Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File: 5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier: 6X9Xo/VwbCIx2Uobj+Ir4zu1dZvcVMv3BaWWAkNzAvk=
Subject key identifier: 07:31:DB:5A:DD:20:E2:46:F3:21:62:23:F3:0F:C8:B7:28:8C:A0:DC
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer: /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial: 01A0CDB5EA294DECF395063B4DAF5E861A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 10:00:46 +0000
Manifest this update: Wed 23 Sep 2026 10:00:46 +0000
Manifest next update: Thu 24 Sep 2026 10:00:46 +0000
Files and hashes: 1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: pxllNz8cTWwpJ6FqD4bjd45NDHDznZGzyy6u2jy/o18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:ea:29:4d:ec:f3:95:06:3b:4d:af:5e:86:1a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Validity
Not Before: Sep 23 10:00:46 2026 GMT
Not After : Sep 24 10:00:46 2026 GMT
Subject: CN=0731db5add20e246f3216223f30fc8b7288ca0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:6f:08:6e:07:d7:de:e2:c1:5a:08:f9:3b:
53:8e:df:25:31:62:5f:1a:e7:8d:4b:9e:74:fe:67:
5f:e0:ce:3d:4a:f5:e0:15:83:6d:40:d5:5a:51:b7:
6d:6f:98:21:25:96:24:cf:2c:fc:47:6d:1f:b3:b0:
08:f0:4d:8d:8e:f7:38:ed:57:41:ca:48:a8:41:b9:
e4:48:87:49:3c:1f:36:5f:63:2f:e7:e2:3e:ee:3b:
d2:2c:3c:6e:0e:91:84:71:bc:80:d2:55:b1:c7:5b:
ab:ac:1a:e5:24:18:e5:2a:41:92:20:08:4f:c5:84:
25:59:08:a0:09:c2:88:4e:cb:89:e6:63:a8:18:b1:
19:99:31:fd:db:ea:25:6a:fb:f4:b7:29:18:cd:96:
68:85:72:b2:22:3f:93:e4:77:18:11:8c:d5:37:91:
91:e9:97:2d:7f:17:1e:cb:db:02:fb:18:80:93:31:
1c:f6:1c:2f:1c:c6:2b:dd:32:e6:be:0c:47:f0:68:
dd:25:0a:73:ae:3f:e0:20:11:1a:b3:74:07:21:d9:
bc:6a:84:bd:26:4f:31:56:f9:94:f3:00:89:53:42:
31:f1:35:1e:d1:bb:1f:fa:9e:67:e2:5e:04:1a:6f:
00:6d:a4:04:2c:b1:c2:82:64:7f:e8:c6:86:2c:98:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:31:DB:5A:DD:20:E2:46:F3:21:62:23:F3:0F:C8:B7:28:8C:A0:DC
X509v3 Authority Key Identifier:
keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f6:fc:0b:01:46:34:79:48:47:c4:7a:2e:7a:a7:fa:9e:d0:
6a:62:64:a2:72:b7:ae:40:79:c7:65:5f:81:cc:6b:23:93:27:
ba:e3:72:b8:0f:12:a3:10:7f:83:59:74:a9:86:59:48:2e:a0:
50:25:bd:ae:3d:61:b9:17:48:0b:7f:45:40:47:53:a9:49:04:
de:21:0d:fa:38:bc:64:91:36:91:3b:cd:ae:26:0c:c7:3a:6d:
63:a6:c3:f4:2a:ae:ee:a6:05:07:19:3b:59:0b:26:2a:42:d9:
97:f1:f0:a2:0c:bc:00:7e:ab:3b:6d:f2:c9:aa:2d:32:4b:39:
f3:b6:8b:0a:02:7c:bc:8f:de:2f:91:e2:31:03:f8:96:70:01:
83:d5:7a:93:f6:70:34:ef:b5:bc:8d:ba:13:1e:fa:7c:c6:f8:
c5:4d:7a:e2:e3:33:05:6a:43:4e:2c:82:06:be:b5:8a:a1:ad:
3a:f3:07:df:e3:c4:31:25:0a:0a:05:ef:c8:c7:41:ba:89:4b:
63:72:f0:11:d8:98:65:9b:a6:35:0f:8b:36:3f:d8:1a:ca:c9:
bf:a4:e2:41:47:61:ee:4c:1a:d1:0d:bb:88:55:a5:8d:97:17:
7b:fa:97:f2:7b:98:30:1f:9f:68:c1:70:e9:f8:04:0a:cc:28:
ee:79:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:26 2026 by rpki-client