Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: F1v33YMBx7S3iT+riS8GRC8zH+n1ZlBXophOEU+GoGU=
Subject key identifier: 08:E3:EC:4F:C1:5B:34:27:18:5E:6B:32:E7:24:E4:F7:B9:2F:87:3B
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 01A0D3831C707736FA747FF99E2D9EE94439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 0B1A
Signing time: Thu 24 Sep 2026 13:02:59 +0000
Manifest this update: Thu 24 Sep 2026 13:02:59 +0000
Manifest next update: Fri 25 Sep 2026 13:02:59 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: h1+FdQwMqDAU+iU+x8Z6F6K8wgwFdIRgjX/5QnpR1iQ=)
2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:1c:70:77:36:fa:74:7f:f9:9e:2d:9e:e9:44:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Sep 24 13:02:59 2026 GMT
Not After : Sep 25 13:02:59 2026 GMT
Subject: CN=08e3ec4fc15b3427185e6b32e724e4f7b92f873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:09:b6:91:bf:f7:66:f6:a4:8c:4a:af:95:
79:60:43:64:3a:0c:46:80:ff:7e:af:98:49:b0:58:
91:1b:01:18:b1:cf:ed:6f:31:c3:4d:c8:1a:e1:9f:
98:96:2a:45:73:c0:00:f8:f4:11:b4:cd:28:64:57:
77:ad:b6:06:4b:13:cf:08:0c:47:cc:78:06:11:79:
22:29:27:be:e6:61:dd:5f:ff:7b:11:df:18:c8:1f:
e5:ff:82:f7:a2:6e:da:0d:fe:9d:af:61:c2:d2:46:
70:7c:71:b9:f8:d0:43:45:69:03:43:07:25:fd:d9:
e3:ab:63:9c:40:35:70:a9:4c:8d:10:0b:98:0c:6c:
2b:0e:9c:3f:87:1f:7e:64:53:de:93:e3:aa:cb:f8:
1e:fc:ca:6e:52:d8:0f:f5:b2:43:64:21:0a:2d:32:
4b:3e:68:0e:6a:a1:7a:f6:f0:f8:73:0e:72:6c:1f:
b0:ef:48:b5:be:f8:63:ba:f5:b0:f1:50:0a:f1:46:
59:34:bf:9c:ae:b8:66:ff:94:79:97:56:8f:f8:55:
b5:23:a3:ff:c5:2d:6d:25:ff:f0:02:6f:b1:cc:77:
37:37:a0:07:aa:41:70:35:79:8f:a2:15:84:ed:d1:
6d:a2:6b:62:b4:d3:5d:24:bb:60:64:0d:6a:d8:91:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E3:EC:4F:C1:5B:34:27:18:5E:6B:32:E7:24:E4:F7:B9:2F:87:3B
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:42:f0:8f:93:cb:19:6b:9d:36:eb:e5:73:90:6e:ee:90:05:
9e:98:ca:2f:04:86:ac:5f:23:52:37:07:7a:8c:85:49:06:3a:
5b:e6:7a:b2:98:df:42:85:bd:ed:5d:2c:df:17:b3:06:34:c6:
19:73:10:60:fe:67:e2:66:14:ea:19:72:36:29:95:c4:d7:fc:
fb:7d:8a:1f:dc:cf:9f:64:3a:ec:90:68:46:db:bd:0f:d0:92:
7b:e2:5e:61:2f:04:43:bb:bd:93:56:6e:d1:9e:78:f3:f6:e5:
16:ea:79:78:4f:c4:84:05:74:8e:d5:88:7c:60:3e:f7:5d:cd:
c1:88:93:99:fc:2a:91:df:14:d3:9a:b3:ba:16:a6:fa:d2:dd:
c5:2a:2d:6f:2e:45:11:00:48:a0:2f:0e:39:94:a2:57:dd:62:
42:9c:3a:33:64:7a:50:f7:8d:f5:5a:1a:fc:99:61:8f:f6:90:
0a:a5:38:e2:aa:03:74:fb:17:45:af:5f:15:a6:b6:a3:6e:7b:
2c:c2:ca:72:ed:26:48:53:1c:83:e8:f0:45:e6:c2:b4:1e:51:
bc:d2:17:46:2b:c6:43:76:ae:2d:97:51:a9:7d:1e:e2:f9:17:
1f:78:b7:c5:6f:67:5d:70:88:10:a3:21:d2:6f:eb:5f:54:79:
a6:ba:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:14 2026 by rpki-client