Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: QAgzLu1BiQ8OReFtFYNF0kYuh/Uj9oNtYJDwgHrp72Q=
Subject key identifier: F0:75:06:F4:0F:60:4E:28:51:DD:E0:5A:4B:0F:44:E0:CD:80:48:29
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 01A0D2DE17D8D110A3E1BF78C8D7CCFABB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 10:02:45 +0000
Manifest this update: Thu 24 Sep 2026 10:02:45 +0000
Manifest next update: Fri 25 Sep 2026 10:02:45 +0000
Files and hashes: 1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: IsbcCMjIB1yX+9GrX4fCMbI95o/FsRRyV9HiqLKdklE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:17:d8:d1:10:a3:e1:bf:78:c8:d7:cc:fa:bb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Sep 24 10:02:45 2026 GMT
Not After : Sep 25 10:02:45 2026 GMT
Subject: CN=f07506f40f604e2851dde05a4b0f44e0cd804829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:e8:ba:86:4f:fe:22:41:34:55:22:5b:8b:
60:a8:3a:78:9a:71:e5:7f:1c:76:9e:e6:84:4c:aa:
ee:05:bf:bb:83:c9:02:41:88:b6:bb:e7:29:07:34:
a5:82:18:63:f0:2c:58:fd:4a:6e:80:4a:b9:ee:55:
58:d0:fe:e5:b7:24:cc:02:f0:46:cd:c6:8d:5e:ed:
b4:40:13:dd:6b:db:6d:62:18:1f:43:51:04:96:58:
b0:a7:ea:1a:92:b1:6b:ca:2b:13:73:17:b2:c9:ed:
ac:88:19:bd:04:b4:7f:9e:86:b9:8e:19:12:7e:2f:
a8:d9:98:48:46:a3:0e:e5:e3:70:5c:dd:f0:f5:7f:
13:dd:c4:99:ae:c1:3e:5f:e0:1c:05:22:21:14:40:
b1:93:a6:5a:d2:18:7f:e3:2b:93:82:ca:09:1c:0a:
11:bb:dd:d9:e4:c1:ea:59:8f:0f:f3:c4:a0:8b:68:
e6:fa:24:df:ee:fe:a9:b5:a5:16:c0:9e:d2:ec:ba:
e4:79:e7:29:72:76:e7:d7:6c:ce:ca:29:66:c9:d3:
71:53:e3:30:58:ae:6b:7f:a9:74:6a:61:3e:d8:0f:
7e:2d:11:a0:b4:c7:89:d7:79:2b:df:95:46:5e:92:
b2:50:f2:fe:84:a4:e7:8e:41:a4:4e:15:ff:2c:9d:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:75:06:F4:0F:60:4E:28:51:DD:E0:5A:4B:0F:44:E0:CD:80:48:29
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8a:1b:63:92:f7:85:c2:e3:3a:b0:82:be:50:0e:34:e7:73:
35:64:de:39:e9:6a:91:99:aa:61:f5:56:80:cd:ae:c1:0d:55:
b3:61:4e:02:a0:62:4f:c3:8d:25:a2:e3:24:69:80:22:20:43:
c2:f5:3e:64:7d:bf:d5:3a:7b:85:ce:b1:81:c0:3c:f5:40:4a:
a5:0f:03:a6:db:5a:80:ce:f6:5d:77:0e:0c:3f:1c:6e:98:64:
1e:90:b2:97:08:b3:cf:e6:c3:32:0b:52:f6:49:c7:d6:9a:f6:
27:48:81:0e:e9:39:78:5f:22:3e:68:6c:59:f1:b3:8d:b3:74:
ff:66:23:e4:34:1a:da:d8:85:2f:9c:2f:54:7c:c3:a6:14:f6:
4c:9a:f6:fe:09:67:4f:5a:ee:0e:8f:55:dd:20:44:30:d7:6d:
58:e1:5a:f2:ca:58:d8:9b:2d:1a:08:aa:2d:ad:66:36:51:2d:
07:ad:cd:a5:f2:f6:63:19:83:c7:d8:ec:65:34:55:e4:fe:21:
b4:f5:75:07:d2:e4:ab:3e:66:02:31:54:81:34:03:04:48:d7:
57:bd:b5:a7:dd:38:63:a1:f2:2b:3c:45:28:f3:35:a0:0d:bf:
f2:ee:2f:64:5a:1f:20:74:41:43:0c:10:ce:92:32:63:0a:55:
b9:55:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:23:37 2026 by rpki-client