Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: gJ9Cu+1iHz+u8JESSoiyoHFs1dMnzbOnqkWX5iN/UDM=
Subject key identifier: CE:59:2C:EA:B0:D6:DF:29:5F:D1:28:C3:B5:A7:1D:2F:E4:63:A6:B2
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 019D284E1769870AED268C3525B6F748D191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 04:01:39 +0000
Manifest this update: Thu 26 Mar 2026 04:01:39 +0000
Manifest next update: Fri 27 Mar 2026 04:01:39 +0000
Files and hashes: 1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: a2Sgdkl+6+P4798Uurlhciq+cLefVgNooLDjhiO62mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:17:69:87:0a:ed:26:8c:35:25:b6:f7:48:d1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Mar 26 04:01:39 2026 GMT
Not After : Mar 27 04:01:39 2026 GMT
Subject: CN=ce592ceab0d6df295fd128c3b5a71d2fe463a6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:ae:19:4d:b6:1b:00:45:9b:58:1f:a0:df:
28:e0:23:be:4c:13:80:30:dc:ea:aa:00:bc:c5:3c:
df:a0:f4:83:50:35:e8:54:f1:d6:6b:13:32:b8:d8:
f0:b3:6d:ce:07:fb:41:4d:62:2e:d7:1f:72:ae:3b:
55:04:75:92:a1:3a:ec:c9:13:e4:fb:ff:db:89:a2:
6c:8b:c2:63:98:c6:61:3f:80:cf:ac:f7:dc:58:a5:
a3:68:33:8d:5b:49:00:8e:70:cf:1a:c9:6f:0d:1e:
de:72:af:85:f3:10:cc:40:91:4d:68:ae:47:ba:d4:
a8:1b:b7:f5:b5:55:4f:9c:48:5d:4e:54:18:a1:45:
38:51:a1:23:11:ca:76:75:f3:e7:23:3f:f7:ae:53:
af:bd:4a:b3:cb:84:6b:9a:7d:e9:35:07:73:02:c6:
49:84:37:09:58:34:2a:7a:29:b6:17:99:28:e8:1a:
b5:bd:cf:51:b1:39:53:6d:58:96:7d:e6:8a:6a:22:
10:69:ab:d5:ef:d5:5c:ad:a1:56:a8:34:53:83:08:
2d:96:8f:23:0e:ee:59:56:12:4c:7f:e5:7b:8a:d7:
38:c6:eb:f6:8c:5c:71:7b:f1:2d:b7:55:cd:5f:06:
0a:cf:46:cc:07:b4:9f:2c:d6:ec:ed:30:dc:d1:d3:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:2C:EA:B0:D6:DF:29:5F:D1:28:C3:B5:A7:1D:2F:E4:63:A6:B2
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a9:ad:b5:77:f9:0e:ae:22:ab:b4:d0:e4:65:5b:77:b5:be:
22:fa:fd:19:5a:f8:cf:3d:f2:ea:e0:ff:e8:2c:5c:8e:46:8e:
d7:3e:52:bd:54:a5:ec:2f:d1:29:9a:9c:a5:17:88:9c:42:7d:
cf:c2:8c:cc:39:89:7d:75:3a:ed:af:90:18:30:3b:85:6b:46:
5d:24:7c:1a:92:21:da:bd:ff:da:cd:a2:dc:69:d7:20:fb:c6:
ed:56:69:fa:c4:d9:8c:28:c8:11:be:0b:5f:1e:36:d4:97:46:
90:43:c7:74:ed:6e:96:35:89:dd:6a:d3:f1:2c:70:1e:68:67:
01:fa:a3:9b:fb:68:c3:35:da:d8:4d:30:77:02:7b:bf:e7:85:
4a:17:7a:b1:4c:d0:16:4d:0e:10:30:e7:f0:7a:64:1e:27:46:
04:3b:ea:99:19:af:dd:be:16:81:16:5b:61:b5:73:5e:15:5f:
44:b2:90:ce:cf:0d:06:9a:9f:ae:59:82:72:5c:5b:07:17:5c:
d9:ed:5e:c0:0f:18:ea:ab:6f:c4:e7:1a:da:f5:bd:7d:3a:60:
d5:24:76:9b:e9:96:53:70:00:f1:50:d5:bd:cb:f7:2c:56:9b:
b6:63:1e:a6:c4:2f:2c:a2:cb:8f:d1:f1:a6:0f:af:6f:7d:ab:
f1:02:e8:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oThdphwrtJow1Jbb3SNGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2ZlMzM1MWE1ZTYyNjRhMWY4MTI5YzEwMjUxZDllODk2
ZTgwNjIwHhcNMjYwMzI2MDQwMTM5WhcNMjYwMzI3MDQwMTM5WjAzMTEwLwYDVQQD
EyhjZTU5MmNlYWIwZDZkZjI5NWZkMTI4YzNiNWE3MWQyZmU0NjNhNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoquGU22GwBFm1gfoN8o4CO+TBOA
MNzqqgC8xTzfoPSDUDXoVPHWaxMyuNjws23OB/tBTWIu1x9yrjtVBHWSoTrsyRPk
+//biaJsi8JjmMZhP4DPrPfcWKWjaDONW0kAjnDPGslvDR7ecq+F8xDMQJFNaK5H
utSoG7f1tVVPnEhdTlQYoUU4UaEjEcp2dfPnIz/3rlOvvUqzy4Rrmn3pNQdzAsZJ
hDcJWDQqeim2F5ko6Bq1vc9RsTlTbViWfeaKaiIQaavV79VcraFWqDRTgwgtlo8j
Du5ZVhJMf+V7itc4xuv2jFxxe/Ett1XNXwYKz0bMB7SfLNbs7TDc0dOavQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5ZLOqw1t8pX9Eow7WnHS/kY6ayMB8GA1UdIwQY
MBaAFOc/4zUaXmJkofgSnBAlHZ6JboBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgt
MDI0YzFlZGQ2MmVjLzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgtMDI0YzFlZGQ2MmVj
LzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdamttXf5
Dq4iq7TQ5GVbd7W+Ivr9GVr4zz3y6uD/6CxcjkaO1z5SvVSl7C/RKZqcpReInEJ9
z8KMzDmJfXU67a+QGDA7hWtGXSR8GpIh2r3/2s2i3GnXIPvG7VZp+sTZjCjIEb4L
Xx421JdGkEPHdO1uljWJ3WrT8SxwHmhnAfqjm/towzXa2E0wdwJ7v+eFShd6sUzQ
Fk0OEDDn8HpkHidGBDvqmRmv3b4WgRZbYbVzXhVfRLKQzs8NBpqfrlmCclxbBxdc
2e1ewA8Y6qtvxOca2vW9fTpg1SR2m+mWU3AA8VDVvcv3LFabtmMepsQvLKLLj9Hx
pg+vb32r8QLo0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:35 2026 by rpki-client