Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: JhWF4KEharGdvZ1fXGTOUKNI9bwOtnqodv8Oc6hzRpQ=
Subject key identifier: E8:84:23:11:13:45:C6:29:15:B9:85:55:2A:79:F4:CC:3E:C0:2E:2F
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 01A13F02C48A9AC88F3FADB01CAE39C6516D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 1535
Signing time: Thu 15 Oct 2026 10:01:48 +0000
Manifest this update: Thu 15 Oct 2026 10:01:48 +0000
Manifest next update: Fri 16 Oct 2026 10:01:48 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: YJjXO1kUyftfGFGUQaDal1Isexnyjk8jMc/WH+vraQ4=)
2: hLq5oWkJELQbNcRkoEuFG9HYL_U.roa (hash: yfA7tS4NCGXvzY+87zTkkeYt5A3me3y/07bpWLgYXqg=)
3: oXYPZ4avfp145oFgjMNonlejP24.roa (hash: comOe5RXUAfxCnEHSz+CE1aEiUDNnGCVQ5RAozO2Owo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:c4:8a:9a:c8:8f:3f:ad:b0:1c:ae:39:c6:51:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Oct 15 10:01:48 2026 GMT
Not After : Oct 16 10:01:48 2026 GMT
Subject: CN=e88423111345c62915b985552a79f4cc3ec02e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:72:06:0d:a0:71:b7:56:23:c8:03:33:0d:
95:0b:1a:30:2d:77:f2:7c:2b:60:fb:c4:0b:83:9a:
0e:bc:a6:4d:4d:fa:90:17:ee:ba:18:6a:2f:1e:53:
fb:d5:b6:0e:eb:26:f5:f1:b6:b4:b2:6c:a0:02:a4:
b5:3c:f7:2a:3c:c9:05:84:4c:ca:10:19:54:18:21:
74:1d:f3:02:4e:6d:af:0c:87:17:24:f8:17:2f:55:
19:82:3d:6f:31:fc:a6:c0:0f:50:e2:72:9d:50:35:
5b:5b:cd:d0:9b:59:a6:a4:c2:83:0a:21:75:cc:db:
35:0e:22:f2:81:c4:75:4c:2e:d0:14:39:72:67:f5:
20:b0:25:53:f7:0c:53:44:12:1e:c9:79:bc:99:0b:
19:3c:cc:09:54:38:dd:08:24:24:72:f3:8b:c8:83:
fd:b5:82:35:df:52:5d:32:3b:36:e9:b2:4b:70:76:
c3:35:2c:77:01:79:6b:5a:f9:bb:3c:62:50:cc:d8:
32:7e:0a:ed:7b:e1:75:7f:89:f5:a9:04:da:32:95:
6c:83:78:b0:e5:01:fe:ac:ee:32:0d:05:15:69:b8:
0d:1f:91:c2:b8:08:67:d2:85:26:92:90:50:73:11:
13:8e:7e:b0:00:70:4b:7a:04:c3:22:53:29:dd:c2:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:84:23:11:13:45:C6:29:15:B9:85:55:2A:79:F4:CC:3E:C0:2E:2F
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:56:41:0d:90:a5:9e:d5:4c:2e:86:e2:97:8f:4a:37:bf:fb:
ca:68:ff:3b:fe:6b:ea:bf:e1:64:e8:1a:cf:00:26:eb:91:2e:
ed:30:08:1d:27:ee:27:1c:00:f4:bc:95:19:47:17:a3:26:e3:
b1:a2:ff:47:32:30:27:76:93:ef:ac:ad:38:13:32:d7:1f:d4:
51:25:ca:93:4f:6a:34:93:b8:01:cc:7a:a1:ac:b4:d4:b7:cc:
16:40:ae:27:04:7d:d3:be:97:8c:76:16:61:17:5f:ff:42:6a:
07:a3:eb:da:63:64:21:c4:0e:eb:79:ae:d2:bc:d1:84:6e:59:
74:46:2c:62:ff:5a:d1:ac:f4:55:d3:a5:fa:0a:dc:16:9a:b6:
aa:23:26:32:4b:72:51:68:2a:14:33:13:e5:5f:ab:4e:9a:0b:
1e:6d:0e:29:b0:af:e2:2c:10:2c:cb:6b:d5:8f:c1:25:f4:d2:
2d:49:9e:18:3a:6c:67:50:17:67:a1:ce:d6:0b:50:74:61:0f:
7d:b3:e7:50:21:89:e6:d9:47:d4:bf:fb:74:ff:64:5e:97:d1:
f9:53:fc:a0:9b:ba:2c:20:d6:c5:87:85:ff:d1:de:1d:97:e3:
38:9e:a7:b9:5f:a8:3e:f7:bd:fc:fd:42:e3:f3:03:67:76:71:
84:20:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:19 2026 by rpki-client