Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
File: 5zkzwIr5wC27DT6X8fkJM_U1b8E.mft (raw, json)
Hash identifier: Mta8htW9o5eQ88JS5gQVPyZ1SiaxlRBNqgs6P3k5Lso=
Subject key identifier: FE:B6:1F:BA:13:80:89:B0:2F:5C:F9:CB:50:A5:A6:3C:A3:8D:C3:FA
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Certificate issuer: /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial: 019D3909E6A31279C890CF41DFC2A16F47FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
Manifest number: 102D
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: 5zkzwIr5wC27DT6X8fkJM_U1b8E.crl (hash: CPZnl+b3d6eeCxqcvwdrq8KD8/Q2m8B2DF/3mWGktDU=)
2: uFf4NNFgYfbPreMK1NPSq7P_y9s.roa (hash: aCoqG0RsQJOyf3YmgdPoSCd4+nQQ0ofT4kMRhG0IKVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e6:a3:12:79:c8:90:cf:41:df:c2:a1:6f:47:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=feb61fba138089b02f5cf9cb50a5a63ca38dc3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:c2:7a:ec:85:d7:c4:09:c6:3e:4a:f8:b5:
a1:72:88:a4:4f:be:73:c2:11:57:e6:e6:4e:71:75:
42:f6:2b:60:d4:14:ff:d8:d6:9c:13:20:b8:c1:d7:
81:58:0e:a4:1f:36:ab:4a:c9:10:e9:c5:93:1f:03:
59:09:e5:7d:66:82:42:72:4f:cd:39:11:c8:04:14:
69:95:f2:62:8e:32:5d:f8:8a:2c:0e:53:7c:a3:e6:
e5:c8:26:9e:8a:6d:cc:91:d3:c8:82:c5:3d:8f:18:
dd:d3:7e:61:82:08:d1:f8:cb:22:a4:a9:e1:3d:6c:
f7:96:03:f6:2a:e7:7d:c9:42:9c:ed:e4:99:18:2f:
75:50:b9:a6:f5:77:ad:13:24:a0:bc:d6:4c:74:be:
69:8d:ee:7a:e2:8b:b5:27:1b:a9:14:4a:c0:20:64:
44:c2:d1:6d:97:95:6f:f1:73:22:1e:29:a3:5a:e1:
38:ca:3e:4e:c6:05:71:0d:1a:73:94:c4:b6:6b:a1:
d2:87:79:a3:d3:43:73:df:6d:e9:d9:ee:a1:5d:eb:
06:b2:6b:bc:09:fb:73:36:d7:16:dc:db:7a:f0:7f:
99:64:b8:26:14:8a:26:e3:7a:92:30:20:d1:26:48:
c6:61:21:39:40:0f:54:56:4b:cf:ba:dc:95:e9:ce:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:1F:BA:13:80:89:B0:2F:5C:F9:CB:50:A5:A6:3C:A3:8D:C3:FA
X509v3 Authority Key Identifier:
keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:87:84:c1:39:15:cf:17:a1:c2:cf:7c:cb:a5:54:8c:68:b5:
00:9b:e0:12:c0:6d:0b:97:e0:eb:ca:48:4b:f6:ed:8e:86:8f:
24:df:c4:9f:4a:ca:e4:f5:29:9f:fd:20:30:9e:52:b0:47:a9:
0b:9b:34:32:92:1c:41:d9:d2:79:73:11:09:2f:a2:60:e8:e7:
12:6b:97:2d:e6:91:7c:a9:82:6a:16:09:fb:e2:66:6b:ee:ed:
50:7c:53:a7:17:bb:37:2d:e0:14:ed:11:d2:ab:6e:42:11:57:
be:02:fd:d7:ad:a2:4c:5a:12:6a:96:f8:fd:be:84:3d:cc:2b:
5a:60:30:ce:77:1f:86:84:80:33:53:17:75:1f:df:2b:28:ad:
27:e8:a8:c9:87:a3:d1:2c:9d:e8:44:70:b5:0f:4d:fa:15:2f:
9a:55:90:44:e6:57:4f:ea:61:7f:a1:aa:6e:47:5b:4e:9c:67:
70:9d:16:c8:0a:08:fa:95:f3:58:40:3f:36:ae:1e:1e:cf:d2:
51:1c:80:62:de:20:88:c8:4a:ee:eb:53:4f:8e:49:54:80:f9:
dd:0a:7d:b8:bf:6a:42:9c:70:fd:d6:af:dd:59:5f:4f:7b:d6:
9f:2a:33:7b:d6:11:46:93:86:fd:64:b3:13:a3:e6:a9:d6:10:
3c:e5:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:07 2026 by rpki-client