Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: kHQNdjea2wTiHK55Cmc2LbGPhjh/0kc8S2dord7IzIg=
Subject key identifier: 64:DD:8E:CD:21:11:22:7E:64:73:EA:D5:A2:CE:BE:F0:42:B6:88:74
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 019E30E0DD07A31FFD05CC142C49080C735E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 190C
Signing time: Sat 16 May 2026 13:01:43 +0000
Manifest this update: Sat 16 May 2026 13:01:43 +0000
Manifest next update: Sun 17 May 2026 13:01:43 +0000
Files and hashes: 1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: 1qmpacIDIS+NOaFAOuef4+Q2XMnFNNVuccRrrOJV3NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:dd:07:a3:1f:fd:05:cc:14:2c:49:08:0c:73:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: May 16 13:01:43 2026 GMT
Not After : May 17 13:01:43 2026 GMT
Subject: CN=64dd8ecd2111227e6473ead5a2cebef042b68874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:f4:2a:1c:a0:1a:1f:ab:c5:e4:02:0f:64:
64:22:21:9c:b4:b0:4c:43:12:9c:02:83:cf:e5:19:
51:74:aa:0c:e2:b2:d7:e6:76:e4:ce:ef:c7:21:41:
80:be:99:8a:d2:72:c1:f5:78:40:92:6f:1a:f3:0e:
e8:c3:b7:e8:73:43:54:d3:0f:04:34:b0:b5:94:29:
2d:9a:5d:17:f1:69:e9:f8:26:98:3d:5f:7a:b3:a1:
a3:16:3b:63:be:86:0e:25:08:f7:13:0e:2f:3b:a5:
87:2c:eb:d7:a5:92:dd:51:53:e4:a2:7f:88:56:51:
42:68:9d:0f:30:04:ba:9c:7e:a6:ae:64:51:0e:5a:
29:a2:73:c9:4c:c1:70:ba:4e:33:e4:37:bf:51:68:
43:03:8b:de:1c:05:ab:d1:c6:14:20:a1:55:e3:61:
0c:07:06:80:a1:ef:ef:c7:07:3b:73:ce:c0:d9:f7:
33:5c:e3:e4:5b:9c:09:5e:9a:7e:db:ce:4d:4a:dd:
ef:95:ac:5f:70:be:ac:6e:d7:63:d1:9e:f4:a9:9c:
bc:ab:87:37:01:38:c9:2e:8f:05:12:48:a3:ba:cf:
cb:31:95:60:b6:88:3a:16:3d:89:a1:ab:87:ab:52:
e4:19:3d:a6:32:f9:42:cf:79:aa:80:48:46:c1:d2:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DD:8E:CD:21:11:22:7E:64:73:EA:D5:A2:CE:BE:F0:42:B6:88:74
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b3:61:eb:17:10:c0:dd:f4:ce:0e:a5:81:9d:c3:9a:51:14:
d4:79:fa:55:a8:53:34:a1:81:16:05:34:21:4e:ef:ab:97:76:
fd:1f:a7:10:25:f3:a5:33:1c:c6:0c:f4:45:1c:07:f5:08:78:
38:fd:14:2f:dd:12:1a:ff:97:dc:41:5e:a6:77:75:59:f9:ed:
7f:72:87:8e:f8:2d:74:6a:b5:b6:72:1d:0f:22:fd:94:39:09:
22:87:a7:1e:e4:89:be:6f:97:af:58:4e:45:df:5c:ba:06:63:
74:eb:46:ee:eb:6c:2d:43:43:6b:da:f4:2c:93:79:f3:04:44:
39:96:c2:13:18:de:ba:c7:9f:ae:f6:46:44:e7:18:29:26:b7:
17:1b:15:e8:81:fd:75:c8:84:55:f8:f6:c3:88:ca:10:59:e0:
e5:5f:e0:c0:ff:c1:00:ee:de:d1:82:9e:9a:1a:14:ea:6d:1e:
44:97:f0:11:3c:00:15:dd:c4:b3:07:ac:8e:69:bc:2c:3d:3f:
5b:bd:a0:c8:1f:48:7e:1a:91:5c:d3:7e:79:f1:a5:3a:8c:12:
da:97:3d:e6:d4:ce:c3:61:b2:1c:59:9c:df:e9:f1:10:2d:36:
dc:97:92:cc:ff:83:c4:cf:df:80:95:1f:66:00:2a:02:92:4e:
5a:98:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:10 2026 by rpki-client