Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File: 5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier: 7fIONb0PZvonPvgCV7vVJbZeMx5M7TsbNE4q6cN4yMw=
Subject key identifier: 70:24:37:4C:6C:6F:5C:40:0D:B5:5B:A2:64:A8:C5:69:1B:C5:48:77
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer: /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial: 01A13DEEC79DC3395EBC2B2C0D0960546A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number: 1AAE
Signing time: Thu 15 Oct 2026 05:00:21 +0000
Manifest this update: Thu 15 Oct 2026 05:00:21 +0000
Manifest next update: Fri 16 Oct 2026 05:00:21 +0000
Files and hashes: 1: 0w4XcBQywwl1teApjX6VHSPuvgg.roa (hash: /EcXOS7UzKKs89buMydMe2QfoMOWxkfJCW82u93ztaw=)
2: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: 3SgGfYodo3szV1JRhUydrNr6OtFfHO5cKOrwZtwtcvw=)
3: av_HZf6EAwlDsvNiqOK233RQvoM.roa (hash: GY5qM+O2sWQRx1EcDLewr4LGFVQxjYE9jkUci4HJmic=)
4: ullWMQMNWNs2m-qavM2ZaH0wLLY.asa (hash: Hs+EUjaBHhmBRRhyoMI5LyzKTqwRJd2HGRT6RAN80K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:c7:9d:c3:39:5e:bc:2b:2c:0d:09:60:54:6a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Validity
Not Before: Oct 15 05:00:21 2026 GMT
Not After : Oct 16 05:00:21 2026 GMT
Subject: CN=7024374c6c6f5c400db55ba264a8c5691bc54877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:dd:b6:ab:39:17:89:91:c2:66:85:69:81:
d1:61:25:88:91:47:8f:0a:59:e2:26:6c:dc:33:06:
5e:f9:b2:b5:b7:3c:6a:c2:8e:90:65:ba:cf:d6:68:
08:04:fd:4c:8a:00:85:2a:59:d5:a9:ba:b0:b1:24:
2a:3a:e4:56:60:3b:79:8e:c5:56:42:31:79:8b:d5:
f1:47:8d:03:60:88:f4:7d:7f:1a:8c:33:5d:da:19:
e3:94:d4:2d:84:13:8a:f2:8c:13:53:2b:57:dd:28:
9e:53:1a:c1:07:ca:c8:a3:0c:0a:de:b7:54:d6:26:
9f:83:d7:b4:f9:f7:32:bd:22:95:48:4e:12:9b:89:
c7:d8:d3:d9:a4:b2:75:f6:b7:9f:51:8d:cc:ee:6a:
0d:69:12:50:f7:9c:f7:3f:a6:8d:97:38:bf:6d:f9:
57:25:87:6d:51:bf:00:b2:5d:ad:37:f3:ba:43:0e:
d9:a9:f8:17:9d:bf:15:7a:32:bc:8e:b8:79:ef:1c:
41:51:dc:e6:13:23:96:df:45:48:42:be:8c:3d:93:
6c:0d:88:28:5f:c1:da:9f:5e:03:6d:b8:3e:a5:64:
31:fb:9a:60:c3:0a:e9:11:8a:15:ca:92:05:e3:2b:
75:e1:06:82:e0:67:5b:01:5e:de:92:5d:94:f3:20:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:37:4C:6C:6F:5C:40:0D:B5:5B:A2:64:A8:C5:69:1B:C5:48:77
X509v3 Authority Key Identifier:
keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fa:9e:8d:78:7d:bd:22:c3:58:b5:73:35:b8:2a:25:d7:53:
8b:55:78:fa:5a:07:bf:93:4e:62:88:cf:56:7e:6a:90:60:65:
fc:7c:51:4d:5e:29:3a:d0:68:c7:24:c2:a0:da:ad:83:fd:ef:
68:c4:45:29:17:c4:73:a8:a6:ae:d9:40:91:f9:77:fb:6f:6e:
f4:e2:8f:9b:66:6f:d2:2e:18:3f:33:4c:9f:ef:7b:53:8c:ef:
0b:53:d4:63:77:1e:89:be:9f:d2:10:63:46:ae:77:ac:bf:9f:
9e:3c:ac:7e:78:f3:f3:e2:75:cd:9f:08:38:90:c5:c9:70:2b:
a5:0d:75:d1:a2:b1:40:55:90:57:cc:1a:8a:eb:b8:51:0d:3b:
59:cc:98:30:26:1e:5a:7a:3f:de:5f:3d:92:e3:41:42:42:5a:
2c:37:fe:bb:98:c2:d4:94:7e:a7:32:ef:b5:44:cb:90:76:a5:
23:e5:c4:f4:93:b5:22:f9:98:11:12:c4:3d:2d:64:b2:e7:13:
89:fa:60:6c:37:0a:a8:87:55:23:14:76:53:7c:9f:e1:99:87:
39:fe:a3:92:d7:99:a5:1d:ba:b1:66:fe:10:fd:ef:b7:72:7c:
b5:cc:7e:66:1d:66:9d:7b:48:45:c8:7c:9b:4b:87:50:ff:33:
fd:dd:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:15 2026 by rpki-client