Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: NjmtA0i2FGuCwWkWHPzW3VsripsVUmPy6M6vyBwJBlg=
Subject key identifier: 2D:70:D0:68:7F:A3:D6:5C:55:DB:37:0F:82:64:44:26:91:37:BD:82
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019D28F2F6C99778DC5FEC0B5FCA6BCD93F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 0934
Signing time: Thu 26 Mar 2026 07:01:44 +0000
Manifest this update: Thu 26 Mar 2026 07:01:44 +0000
Manifest next update: Fri 27 Mar 2026 07:01:44 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: TBA3Xkq4JFF6Cpf3G4twxiuorfg0j/BkBVBGTL+T2n4=)
2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f6:c9:97:78:dc:5f:ec:0b:5f:ca:6b:cd:93:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Mar 26 07:01:44 2026 GMT
Not After : Mar 27 07:01:44 2026 GMT
Subject: CN=2d70d0687fa3d65c55db370f826444269137bd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:6b:90:5b:c1:ca:0a:3a:fc:c7:e3:09:7e:
88:fa:4e:c6:9f:a9:26:b5:f8:0b:0b:18:0c:85:a0:
90:83:e1:13:2e:7c:6a:c5:03:e8:a7:1d:f7:21:d6:
ab:48:09:c2:e6:33:a6:c8:8c:af:05:45:6c:9f:c1:
52:a9:43:53:7f:a9:b6:50:d5:e5:07:cf:fa:db:40:
d3:3c:3d:98:24:fe:21:d9:16:a0:1d:ab:2f:12:0d:
06:60:55:bb:76:b9:24:b7:27:8e:9a:4f:14:38:27:
d9:fc:2a:5a:8f:30:a3:35:7e:39:df:ce:07:46:dc:
67:07:97:1a:20:4a:20:7c:a5:e3:a4:93:c3:ee:80:
9f:18:cd:9f:e5:a1:8d:0c:70:42:cf:31:2c:34:14:
40:96:02:1a:1a:4f:ff:2e:87:c1:d0:79:2c:a0:aa:
25:6c:ab:29:15:7f:28:d6:89:b3:ef:e1:0f:6c:79:
c3:6b:50:1f:7f:32:42:2a:0b:bf:75:ca:96:73:65:
eb:da:8a:f6:b1:d0:bf:9f:9e:e0:f8:46:05:d0:07:
e3:5f:4e:3e:bf:8f:71:a1:19:f9:77:03:2f:d0:5e:
fc:5d:48:f4:43:c5:3b:f1:52:b4:ed:c2:9a:dc:88:
ac:02:af:50:55:67:09:d9:dc:2b:c0:f7:91:88:43:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:D0:68:7F:A3:D6:5C:55:DB:37:0F:82:64:44:26:91:37:BD:82
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ee:ce:44:8b:5b:60:37:75:44:b4:90:a7:70:1a:03:f6:a2:
01:59:c9:c8:e6:06:dc:93:82:db:84:e2:e0:7c:1d:cd:58:7a:
1e:b7:f0:7c:4e:dc:84:e8:45:98:42:e7:c6:d6:f8:e9:83:e0:
b5:3b:83:cc:db:99:cb:a6:4f:0d:02:ec:09:df:13:d1:18:8d:
b3:94:e3:37:69:df:0a:3d:44:1c:59:72:22:67:13:11:83:ef:
f0:d2:b0:22:a1:9a:8c:c0:38:ba:f6:b7:12:5f:b8:02:e0:f1:
31:30:a8:9b:b2:5e:15:79:ba:17:25:8c:6d:61:40:e4:be:1b:
30:17:96:b2:f9:22:97:6d:5d:c5:cd:ac:f5:6a:76:e2:e5:9d:
be:76:b3:66:91:dc:9e:c6:81:72:d7:e1:07:2a:05:05:6e:d7:
a3:25:e9:ed:c3:1c:07:26:36:6e:0f:39:70:ee:3d:95:e2:c7:
3f:5b:1a:7c:fc:b8:29:be:65:76:dc:89:ac:32:87:e1:53:8c:
75:4e:80:69:64:48:2f:e9:c3:2f:d2:30:8e:6e:e8:72:20:6e:
89:ed:8f:0e:33:0d:81:b6:7e:09:83:5b:5b:1d:9b:ff:65:0b:
70:49:8d:30:a3:50:9b:5a:3f:e9:76:db:6b:81:5d:b9:1d:f0:
76:f0:0b:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8vbJl3jcX+wLX8przZP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MTY0NTM0OTc5ZTYwYTU2NDcwMTIzMmIyZTUyMDA4ODk1
NDI2MDYwHhcNMjYwMzI2MDcwMTQ0WhcNMjYwMzI3MDcwMTQ0WjAzMTEwLwYDVQQD
EygyZDcwZDA2ODdmYTNkNjVjNTVkYjM3MGY4MjY0NDQyNjkxMzdiZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvZrkFvBygo6/MfjCX6I+k7Gn6km
tfgLCxgMhaCQg+ETLnxqxQPopx33IdarSAnC5jOmyIyvBUVsn8FSqUNTf6m2UNXl
B8/620DTPD2YJP4h2RagHasvEg0GYFW7drkktyeOmk8UOCfZ/CpajzCjNX45384H
RtxnB5caIEogfKXjpJPD7oCfGM2f5aGNDHBCzzEsNBRAlgIaGk//LofB0HksoKol
bKspFX8o1omz7+EPbHnDa1AffzJCKgu/dcqWc2Xr2or2sdC/n57g+EYF0AfjX04+
v49xoRn5dwMv0F78XUj0Q8U78VK07cKa3IisAq9QVWcJ2dwrwPeRiEPNNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1w0Gh/o9ZcVds3D4JkRCaRN72CMB8GA1UdIwQY
MBaAFOUWRTSXnmClZHASMrLlIAiJVCYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEt
ZDFlZWIyOWM5NTFiLzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEtZDFlZWIyOWM5NTFi
LzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAle7ORItb
YDd1RLSQp3AaA/aiAVnJyOYG3JOC24Ti4HwdzVh6HrfwfE7chOhFmELnxtb46YPg
tTuDzNuZy6ZPDQLsCd8T0RiNs5TjN2nfCj1EHFlyImcTEYPv8NKwIqGajMA4uva3
El+4AuDxMTCom7JeFXm6FyWMbWFA5L4bMBeWsvkil21dxc2s9Wp24uWdvnazZpHc
nsaBctfhByoFBW7XoyXp7cMcByY2bg85cO49leLHP1safPy4Kb5ldtyJrDKH4VOM
dU6AaWRIL+nDL9Iwjm7ociBuie2PDjMNgbZ+CYNbWx2b/2ULcEmNMKNQm1o/6Xbb
a4FduR3wdvALwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:27 2026 by rpki-client