Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: gAXokgu33uTZGCWF85XilQC8sDs91pljrfvZngw/m40=
Subject key identifier: A5:ED:CF:9E:1E:1A:14:78:AC:7B:E8:EB:0C:A6:25:28:29:41:BE:66
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 01A136A37A3EB94ED8DFBDCC0AFE8854E80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 19:00:45 +0000
Manifest this update: Tue 13 Oct 2026 19:00:45 +0000
Manifest next update: Wed 14 Oct 2026 19:00:45 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: TCIEw554JyUUWfC1Q0AplJpqUP9G9kyvEyfFT9c5t80=)
2: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (hash: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:7a:3e:b9:4e:d8:df:bd:cc:0a:fe:88:54:e8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Oct 13 19:00:45 2026 GMT
Not After : Oct 14 19:00:45 2026 GMT
Subject: CN=a5edcf9e1e1a1478ac7be8eb0ca625282941be66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e9:ff:db:c0:34:22:b6:e1:74:0d:4a:b2:05:
d4:5a:27:b9:c0:0b:b9:e0:57:86:0b:c1:78:9f:25:
5e:48:e6:e4:9f:d3:cd:b6:98:c8:56:bb:08:ab:c7:
b5:5a:2c:17:48:68:54:9a:ef:4e:48:0b:65:6d:ae:
05:9e:c4:a6:4d:ee:e0:9a:36:63:aa:fe:66:f7:26:
20:2c:c4:d5:4e:bd:ce:79:24:4d:71:f7:9c:53:5c:
01:37:e6:fe:e1:09:a5:b2:d0:80:d3:6a:5f:28:0a:
f4:75:e4:7e:f5:5d:c8:6a:2e:b7:55:c8:d4:47:bc:
8d:2f:d1:6d:ff:14:32:df:6c:47:9c:ba:52:c8:57:
03:9a:5b:f0:41:1c:81:09:4b:da:63:94:dd:9b:e2:
d1:23:6b:6c:40:76:f0:71:d9:56:1e:5a:75:20:40:
02:a3:18:17:fd:01:28:6e:31:8f:d7:c8:32:16:90:
4d:a8:f8:bf:ee:e5:70:61:d4:fa:97:d5:ec:14:bd:
35:ee:c2:75:04:e4:fb:98:23:6b:25:7b:d1:46:87:
4a:ee:c7:3e:a5:f6:64:cc:dc:d3:b2:71:65:fa:51:
84:66:29:8e:32:59:f0:bf:0c:da:8a:d7:32:4d:35:
98:76:1c:68:d3:fb:05:56:45:97:ac:04:b8:58:0c:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:ED:CF:9E:1E:1A:14:78:AC:7B:E8:EB:0C:A6:25:28:29:41:BE:66
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:34:a8:ad:4b:18:a2:3d:4b:96:fb:57:a4:5d:5b:d1:8d:cf:
50:e3:bb:82:e5:a7:1d:b2:b4:4f:74:6b:da:a9:ed:1a:40:fe:
67:a1:64:d1:01:31:d0:b7:80:33:b3:46:51:36:33:33:30:d4:
82:58:2e:14:33:41:57:d0:bb:d4:e6:21:82:4b:a7:89:c0:64:
37:94:91:23:b3:0f:bf:d5:14:b0:fc:56:0d:b2:0a:53:9d:cb:
dc:f2:6f:d0:eb:00:41:14:13:d2:27:bd:e4:bf:c5:b6:35:79:
fb:2a:c2:b1:9a:fc:b0:b9:74:a8:26:6d:a4:06:58:d3:02:9e:
1a:50:3b:0b:97:be:8a:78:9b:07:46:18:d8:f9:d5:ec:62:6f:
1c:3b:65:31:93:57:ac:a4:90:4f:ad:70:62:02:40:4f:1d:ef:
06:bb:92:77:b2:c9:4f:86:05:51:f0:03:44:82:e1:24:aa:e9:
53:9a:fd:4b:f3:50:12:50:bd:0b:f2:24:30:b5:f4:03:be:a2:
54:5e:3f:d6:ba:b3:59:b7:58:7c:7b:89:8d:99:3d:4d:b1:b5:
ea:d0:39:96:d0:a8:f0:8d:92:bb:c2:16:86:52:1c:d9:fe:39:
ea:73:df:d1:8d:aa:09:bd:72:2b:c6:cd:e8:e3:c1:eb:ee:ae:
b1:7f:08:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2o3o+uU7Y373MCv6IVOgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzdjOWE0NDJhOGI0YTRjOTEyZjExYmMyYjZkM2NmMTAw
YWRmNDIwHhcNMjYxMDEzMTkwMDQ1WhcNMjYxMDE0MTkwMDQ1WjAzMTEwLwYDVQQD
EyhhNWVkY2Y5ZTFlMWExNDc4YWM3YmU4ZWIwY2E2MjUyODI5NDFiZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5On/28A0IrbhdA1KsgXUWie5wAu5
4FeGC8F4nyVeSObkn9PNtpjIVrsIq8e1WiwXSGhUmu9OSAtlba4FnsSmTe7gmjZj
qv5m9yYgLMTVTr3OeSRNcfecU1wBN+b+4QmlstCA02pfKAr0deR+9V3Iai63VcjU
R7yNL9Ft/xQy32xHnLpSyFcDmlvwQRyBCUvaY5Tdm+LRI2tsQHbwcdlWHlp1IEAC
oxgX/QEobjGP18gyFpBNqPi/7uVwYdT6l9XsFL017sJ1BOT7mCNrJXvRRodK7sc+
pfZkzNzTsnFl+lGEZimOMlnwvwzaitcyTTWYdhxo0/sFVkWXrAS4WAwMTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXtz54eGhR4rHvo6wymJSgpQb5mMB8GA1UdIwQY
MBaAFOc3yaRCqLSkyRLxG8K2088QCt9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTIt
MzFmNjAzNzNhMDkyLzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTItMzFmNjAzNzNhMDky
LzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijSorUsY
oj1LlvtXpF1b0Y3PUOO7guWnHbK0T3Rr2qntGkD+Z6Fk0QEx0LeAM7NGUTYzMzDU
glguFDNBV9C71OYhgkunicBkN5SRI7MPv9UUsPxWDbIKU53L3PJv0OsAQRQT0ie9
5L/FtjV5+yrCsZr8sLl0qCZtpAZY0wKeGlA7C5e+inibB0YY2PnV7GJvHDtlMZNX
rKSQT61wYgJATx3vBruSd7LJT4YFUfADRILhJKrpU5r9S/NQElC9C/IkMLX0A76i
VF4/1rqzWbdYfHuJjZk9TbG16tA5ltCo8I2Su8IWhlIc2f456nPf0Y2qCb1yK8bN
6OPB6+6usX8IJA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 00:46:50 2026 by rpki-client