Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: +X1LCiz0i1o+ureDGSvP+tnUpCqa0tCDPDV+6xjcEtU=
Subject key identifier: FB:AA:00:AA:81:0C:BD:FB:63:78:A7:5B:39:F0:8F:FC:73:5C:42:15
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 01A13D1361E3B0FE8C38859CBFEAF5382F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 01:00:42 +0000
Manifest this update: Thu 15 Oct 2026 01:00:42 +0000
Manifest next update: Fri 16 Oct 2026 01:00:42 +0000
Files and hashes: 1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: 2f+FvrYXAncxcpImilSyKyD8zcduWDqIz4hJRAK97Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:61:e3:b0:fe:8c:38:85:9c:bf:ea:f5:38:2f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Oct 15 01:00:42 2026 GMT
Not After : Oct 16 01:00:42 2026 GMT
Subject: CN=fbaa00aa810cbdfb6378a75b39f08ffc735c4215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:1a:11:0e:65:d0:3b:eb:5b:e3:2e:84:df:
db:a4:17:ee:49:22:a5:d6:5f:c3:f2:7d:f6:7d:50:
a7:61:6b:f5:32:53:23:f3:21:ac:4c:1a:9d:5b:45:
7a:04:25:3e:56:af:bd:f4:f9:22:fb:6b:bc:3f:4e:
7c:57:b2:e1:34:d9:ec:7d:74:cc:09:ef:df:84:12:
a1:db:55:cd:ad:ed:b8:81:61:3b:e3:26:cb:71:d8:
97:c7:a0:04:0d:ce:e0:cb:cc:42:3a:db:2e:45:32:
ea:85:50:e2:45:e1:51:7f:8a:48:c4:9b:98:da:17:
fb:80:28:c3:68:ad:57:08:35:f9:0c:4b:2e:c8:89:
e3:7a:33:ae:a7:bc:fc:33:76:fb:da:20:67:c8:65:
e0:76:b9:82:14:de:c5:67:ab:48:09:0c:71:72:07:
f0:46:cc:19:75:ae:4f:97:0d:d7:ad:f5:b6:14:33:
9a:94:6c:f4:0e:11:89:a6:9b:49:7e:ff:53:4c:18:
fd:c2:ae:f6:82:d1:d1:1c:05:07:b8:cc:1d:f6:f1:
1a:36:e7:61:01:79:c9:46:fd:14:75:a8:28:35:17:
a3:f9:89:ba:e2:48:a6:86:ca:ef:7b:59:c4:f9:89:
60:a9:82:90:e3:2f:1c:4f:32:b3:b6:cb:4d:f5:ad:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AA:00:AA:81:0C:BD:FB:63:78:A7:5B:39:F0:8F:FC:73:5C:42:15
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d5:53:ad:12:1c:2a:b3:08:ed:7c:e4:a1:c3:3e:a6:d5:db:
2d:3c:41:f9:57:4e:aa:db:fa:a1:61:e7:30:9d:89:48:3b:55:
ff:f9:5a:11:a5:11:a8:8c:68:96:52:01:54:bc:18:a8:7d:79:
6e:c7:03:b2:8b:f9:57:c9:cf:3b:4a:94:be:c7:7f:61:87:f3:
97:5a:60:9e:a4:17:6c:f0:55:65:e0:13:e0:60:77:c6:cc:9c:
ce:2d:1d:fc:0f:fd:1e:5d:65:0a:20:36:d1:0d:fc:ee:29:f3:
a4:d7:5c:4b:8a:78:6d:c5:c5:97:67:5f:98:b4:ed:50:9e:d0:
1f:91:98:a7:a8:ca:52:91:70:42:05:58:b5:82:85:33:dc:ed:
4d:d1:77:62:79:c8:21:f1:cc:ae:41:ab:f2:59:9f:50:2f:e6:
2a:50:ad:e3:c9:8f:14:bc:22:32:98:8f:9a:2e:72:b9:a6:3f:
52:9d:4a:5f:1a:d9:18:27:0c:50:db:52:52:bf:8b:ea:f4:9b:
c6:ca:f5:61:21:df:e5:dc:ae:35:98:d1:8f:4a:e3:10:09:4e:
7b:5d:ca:51:8a:11:a0:1b:0d:a0:60:54:6b:af:b7:2b:e3:e0:
9e:0f:37:c0:9d:83:1a:84:be:b9:83:8b:1c:05:40:2e:72:cd:
e5:f4:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:27 2026 by rpki-client