Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: 9ZfFketHmMCUNN/kWgDmykd77UeinKDABxChOtfH1MQ=
Subject key identifier: 48:3E:15:42:ED:47:66:FA:0C:AA:90:1D:2D:EE:B8:E3:0D:C9:DF:84
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019D37C0DB6AE20E14B3156F8668D2887ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 09EA
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: 3kBvGI5p2EBGERofjuhowWFNz9xGSPVRBlpRMCDGTuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:db:6a:e2:0e:14:b3:15:6f:86:68:d2:88:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=483e1542ed4766fa0caa901d2deeb8e30dc9df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:25:bb:0a:7d:12:ae:a7:ca:61:dc:79:10:
3f:98:24:29:c4:66:68:c7:3e:8e:82:2c:22:99:e0:
18:33:55:ad:eb:c3:59:28:17:33:30:ee:14:2f:14:
89:e0:51:2f:60:29:6e:18:ca:89:f6:79:fb:ad:a1:
c4:13:91:e4:3d:05:59:27:16:d2:e1:61:3f:04:d3:
f4:e6:7a:f1:8c:52:c2:02:79:76:d7:e4:50:0a:62:
e0:d3:a9:e7:8d:b7:29:7f:e8:c1:51:31:81:0f:6c:
56:a2:af:27:da:71:69:3b:ac:ec:6a:b7:51:c7:49:
cd:66:44:50:09:6f:9d:07:24:e1:98:35:f5:8c:d8:
7b:c6:56:96:88:9e:b5:69:0e:ae:e7:ea:23:8b:be:
ab:90:5e:b8:b4:c1:2f:50:d0:80:ed:12:15:e1:bc:
15:10:7c:6e:51:67:11:89:fd:8a:ea:7d:4f:20:61:
c2:2c:b0:7e:55:c8:6f:7c:07:e5:9c:6a:b0:a6:11:
66:b3:96:12:e6:6b:a4:62:51:ed:71:39:2d:1e:98:
04:4f:35:17:3e:81:02:ca:f5:24:7f:b7:f4:cc:e5:
70:a5:e3:d9:4c:6d:b2:4e:45:09:0c:12:b8:6b:29:
d7:ae:ea:d6:13:f8:66:ef:ef:5f:66:b9:3e:49:f5:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3E:15:42:ED:47:66:FA:0C:AA:90:1D:2D:EE:B8:E3:0D:C9:DF:84
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bf:96:e7:23:82:4d:c6:65:16:49:1a:bc:0c:ac:0a:b3:ba:
b2:27:a3:6e:51:6c:c5:56:50:9c:a4:bb:2d:71:60:20:4e:e3:
cc:4a:d5:7e:e4:13:08:76:48:85:f6:9b:af:14:39:ac:45:48:
c3:4d:86:39:a4:de:34:68:f3:a2:7a:c8:ab:b7:9d:fb:e7:0a:
e5:c0:47:36:03:29:31:94:7f:eb:c7:2c:69:76:0e:2d:a5:a7:
c4:2e:a3:60:6f:48:90:f3:91:3c:13:7b:2f:4c:d8:47:b9:9e:
c1:8e:ae:64:a3:04:60:69:77:0b:49:a5:09:47:bb:ed:12:e7:
98:d7:6e:91:3e:dd:ad:39:e0:96:5d:d7:23:80:68:65:e4:90:
11:01:a1:cd:2b:e6:6c:a0:93:33:d5:9e:ce:07:73:23:76:a7:
94:36:37:8e:86:17:e7:a3:3a:96:eb:86:57:b2:dd:5f:6f:c5:
90:16:04:5e:ad:3b:6f:65:60:fb:1f:0b:fa:40:5c:86:a5:60:
a2:30:d8:70:1c:3d:60:b6:5b:fa:f5:df:12:63:9c:f8:06:bc:
1f:30:7f:1c:c1:8f:e7:fe:d8:98:6b:e9:a8:8b:60:b4:44:e3:
5b:fb:20:c4:ef:e3:54:de:2c:05:32:de:31:b5:75:78:32:e4:
0d:3f:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:07 2026 by rpki-client