Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: YQKVnF7OXmDt+oKgzj0NunSzHPyGD1LhQPZFpxBc3x0=
Subject key identifier: 6E:97:C5:8A:24:F0:B3:A5:85:4F:A6:41:51:AE:6E:C3:E6:B7:EA:00
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019D3865C338F861C443ECC08B60749C7ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 093C
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: /X725pWzyvav69oqfUGncA9aBWSlSbe11mQFQUXLaWo=)
2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c3:38:f8:61:c4:43:ec:c0:8b:60:74:9c:7e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=6e97c58a24f0b3a5854fa64151ae6ec3e6b7ea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:dd:18:88:40:8d:41:ef:fe:18:c3:c8:90:
ab:7b:9e:8e:fc:c4:bf:5e:aa:d7:b0:0f:67:cd:fd:
35:0b:c2:7c:fd:31:51:dd:4e:59:de:36:16:db:6e:
19:9e:1f:c4:e9:f9:85:82:79:ea:29:fb:db:9a:88:
33:db:c9:e3:03:5c:f4:e8:60:cd:71:92:29:ce:51:
37:84:fc:15:6d:e7:7f:35:9f:45:9d:e0:c9:b5:f3:
c6:bd:ae:da:8d:3c:a9:c8:3f:a1:e4:ab:5f:a2:ac:
8a:a5:b4:da:b8:52:e7:07:ff:bc:97:bf:a9:e3:89:
53:2f:5c:3c:b2:df:e2:50:77:7b:45:91:72:22:23:
1c:87:51:b5:d6:9f:85:23:f5:86:56:05:91:5c:77:
4c:17:d1:06:cb:fb:9c:4b:9e:73:45:85:a6:42:29:
5d:8b:24:b4:14:87:ff:59:ac:7c:6f:3b:62:74:73:
06:5c:c3:f0:e6:c0:6b:bd:ee:1e:ca:42:88:45:5e:
54:84:6e:38:aa:d1:82:1e:fc:cf:08:80:51:3a:a9:
85:1b:1a:b0:6e:d5:b6:4a:0b:47:68:db:bc:93:a1:
18:68:91:56:5f:02:51:8b:92:59:a1:c1:0d:34:16:
53:57:35:f0:b6:82:7b:69:87:3e:17:49:b0:dc:b7:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:97:C5:8A:24:F0:B3:A5:85:4F:A6:41:51:AE:6E:C3:E6:B7:EA:00
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d6:64:b3:9d:a6:0e:76:75:43:13:d5:0b:15:b9:27:c5:af:
45:d5:37:50:3a:28:13:91:0b:25:f9:c7:69:f5:71:f9:83:2a:
e1:00:46:b6:71:e2:f0:ac:a7:e9:83:bd:3c:c7:78:96:82:36:
34:21:11:bf:19:f7:fd:24:9b:6a:0d:8f:35:cb:9b:fb:9d:8d:
aa:de:79:2c:2e:75:01:75:f4:6f:a2:77:87:9d:ea:5a:ae:db:
84:4b:29:38:6e:95:ea:8f:be:43:09:bd:e8:12:c4:21:d0:fb:
13:dd:fa:eb:6b:a2:2a:b8:2e:e3:5c:97:05:64:da:0a:a9:00:
43:95:db:5d:f3:d9:93:fa:80:72:6f:87:b4:98:4e:71:26:f1:
99:5a:03:11:7d:27:2d:80:e1:90:56:2d:ad:e2:65:dd:f2:d3:
97:b9:32:10:00:50:b1:9a:61:56:d6:5d:ae:66:fb:c8:57:23:
03:d8:ef:70:73:5f:ec:33:d1:37:ef:80:b9:8e:37:4c:f7:61:
23:ee:fb:e5:39:aa:96:65:9a:db:13:25:e5:96:ff:72:fb:d7:
a1:b5:45:6e:bf:f4:9a:b5:61:d5:33:ad:b7:0e:3e:a4:c1:8d:
40:84:70:ff:54:29:4f:08:4a:18:94:6d:d0:de:83:07:6f:02:
96:81:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:41 2026 by rpki-client