Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: v+/HW14VXBXuwhtWUAJrV80IDxpBYBn9OdnU4oad4XA=
Subject key identifier: 4B:54:FA:7A:73:6D:27:E6:F5:13:AA:09:F1:E0:C8:F3:DE:39:D8:44
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 019D284E4DBA8A260EC0573848ED858FC9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 1317
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: uV/bP7uV/Sq+iLDhz1rxbRTzqrIxnXLHKJy2OhgEQIs=)
2: hLq5oWkJELQbNcRkoEuFG9HYL_U.roa (hash: yfA7tS4NCGXvzY+87zTkkeYt5A3me3y/07bpWLgYXqg=)
3: oXYPZ4avfp145oFgjMNonlejP24.roa (hash: comOe5RXUAfxCnEHSz+CE1aEiUDNnGCVQ5RAozO2Owo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4d:ba:8a:26:0e:c0:57:38:48:ed:85:8f:c9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=4b54fa7a736d27e6f513aa09f1e0c8f3de39d844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:21:b0:93:03:22:ab:53:fa:05:c3:ff:2a:
7f:70:9c:6f:f3:94:e2:f2:07:61:af:d2:89:e8:94:
11:df:a0:6e:16:fe:63:8b:e6:aa:9a:51:c9:a3:2d:
cc:3d:c8:3b:f1:67:92:2e:f1:2a:3a:5a:66:d2:5e:
cb:29:00:4f:90:40:eb:17:59:be:6b:58:48:2b:46:
d8:82:7c:99:c9:40:3d:e2:3c:55:56:57:cd:29:72:
d6:87:6c:81:7b:53:4e:40:9b:fa:77:33:01:8a:84:
61:90:44:8c:7d:29:0a:a6:7e:a2:83:49:47:81:5b:
c7:38:a1:fb:e3:23:91:e3:b7:52:6a:b2:60:6d:02:
70:24:c8:e6:ad:d9:47:d8:bf:c6:94:fe:13:fa:ff:
24:56:37:62:34:ca:01:ce:b6:09:ba:0a:aa:3c:f7:
36:61:d8:5d:fc:fb:74:4b:9d:38:21:78:4d:20:c6:
8e:99:29:18:6c:f4:48:ed:d2:18:ee:6a:52:e4:5b:
5a:8f:47:e7:0d:84:51:e6:05:0e:0c:48:82:c8:27:
86:d7:b1:56:a9:89:8d:15:8d:8c:ca:40:b0:a9:4a:
fb:df:0f:8b:36:0f:d8:db:6b:87:5a:40:2b:4b:d5:
96:ad:41:25:1e:1b:6d:24:78:77:eb:d6:79:97:f8:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:54:FA:7A:73:6D:27:E6:F5:13:AA:09:F1:E0:C8:F3:DE:39:D8:44
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0b:e2:3c:d4:77:c7:07:ee:53:d6:29:84:18:31:29:46:fb:
62:4d:cc:66:ba:a2:b7:64:57:39:cb:b9:83:65:4e:83:5f:fb:
c9:a8:a3:30:c6:83:b3:b4:de:38:c3:d2:ec:ca:b8:ef:ab:0d:
49:ee:59:fe:9f:3b:da:91:0f:d0:fc:b4:81:f7:ff:5c:8d:fe:
54:c6:fe:e8:b2:6e:56:ff:5f:81:78:5b:13:aa:46:63:c9:40:
81:c9:e6:e9:af:84:f3:d9:de:78:d9:ab:0b:67:1d:6d:d4:37:
38:6c:72:98:4f:b3:45:89:46:25:0e:c2:47:17:3d:21:07:1b:
79:d7:52:2c:7b:cc:bb:a9:8a:67:41:8e:ff:a0:3b:f3:89:13:
b1:df:b7:fa:66:c2:78:8e:42:f8:13:9c:0a:92:02:7b:77:a1:
e0:c5:5a:d3:21:4b:a7:39:ef:f3:d5:ff:38:ad:9e:33:59:6b:
77:69:8b:c5:59:bd:f2:92:61:0c:e2:9c:82:d0:79:9b:eb:6b:
d7:64:ef:a2:6b:61:55:64:f5:00:5e:19:87:43:84:6d:de:7b:
5d:d1:e1:82:6a:8c:f8:b3:e8:98:ab:fd:d0:c6:70:b7:81:96:
97:98:c8:19:ac:b2:56:fb:e5:cc:0d:dc:b1:d6:bd:ee:f1:3c:
6a:e6:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:23 2026 by rpki-client