Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
File: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft (raw, json)
Hash identifier: GWSVTKLn8cn10j7TQI5EO1EgsTHpWiiyq5XGgAezd+0=
Subject key identifier: 42:59:13:9C:BB:66:56:A2:56:13:A0:E4:7E:33:FE:C2:42:28:79:E7
Authority key identifier: E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
Certificate issuer: /CN=e731bb83a213f966e142b40da4f32cd6419ae219
Certificate serial: 01A0717286B23A7D6849574F1FE5AFA2DB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
Manifest number: B4
Signing time: Sat 05 Sep 2026 12:02:06 +0000
Manifest this update: Sat 05 Sep 2026 12:02:06 +0000
Manifest next update: Sun 06 Sep 2026 12:02:06 +0000
Files and hashes: 1: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl (hash: Xo23HswdaTQnNy27gtDplNLyDroB/mRlffyz0u9K9XA=)
2: AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa (hash: 5mqmiz/CXkUW+cTJVY8j71HIi5cAxYNi2xnFmKTG/HY=)
3: yMvlwhzKfrY9een7T1c_eLiRjek.roa (hash: PbmjqOmGy2hPK1aLZZhguFnKLy5ZFRT3ye/VUztkdts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:72:86:b2:3a:7d:68:49:57:4f:1f:e5:af:a2:db:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e731bb83a213f966e142b40da4f32cd6419ae219
Validity
Not Before: Sep 5 12:02:06 2026 GMT
Not After : Sep 6 12:02:06 2026 GMT
Subject: CN=4259139cbb6656a25613a0e47e33fec2422879e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:f1:ab:d5:8f:5d:b1:5c:bd:fc:6e:83:ce:
f7:5d:c0:61:59:1f:91:00:ce:cc:80:58:d2:7f:93:
a3:73:4f:73:8e:bd:19:08:46:1b:fc:c2:fa:1b:36:
d9:94:c9:61:61:76:5b:80:23:e2:1c:a5:ea:82:eb:
18:a9:44:a8:02:3f:89:5d:3f:4b:63:41:14:50:ba:
10:3a:e7:20:68:b6:38:72:04:a0:4c:b6:9a:08:1c:
32:db:54:ca:1e:cd:c4:f2:8a:a6:f0:98:dd:fa:7a:
d1:c9:c3:59:2d:d4:d7:33:74:49:e4:f3:8e:42:2c:
08:47:34:08:98:0c:74:3c:90:57:c2:e1:21:57:ab:
7b:83:d5:ff:7d:ab:0b:30:50:02:08:4c:49:be:1e:
bf:de:15:21:5a:dd:85:a6:5d:d4:ee:80:7b:58:53:
7f:92:53:31:51:01:87:02:40:28:00:ed:2b:20:58:
87:81:4a:07:1c:9d:26:61:41:69:2d:f1:02:35:11:
e6:db:96:25:f3:3a:f4:8b:0a:2e:63:3f:ca:2c:0c:
f0:a8:9d:50:61:7d:05:2f:d8:36:7b:2c:8e:b6:f1:
b1:6f:80:2c:c3:5d:5c:29:44:57:74:08:2d:6f:fb:
01:ee:91:47:55:7b:84:0a:b4:1f:27:86:0a:6a:95:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:13:9C:BB:66:56:A2:56:13:A0:E4:7E:33:FE:C2:42:28:79:E7
X509v3 Authority Key Identifier:
keyid:E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:08:84:c0:9b:96:fe:6d:12:93:c1:a2:aa:d4:1c:11:19:a2:
bc:72:b2:a8:28:e7:91:57:1e:b2:14:e0:67:f1:a1:e5:0f:ae:
1e:d2:5d:4d:e4:cc:7d:35:aa:ff:31:cc:1a:b5:07:f4:fa:8f:
c2:76:e8:8a:d5:32:ce:34:95:65:32:50:08:1c:d2:5a:15:ae:
7b:d4:6f:fe:ef:b8:80:c1:fd:6f:63:3d:e1:81:12:be:11:d2:
88:ec:6a:84:13:03:ec:93:13:cc:8e:76:92:2e:c0:fb:84:19:
39:8e:1b:4c:54:ca:1e:65:b5:53:2f:80:b1:c6:93:28:ef:e2:
7e:75:76:be:bf:52:e1:32:c2:7f:67:58:3a:c4:9b:ee:eb:79:
5e:d5:55:3a:a4:a1:6f:0f:1f:9f:e8:b5:e2:a7:d7:47:96:99:
e6:48:4e:57:15:0a:04:0a:de:7a:18:c2:c4:58:fa:58:ef:d7:
b6:17:6d:f0:2c:68:8a:cb:92:2a:29:c2:84:c8:4b:4e:27:fb:
33:ac:c8:8c:38:fd:ad:e1:b3:c7:a5:36:17:ac:7a:18:8b:5b:
6e:e3:23:73:69:bb:67:5b:97:4c:48:16:df:7f:34:cf:d9:da:
d4:a2:0d:de:bc:ed:a1:1e:27:0c:30:1a:c2:d7:bd:81:7c:5f:
ca:5f:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 18:35:57 2026 by rpki-client