Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: x+SmrWejSS1BfHoSTHY3ulb6kGTz2paQ0WnHQJuH4DI=
Subject key identifier: F7:BB:8D:8F:0A:0E:E9:23:B7:07:48:BF:BF:DF:2E:39:6D:82:30:4E
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019E1C46CC3D7ACE48F57A564705076D8E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 09B2
Signing time: Tue 12 May 2026 13:01:02 +0000
Manifest this update: Tue 12 May 2026 13:01:02 +0000
Manifest next update: Wed 13 May 2026 13:01:02 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: YqRrfVNEfXbZP6+MmpPG6/jD8UD4CeCCJWt3K3nI3So=)
2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:cc:3d:7a:ce:48:f5:7a:56:47:05:07:6d:8e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: May 12 13:01:02 2026 GMT
Not After : May 13 13:01:02 2026 GMT
Subject: CN=f7bb8d8f0a0ee923b70748bfbfdf2e396d82304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:94:e9:32:61:77:2f:cf:9a:1d:99:f2:ba:
4f:b0:76:30:ae:b0:71:f3:e6:28:9e:82:45:9b:ba:
b6:88:30:50:1e:19:7c:ad:41:12:05:cf:55:5f:98:
b0:c0:c2:2a:17:b1:f4:48:bc:c5:4d:d0:36:b8:6b:
5f:24:ca:2b:ee:d9:49:e3:c3:a2:88:b4:27:dd:4f:
4d:69:31:cd:4c:22:b2:c6:f4:6e:88:41:56:70:95:
7d:5d:57:ad:33:ff:05:cd:53:bd:84:1b:ce:e4:56:
f5:40:88:be:90:63:c1:fa:45:5a:3a:7e:b4:b3:5a:
f7:38:16:74:9b:40:1f:a8:80:44:e3:ee:0c:66:0d:
82:02:e1:08:fb:fd:96:07:41:0b:e1:2c:d9:da:7c:
d5:81:ff:e4:1f:de:7a:92:16:61:ab:75:d6:c8:73:
ac:d7:53:4c:16:ff:34:0f:d4:c0:88:5a:4f:15:00:
c5:e7:35:cb:3d:03:86:28:77:2f:19:ce:6f:ae:7d:
c3:ac:8c:74:37:47:18:05:7c:e1:fe:69:20:63:4d:
53:bd:71:be:fc:72:c9:98:61:89:f8:2f:27:52:1d:
55:45:24:49:42:6b:ec:9e:2e:40:81:0b:f9:a7:44:
61:cd:c7:84:28:59:21:70:0d:bd:8f:67:b1:e8:4f:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BB:8D:8F:0A:0E:E9:23:B7:07:48:BF:BF:DF:2E:39:6D:82:30:4E
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:50:d8:9e:dc:4b:86:f6:76:84:f3:d1:f5:5e:99:75:1d:2e:
c8:dc:6f:47:17:81:b2:75:bf:c8:6d:01:35:24:46:d1:59:5f:
c9:75:ac:85:66:78:b3:c7:90:d4:7a:d0:98:6f:9e:2b:0d:57:
4b:bb:43:12:b2:a3:51:61:be:f2:bd:94:60:bc:a6:05:06:f6:
c5:39:39:28:28:bc:1f:71:54:c5:84:0b:2a:7d:5a:c5:43:c5:
1b:6d:01:99:26:96:77:08:3a:fe:cd:b7:a0:4e:a7:60:70:6c:
97:bb:0c:5c:89:77:6a:73:db:ee:12:9f:9f:e6:30:5c:e9:c6:
0b:3f:3e:e5:9d:0e:97:71:9d:4a:63:26:9d:f9:c9:15:3f:43:
16:de:ad:25:93:bb:91:3c:6e:bb:81:72:68:f2:24:ba:e8:24:
c0:5f:03:b0:9a:52:57:57:e9:c4:74:a3:91:14:63:57:05:60:
d2:7e:69:3a:d4:63:73:0e:b4:60:54:83:46:03:26:3a:06:38:
0b:c0:17:5c:a2:d8:ca:9e:30:18:41:89:7f:bf:ea:5f:10:ae:
4d:b6:29:b3:07:65:21:9e:97:ea:24:48:45:86:f4:da:4a:56:
76:05:fa:9c:80:97:9e:07:1b:a7:2a:e0:15:de:12:ee:97:1f:
1b:52:9f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRsw9es5I9XpWRwUHbY6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MTY0NTM0OTc5ZTYwYTU2NDcwMTIzMmIyZTUyMDA4ODk1
NDI2MDYwHhcNMjYwNTEyMTMwMTAyWhcNMjYwNTEzMTMwMTAyWjAzMTEwLwYDVQQD
EyhmN2JiOGQ4ZjBhMGVlOTIzYjcwNzQ4YmZiZmRmMmUzOTZkODIzMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDOU6TJhdy/Pmh2Z8rpPsHYwrrBx
8+YonoJFm7q2iDBQHhl8rUESBc9VX5iwwMIqF7H0SLzFTdA2uGtfJMor7tlJ48Oi
iLQn3U9NaTHNTCKyxvRuiEFWcJV9XVetM/8FzVO9hBvO5Fb1QIi+kGPB+kVaOn60
s1r3OBZ0m0AfqIBE4+4MZg2CAuEI+/2WB0EL4SzZ2nzVgf/kH956khZhq3XWyHOs
11NMFv80D9TAiFpPFQDF5zXLPQOGKHcvGc5vrn3DrIx0N0cYBXzh/mkgY01TvXG+
/HLJmGGJ+C8nUh1VRSRJQmvsni5AgQv5p0RhzceEKFkhcA29j2ex6E/4AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe7jY8KDukjtwdIv7/fLjltgjBOMB8GA1UdIwQY
MBaAFOUWRTSXnmClZHASMrLlIAiJVCYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEt
ZDFlZWIyOWM5NTFiLzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEtZDFlZWIyOWM5NTFi
LzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFDYntxL
hvZ2hPPR9V6ZdR0uyNxvRxeBsnW/yG0BNSRG0VlfyXWshWZ4s8eQ1HrQmG+eKw1X
S7tDErKjUWG+8r2UYLymBQb2xTk5KCi8H3FUxYQLKn1axUPFG20BmSaWdwg6/s23
oE6nYHBsl7sMXIl3anPb7hKfn+YwXOnGCz8+5Z0Ol3GdSmMmnfnJFT9DFt6tJZO7
kTxuu4FyaPIkuugkwF8DsJpSV1fpxHSjkRRjVwVg0n5pOtRjcw60YFSDRgMmOgY4
C8AXXKLYyp4wGEGJf7/qXxCuTbYpswdlIZ6X6iRIRYb02kpWdgX6nICXngcbpyrg
Fd4S7pcfG1Kfgg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:42:54 2026 by rpki-client