
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
File: 5zil-TBkI5q0_3k9-Kh54bqo4cc.mft (raw, json)
Hash identifier: gOJaPDkqjwZVX6PUxFEpxVhXIFxJpgxkBZBU6SkegVU=
Subject key identifier: 4E:67:49:8D:45:54:16:7D:36:6C:8F:C0:64:0E:05:78:D0:96:DF:FD
Authority key identifier: E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
Certificate issuer: /CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Certificate serial: 01A179283F3D2415FAEBEE2A78C1F896C4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
Manifest number: 17C1
Signing time: Mon 26 Oct 2026 17:00:43 +0000
Manifest this update: Mon 26 Oct 2026 17:00:43 +0000
Manifest next update: Tue 27 Oct 2026 17:00:43 +0000
Files and hashes: 1: 5zil-TBkI5q0_3k9-Kh54bqo4cc.crl (hash: UIiO83XaQQXQ23vQbSDk969/axJ/8EmDfggj/bWomhA=)
2: ShCcGsFHIiXE6iQ9mjukZmgKlpI.roa (hash: CWzStSwFtF0yAwYVo/sI4q7AfdF95XDfRyeTmtd1nsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:3f:3d:24:15:fa:eb:ee:2a:78:c1:f8:96:c4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Validity
Not Before: Oct 26 17:00:43 2026 GMT
Not After : Oct 27 17:00:43 2026 GMT
Subject: CN=4e67498d4554167d366c8fc0640e0578d096dffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:d1:6f:6b:8a:48:47:6f:90:f3:e3:f8:be:
35:88:1c:d5:70:fa:f8:39:c7:21:65:04:d5:cb:dd:
12:1d:42:11:78:09:50:91:fd:bf:d5:10:d4:93:c8:
f9:41:82:72:b0:c4:c5:d4:33:8d:45:0f:af:6e:3e:
d3:ec:67:76:6a:6a:6c:6d:45:be:a9:a4:b2:2c:13:
1d:72:33:f8:ef:14:0f:6e:54:44:3d:7d:f6:89:fc:
ea:58:bb:2c:34:7f:75:4f:ef:50:4c:3d:11:71:24:
42:c6:72:de:ab:ba:a4:4f:49:d8:80:83:20:c3:9b:
3e:c1:bf:ba:81:50:4f:9e:ce:6a:27:bd:00:95:35:
a6:31:5b:14:3d:2a:47:5b:f7:18:53:5d:8f:03:34:
5a:6d:cc:57:c3:af:ac:ea:39:36:e8:6d:75:0f:00:
7a:81:cf:6f:39:ed:7f:19:bf:b8:80:65:25:fb:96:
22:be:ee:aa:d3:0d:7a:d2:1f:2b:ac:3b:e8:89:09:
b0:24:6b:a7:aa:01:85:84:8e:f4:13:5d:f7:d8:80:
a5:8a:15:39:a0:53:e0:d0:28:80:b8:96:4f:f5:cc:
29:bd:e3:ec:bf:90:4d:53:1a:c7:e0:0f:06:4d:5b:
f5:17:89:70:4e:be:d4:9e:d0:73:72:63:a6:51:0b:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:67:49:8D:45:54:16:7D:36:6C:8F:C0:64:0E:05:78:D0:96:DF:FD
X509v3 Authority Key Identifier:
keyid:E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c1:40:81:12:84:f8:e8:71:65:22:ec:3f:82:8a:ab:f4:b3:
8a:65:55:67:24:ca:7f:4f:d3:07:b1:c8:30:6c:de:09:ef:fe:
a7:2c:24:46:dd:06:2a:b9:7a:a4:83:91:9f:05:c4:bd:72:f7:
02:17:6b:8b:a6:af:ea:90:54:1a:d6:08:f7:98:1e:4d:eb:d4:
73:5c:7d:fe:dc:db:14:98:3b:cc:64:bf:dc:67:c1:ce:48:40:
a4:4b:b0:ac:cc:53:3c:da:81:88:2f:aa:81:79:9e:dc:ff:fa:
ec:af:d6:85:b2:cc:cb:2d:48:7c:b8:0c:b3:94:d0:4c:a4:aa:
ad:08:1e:d1:24:c3:85:6d:46:17:03:ee:5c:fa:bf:85:b6:96:
19:22:52:e8:6d:2e:f3:80:3e:1a:39:14:ac:32:e6:c7:4f:6f:
97:95:cf:4d:ac:be:ce:9e:d9:ef:0e:a4:56:c0:53:c4:52:ef:
87:48:dc:8b:56:ab:e3:a1:c9:da:f3:22:76:98:38:ed:11:da:
a1:a3:81:17:c0:0e:1b:4b:06:8a:11:05:b2:f7:4b:68:f1:c4:
8d:7a:14:52:ce:9b:d5:9b:67:00:97:01:27:23:4a:59:15:60:
81:c5:e9:7e:2a:eb:ce:da:b8:4a:c5:45:a6:16:82:62:ef:e1:
30:76:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:12:00 2026 by rpki-client