c:5e:33:4c:75:7c:09:f3:97:36:3e:49:d0:34:ca:a4:
10:71:ce:11:89:19:b3:f3:cd:a2:d7:05:05:9f:a4:66:e2:24:
48:20:0e:75:69:69:d4:64:a8:f7:ce:d7:ae:f8:d1:89:f5:bf:
56:c5:47:7f:e1:92:32:95:08:5f:be:d0:0d:2c:04:2f:85:f1:
ab:12:50:18:34:d7:a2:82:7b:05:52:a2:36:c4:6b:77:57:2e:
e2:80:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:03 2026 by rpki-client