Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: +WkNHxPW2/TlrMq7JEx16zAj2z8AF4iiDRBdwrPDfdI=
Subject key identifier: D0:20:98:0C:E9:38:36:ED:3E:BC:01:6A:32:0B:E8:82:A5:1D:2E:F4
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 01A0D0ED7C194C21EF11B584B7CD9EB6A340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1A68
Signing time: Thu 24 Sep 2026 01:00:19 +0000
Manifest this update: Thu 24 Sep 2026 01:00:19 +0000
Manifest next update: Fri 25 Sep 2026 01:00:19 +0000
Files and hashes: 1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: svtv1ir5h0D8s8k7G5IYC+96aUDk5laz74ESH5rJZJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:7c:19:4c:21:ef:11:b5:84:b7:cd:9e:b6:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Sep 24 01:00:19 2026 GMT
Not After : Sep 25 01:00:19 2026 GMT
Subject: CN=d020980ce93836ed3ebc016a320be882a51d2ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:e2:cc:ae:43:e6:50:65:b1:06:eb:8b:5d:
9a:a2:3a:76:14:a6:ae:5c:e3:f0:2c:ff:9c:c4:69:
ba:fa:95:88:a0:2c:18:23:2c:3d:85:16:81:59:01:
22:60:3a:49:8d:d3:24:44:29:ad:e9:c2:ce:e7:55:
b4:ce:36:67:16:ab:48:04:91:9a:71:d5:df:96:93:
3c:44:d4:3f:19:a3:41:03:92:17:c6:50:b4:9e:67:
f5:1d:27:18:61:77:ec:e5:49:f9:af:66:b5:41:d6:
df:b7:d4:a6:44:60:9f:1f:3e:bb:a8:7b:4c:ed:00:
9e:4e:53:df:09:11:b0:8d:ce:66:e5:86:db:58:61:
e2:13:67:7a:dc:3c:24:d5:c5:f0:93:01:c5:b2:b9:
72:89:2d:19:ea:04:fe:35:9b:42:ea:f2:5c:a3:f2:
b2:bf:0f:a2:86:e8:dd:3f:da:55:a1:86:14:cf:93:
c1:35:cb:ab:56:f3:ef:bf:e1:1c:b9:82:87:ce:c6:
f2:e5:e0:6b:4f:64:b8:05:65:01:f2:af:86:1e:4a:
24:d7:9e:8e:88:ce:5c:25:cb:9e:14:52:1c:18:3d:
51:56:82:66:dd:a4:79:9f:e6:62:6a:18:53:84:e1:
a4:1d:86:00:88:aa:53:68:02:d0:58:07:1d:b8:df:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:98:0C:E9:38:36:ED:3E:BC:01:6A:32:0B:E8:82:A5:1D:2E:F4
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1f:2c:22:c4:98:b3:32:4b:e1:ac:ed:38:7f:eb:09:b9:c7:
cf:07:90:19:fa:47:58:52:de:b7:7d:7b:71:94:e0:70:90:ce:
80:f0:5d:7e:ee:fe:f1:b5:02:78:d6:2f:63:78:1c:77:3c:63:
3c:b5:47:5a:73:04:37:d6:c4:c6:50:0a:0f:29:39:03:78:e2:
10:0e:99:c0:eb:04:fb:f6:cf:63:80:27:3b:7f:be:df:9d:e7:
36:b9:70:dd:da:46:c6:18:15:81:9e:fa:77:d5:fa:b1:3e:3b:
72:d8:64:52:18:02:1b:6a:7e:58:c7:27:12:39:23:e4:02:bf:
d2:f3:4c:32:b5:2a:f7:1a:7d:db:63:5e:91:d7:ff:46:0c:0c:
83:be:1d:04:87:b1:14:69:ba:92:4e:28:ce:ad:e5:ab:56:34:
1f:af:47:b0:5f:a7:27:fd:2b:00:48:f1:da:9d:9f:a4:21:a3:
88:bb:c8:b4:70:3e:01:cc:a0:62:46:55:ae:a9:70:11:b2:ac:
eb:48:bb:6c:0c:ec:a6:65:84:fb:8e:2f:7a:e7:39:20:40:58:
cb:b8:34:87:9e:e8:eb:6d:81:ec:3c:6b:f4:c8:64:01:4e:23:
2a:73:ea:72:06:e2:d8:47:56:95:64:84:d9:da:2e:3e:ae:cc:
f7:c7:f5:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7XwZTCHvEbWEt82etqNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2ZlMzM1MWE1ZTYyNjRhMWY4MTI5YzEwMjUxZDllODk2
ZTgwNjIwHhcNMjYwOTI0MDEwMDE5WhcNMjYwOTI1MDEwMDE5WjAzMTEwLwYDVQQD
EyhkMDIwOTgwY2U5MzgzNmVkM2ViYzAxNmEzMjBiZTg4MmE1MWQyZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscLizK5D5lBlsQbri12aojp2FKau
XOPwLP+cxGm6+pWIoCwYIyw9hRaBWQEiYDpJjdMkRCmt6cLO51W0zjZnFqtIBJGa
cdXflpM8RNQ/GaNBA5IXxlC0nmf1HScYYXfs5Un5r2a1Qdbft9SmRGCfHz67qHtM
7QCeTlPfCRGwjc5m5YbbWGHiE2d63Dwk1cXwkwHFsrlyiS0Z6gT+NZtC6vJco/Ky
vw+ihujdP9pVoYYUz5PBNcurVvPvv+EcuYKHzsby5eBrT2S4BWUB8q+GHkok156O
iM5cJcueFFIcGD1RVoJm3aR5n+ZiahhThOGkHYYAiKpTaALQWAcduN/xGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAgmAzpODbtPrwBajIL6IKlHS70MB8GA1UdIwQY
MBaAFOc/4zUaXmJkofgSnBAlHZ6JboBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgt
MDI0YzFlZGQ2MmVjLzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgtMDI0YzFlZGQ2MmVj
LzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtB8sIsSY
szJL4aztOH/rCbnHzweQGfpHWFLet317cZTgcJDOgPBdfu7+8bUCeNYvY3gcdzxj
PLVHWnMEN9bExlAKDyk5A3jiEA6ZwOsE+/bPY4AnO3++353nNrlw3dpGxhgVgZ76
d9X6sT47cthkUhgCG2p+WMcnEjkj5AK/0vNMMrUq9xp922Nekdf/RgwMg74dBIex
FGm6kk4ozq3lq1Y0H69HsF+nJ/0rAEjx2p2fpCGjiLvItHA+AcygYkZVrqlwEbKs
60i7bAzspmWE+44veuc5IEBYy7g0h57o622B7Dxr9MhkAU4jKnPqcgbi2EdWlWSE
2douPq7M98f1Kg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:01:56 2026 by rpki-client