Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.mft
File: 5ZWF90rqxil-5epmYmZV7R_ej-c.mft (raw, json)
Hash identifier: X3iPM/4CcqHbtsQQsxtSdhH+E0mz1TZQg1OZD+RQQ/0=
Subject key identifier: D0:99:D0:49:20:2C:00:22:75:78:38:37:9E:05:8B:BA:54:3F:06:8D
Authority key identifier: E5:95:85:F7:4A:EA:C6:29:7E:E5:EA:66:62:66:55:ED:1F:DE:8F:E7
Certificate issuer: /CN=e59585f74aeac6297ee5ea66626655ed1fde8fe7
Certificate serial: 01A0404E479979FFCAA42CA96ADF16826C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZWF90rqxil-5epmYmZV7R_ej-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:07 +0000
Manifest this update: Wed 26 Aug 2026 23:01:07 +0000
Manifest next update: Thu 27 Aug 2026 23:01:07 +0000
Files and hashes: 1: 5ZWF90rqxil-5epmYmZV7R_ej-c.crl (hash: VvO+voYTNZ/zpareNwOlR0ES+RafcI7IesWVpgg9KTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZWF90rqxil-5epmYmZV7R_ej-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:47:99:79:ff:ca:a4:2c:a9:6a:df:16:82:6c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e59585f74aeac6297ee5ea66626655ed1fde8fe7
Validity
Not Before: Aug 26 23:01:07 2026 GMT
Not After : Aug 27 23:01:07 2026 GMT
Subject: CN=d099d049202c0022757838379e058bba543f068d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:eb:2e:f2:9b:0a:aa:1d:19:67:65:22:b3:
9f:5d:5e:62:b6:6b:31:d4:17:ea:2e:6a:0b:d0:d4:
93:a2:df:d6:14:23:22:58:bc:f6:6d:ba:6d:8f:d1:
de:54:93:f3:10:db:10:ee:ec:c0:c6:57:7a:5a:4f:
4f:0c:8b:40:db:92:97:e0:06:1a:3a:8f:1c:b1:e6:
48:62:7a:4a:58:c2:54:b8:9f:d2:39:f8:be:97:bf:
27:b1:d7:fc:13:ec:57:c6:32:59:1c:67:e3:5e:a8:
c0:f2:c9:ec:b0:1e:d6:ed:fa:47:dc:ec:65:68:0b:
eb:5a:93:e7:70:f6:dc:e5:9c:1a:1f:3b:7b:ba:03:
f1:e1:8e:b4:90:59:5c:bd:1b:50:87:ce:8d:55:d3:
7f:c2:e9:11:bb:62:8d:fa:d4:e0:40:33:00:c8:04:
46:5b:1a:41:0f:d7:0b:61:c6:aa:00:6b:61:fe:8b:
64:75:42:55:97:af:73:2e:d7:2e:71:98:07:d4:54:
bc:8b:54:09:aa:7a:cd:47:20:57:05:88:aa:f1:d2:
64:59:08:d0:03:76:c9:83:87:8c:6e:ee:1a:76:71:
57:e2:14:28:11:ab:64:a9:84:ba:e9:fc:2a:e1:ca:
33:e0:02:2b:3c:93:aa:e6:ff:bb:d1:8e:c2:37:3b:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:D0:49:20:2C:00:22:75:78:38:37:9E:05:8B:BA:54:3F:06:8D
X509v3 Authority Key Identifier:
keyid:E5:95:85:F7:4A:EA:C6:29:7E:E5:EA:66:62:66:55:ED:1F:DE:8F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZWF90rqxil-5epmYmZV7R_ej-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:71:34:6b:72:57:83:27:68:4d:65:7b:8c:1d:91:b3:60:ae:
90:d8:9b:16:ec:5d:6b:e6:7e:7a:c3:4e:0c:d0:97:73:c0:91:
50:32:63:f7:a0:46:55:37:d1:6b:6d:f7:c8:3f:10:af:f9:6b:
51:31:71:6f:ea:70:63:cf:c8:7c:b9:ce:71:ae:cf:c6:b1:38:
cf:38:e6:e5:29:7d:b7:44:8e:ff:e1:9a:93:50:13:e6:23:04:
17:f4:1f:fa:26:bf:60:5a:c4:11:36:47:bf:1b:5a:ac:15:d3:
74:2b:9e:86:2f:2a:6f:bc:c6:af:03:7b:d7:03:be:ab:72:17:
ee:fa:4f:af:3b:2d:68:19:ac:f9:c3:a7:ad:a1:a5:87:83:bc:
e9:43:c7:1d:b7:d4:e7:79:ce:a8:e6:de:1a:7d:da:36:22:e1:
36:63:dc:cc:2b:97:d2:2d:73:7c:dc:f2:69:fc:8a:1f:9e:54:
c4:40:d9:bc:10:ec:88:d7:f2:bb:fd:85:ba:1f:d8:84:11:bd:
bf:8b:f6:43:4c:9d:ad:bd:72:8e:de:ee:79:4d:03:76:40:86:
93:0f:e5:82:86:65:24:5c:0d:34:86:ba:9a:85:93:1b:85:6d:
ed:90:65:5b:8d:16:f8:6e:3c:57:01:5b:68:de:bd:99:d1:3b:
36:af:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:00 2026 by rpki-client