Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
File: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft (raw, json)
Hash identifier: ku77CxhjIk8p0/2rKuNudCxcvQHChRQxTZMrZGhxUVs=
Subject key identifier: 91:D9:85:E4:CE:68:88:00:BD:30:91:1C:A2:48:71:99:D5:2C:B2:C2
Authority key identifier: E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
Certificate issuer: /CN=e731bb83a213f966e142b40da4f32cd6419ae219
Certificate serial: 01A168A33B7638E10AC11990F616DE2B0C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
Manifest number: 0134
Signing time: Fri 23 Oct 2026 12:01:30 +0000
Manifest this update: Fri 23 Oct 2026 12:01:30 +0000
Manifest next update: Sat 24 Oct 2026 12:01:30 +0000
Files and hashes: 1: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl (hash: k7HSaLBsXrR0J+t7K4cZwdhAnhdPcTXOuQZdhwPxNcs=)
2: AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa (hash: 5mqmiz/CXkUW+cTJVY8j71HIi5cAxYNi2xnFmKTG/HY=)
3: yMvlwhzKfrY9een7T1c_eLiRjek.roa (hash: PbmjqOmGy2hPK1aLZZhguFnKLy5ZFRT3ye/VUztkdts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:a3:3b:76:38:e1:0a:c1:19:90:f6:16:de:2b:0c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e731bb83a213f966e142b40da4f32cd6419ae219
Validity
Not Before: Oct 23 12:01:30 2026 GMT
Not After : Oct 24 12:01:30 2026 GMT
Subject: CN=91d985e4ce688800bd30911ca2487199d52cb2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:ee:1a:06:a9:f9:9b:bf:02:87:5e:67:5f:
66:da:19:55:db:04:0e:6d:21:e0:52:e7:77:7e:49:
38:15:1a:a8:43:bf:dd:d3:ad:30:23:e1:7a:2d:70:
32:40:5d:c6:98:8d:74:c3:c5:ad:88:42:53:4a:13:
da:f9:47:27:85:54:f9:ae:7e:73:a3:c5:56:05:b4:
a9:be:ef:ef:d4:34:58:d0:09:36:ff:4b:70:11:34:
55:49:5b:8c:39:6e:29:38:7b:d4:6a:7e:e5:c6:da:
25:12:76:79:75:e6:4e:be:f8:e7:cd:8a:1a:1b:64:
6d:16:61:a9:4c:3b:cb:28:1f:6b:66:97:8d:48:ef:
3c:e4:54:dc:18:a4:5c:dc:11:38:6e:ea:df:68:36:
d3:75:6c:71:9d:14:d7:c4:ec:8a:f1:9b:ee:d6:d0:
b4:74:64:e9:6f:a6:3e:0b:72:f3:9b:c8:2f:d1:82:
34:f2:b8:9a:94:16:42:e7:94:f8:d6:a9:5f:76:b1:
8d:56:7e:c5:ff:3d:f7:2b:82:7e:70:99:12:51:1a:
84:a6:cb:1b:9d:d9:1b:14:dd:f0:66:65:69:af:ea:
80:11:d9:47:af:bd:56:ee:48:69:a8:57:56:6d:b2:
a4:b8:36:7d:6f:b5:8e:24:6c:6c:9e:16:64:f6:23:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:85:E4:CE:68:88:00:BD:30:91:1C:A2:48:71:99:D5:2C:B2:C2
X509v3 Authority Key Identifier:
keyid:E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3a:51:2d:b4:52:95:05:f9:23:95:32:64:c6:cd:44:2b:2f:
73:61:08:2a:2a:74:eb:ab:43:f6:8a:ee:89:46:c5:ee:6b:e0:
93:7b:81:94:43:00:2f:f5:08:49:12:a9:5d:78:c9:df:7f:61:
a4:98:95:4f:14:6c:12:8e:b5:90:f0:5b:11:f6:1d:8d:6b:72:
c1:13:63:05:99:62:95:00:13:b2:35:70:f6:58:ba:66:bf:b6:
76:43:58:7f:2f:41:cd:59:48:aa:f6:bc:a7:26:b5:a0:fd:0b:
3b:ff:dd:db:02:27:f0:5c:18:45:c4:20:67:7f:c3:1d:fa:5d:
69:3a:a2:ff:69:e2:99:8b:f0:33:e6:79:46:f4:ef:85:67:36:
d0:4a:ae:c2:6f:44:d7:76:e1:f7:8a:51:b2:31:bd:a1:3d:0a:
62:40:45:b6:aa:e4:24:3e:21:b7:8a:a7:2c:fc:ee:db:28:5b:
d3:ae:c1:38:a0:7a:f9:8d:3a:c7:d1:e6:32:9f:76:74:3c:bd:
93:c3:9c:2b:12:ba:a0:21:21:c0:57:08:43:09:95:cf:fa:7f:
8c:a4:5b:b6:b4:5d:18:0a:9b:a1:5f:e0:6c:53:78:42:5a:31:
a2:67:27:e6:35:d2:a3:4e:4b:37:78:47:2b:b7:7c:e0:e8:3b:
d2:3a:87:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:39:08 2026 by rpki-client