Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: +hyA2+YyNPouggI8603XMUzUD9ssIhRoRSLzzXWeHqY=
Subject key identifier: 29:BE:7E:03:86:A3:1D:74:AE:E6:D1:80:BF:BB:27:7B:9B:62:D4:23
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 01A1404C1213793B7C159393E86815064B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 16:01:29 +0000
Manifest this update: Thu 15 Oct 2026 16:01:29 +0000
Manifest next update: Fri 16 Oct 2026 16:01:29 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: tHfsFOvpXnxzpW+OkTTVgjtgCPsDNEIOwTmv8Yycpus=)
2: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (hash: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:12:13:79:3b:7c:15:93:93:e8:68:15:06:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Oct 15 16:01:29 2026 GMT
Not After : Oct 16 16:01:29 2026 GMT
Subject: CN=29be7e0386a31d74aee6d180bfbb277b9b62d423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:1c:13:34:ae:8c:29:1d:2d:8a:b1:02:3e:
91:aa:9e:25:9d:53:ca:32:93:ed:c5:7e:89:7c:9a:
f7:8f:08:6e:d7:c7:4a:0e:fc:82:1a:bd:76:6b:56:
a7:4c:d2:bf:9f:bc:6f:40:7a:2d:14:64:39:cb:92:
9a:9f:07:d0:59:7d:1f:1c:d4:84:2f:9c:30:b3:92:
45:8b:e4:06:62:af:57:52:0b:1f:e7:e9:92:ed:b2:
6f:e4:87:d2:25:f2:24:05:c1:b1:3b:14:ed:fd:43:
34:e1:96:23:66:2e:c6:27:a1:9b:c6:c4:c6:c5:d4:
1c:0c:5b:cd:ff:0c:8c:79:35:3b:e5:a6:b8:a0:63:
1b:10:65:4b:f7:88:c6:2b:9c:44:b2:f7:21:56:ff:
3b:cf:ab:2e:c9:7c:19:92:39:3a:f9:97:a7:d3:d0:
b0:84:f1:10:83:85:5f:fb:85:5f:87:35:47:e4:96:
04:68:11:49:c7:cb:cb:7b:03:7d:54:71:4f:0d:ad:
a9:c2:8d:aa:58:31:0f:f2:ba:c2:a2:3c:4b:58:f0:
e2:4a:99:1d:6d:54:86:85:95:b8:58:df:39:ad:07:
9e:61:20:01:7b:4b:02:6d:14:68:b4:b1:c8:00:73:
a3:a5:ac:9a:1c:a1:58:c8:d2:1a:b9:3c:9f:dc:6f:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:7E:03:86:A3:1D:74:AE:E6:D1:80:BF:BB:27:7B:9B:62:D4:23
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3e:4c:55:40:c4:8c:0b:6f:2d:9f:33:92:5a:9d:fa:1d:c4:
d2:62:b0:a4:da:7d:6e:82:df:40:79:72:f6:65:d2:07:2e:46:
04:96:75:3c:0d:01:42:37:ea:a6:86:1f:f8:02:e5:db:e4:86:
22:aa:4c:63:df:63:9e:ee:01:61:05:05:6a:46:dc:44:3d:b9:
07:80:fe:2b:2c:9a:50:92:d7:4a:99:49:44:75:c7:e0:b6:e5:
e0:10:b4:88:a7:7e:d7:96:3a:b3:ef:cf:8e:12:4f:81:e6:7f:
3d:ef:95:44:e3:4a:d8:d3:29:4d:ac:40:ab:fc:cf:75:09:98:
77:32:5f:44:2a:fc:c1:ee:df:c2:db:6a:f3:ee:e4:6e:24:e3:
81:15:bd:a8:09:2b:8a:cd:7a:6c:69:11:bf:b6:83:94:00:aa:
6e:7f:8a:1f:9b:32:74:64:ee:db:fc:06:f5:5f:ae:74:b3:5b:
80:9d:b9:d4:d5:e8:ca:d2:fb:00:91:e6:8a:2d:df:75:c8:bd:
f7:53:07:7e:fd:60:25:72:fd:5d:85:b4:8c:0f:c0:84:6b:2b:
13:aa:d8:cc:42:2b:a5:e7:47:a0:c8:75:97:d8:aa:9c:89:1d:
5a:5c:cb:08:5f:1c:58:52:5f:1c:ff:61:12:46:1a:f9:a3:80:
2a:c0:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:25:53 2026 by rpki-client