Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: 7RpFFT1jX80UbQlKZtxW16k3ruhJdfhMz8q/gDCyjJM=
Subject key identifier: 27:01:FF:72:A4:61:DE:F3:6F:40:D6:F1:32:83:5B:7D:10:CA:6A:30
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 019D39AE64935CB8AFE96CBE3B7E195710E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 13:00:23 +0000
Manifest this update: Sun 29 Mar 2026 13:00:23 +0000
Manifest next update: Mon 30 Mar 2026 13:00:23 +0000
Files and hashes: 1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: fSRAu5vX/lbdUktMIHD/k9PEZgsIFAKm59h1C+V7b04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:64:93:5c:b8:af:e9:6c:be:3b:7e:19:57:10:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Mar 29 13:00:23 2026 GMT
Not After : Mar 30 13:00:23 2026 GMT
Subject: CN=2701ff72a461def36f40d6f132835b7d10ca6a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:06:78:22:64:88:c7:c1:12:c8:80:ee:27:
43:87:f4:8c:92:99:8b:45:dd:54:e2:bc:ae:82:11:
39:da:0e:4c:fc:99:2b:20:45:7a:31:d4:dd:70:38:
f9:fe:2d:3f:a0:9b:a6:88:bd:05:fb:e6:61:bf:9c:
62:59:ce:eb:02:36:97:e5:70:b9:5b:f7:59:5b:d0:
15:e2:82:f2:a7:3f:b8:1f:42:f9:06:a7:24:6b:ea:
20:1c:a1:d9:16:75:78:3c:b1:e1:ef:bc:56:66:62:
4e:34:b2:12:4b:69:7f:ca:ef:d1:3f:f6:e5:f9:dd:
28:c9:68:48:2b:2d:c1:10:fb:73:ac:21:2c:d4:ae:
c4:a9:06:32:18:df:8a:71:c0:d4:e5:03:34:b3:92:
e1:06:a7:87:44:1d:8e:93:79:47:f9:58:cf:3e:5a:
10:47:1c:0c:7c:5d:14:76:bc:3d:55:80:33:6f:55:
55:99:b7:50:ff:40:47:18:0b:78:d4:7e:6e:92:e9:
b8:ad:87:84:8f:26:75:c3:f9:2b:97:b0:7d:07:50:
80:10:9f:2f:7a:ae:83:f5:1b:e6:8a:44:a7:d3:d5:
7c:16:92:44:6a:d8:a6:83:19:a7:34:94:7e:2b:ec:
1b:1b:de:2a:cf:19:ed:65:72:35:0d:1c:ea:f6:63:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:FF:72:A4:61:DE:F3:6F:40:D6:F1:32:83:5B:7D:10:CA:6A:30
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4f:11:aa:52:3d:c9:33:90:e0:d2:6d:41:d3:8f:0d:af:91:
d3:42:c4:84:2a:42:67:88:73:de:a5:93:0b:6e:d6:a1:b7:91:
19:69:e7:75:6d:ee:f1:28:80:a8:e5:8d:51:06:89:49:e5:dc:
dd:3d:3c:9e:b4:e4:3e:78:98:00:2a:6c:8c:c0:d2:97:b2:6d:
ef:a7:76:ed:38:0c:c8:de:ff:f6:ce:ec:52:68:ff:20:46:d4:
94:46:1d:1d:91:35:ec:64:a6:51:ac:fa:f5:43:da:33:36:23:
1b:91:87:78:dd:a1:68:f1:ac:52:21:64:ad:01:ef:5a:66:f4:
5c:81:d3:62:95:b8:4b:83:12:52:08:54:83:c3:6f:3b:83:2a:
62:bb:fb:f1:ef:03:b9:70:91:74:31:68:1c:bf:e3:23:cb:91:
96:b2:5f:09:6b:ad:af:9e:14:9b:1c:58:83:2d:5d:11:e9:c4:
d0:0b:52:b6:03:dd:78:06:b9:21:d7:60:6e:3b:17:01:0e:46:
ab:43:9f:a1:b0:4e:35:3a:28:c3:70:73:56:86:4d:5b:67:b1:
0a:b4:99:31:44:f4:a7:b1:87:3c:71:e9:b4:01:cc:b8:5e:99:
4e:d8:71:98:38:81:a2:c7:cb:b1:6c:a6:65:36:44:72:c9:34:
cd:65:d3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:15 2026 by rpki-client