Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
File: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft (raw, json)
Hash identifier: prOnA5AMWPZt/2Gs/C4SbMg0+ikHJG5wPIgMjUhUAQs=
Subject key identifier: 3F:CF:68:83:B0:51:6B:8F:6C:34:ED:25:46:53:75:99:54:6B:E2:56
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Certificate issuer: /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial: 01A0D5A6873A52C8AF3366E2C762DD43342D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
Manifest number: 10F3
Signing time: Thu 24 Sep 2026 23:00:55 +0000
Manifest this update: Thu 24 Sep 2026 23:00:55 +0000
Manifest next update: Fri 25 Sep 2026 23:00:55 +0000
Files and hashes: 1: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl (hash: QaLGG7o/uoFXOusXMHEUty+KRy++d1KNhJ89RSE6yWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:87:3a:52:c8:af:33:66:e2:c7:62:dd:43:34:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Validity
Not Before: Sep 24 23:00:55 2026 GMT
Not After : Sep 25 23:00:55 2026 GMT
Subject: CN=3fcf6883b0516b8f6c34ed2546537599546be256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:22:ee:6f:6d:9d:a7:32:1b:cd:b2:4e:31:
5d:b4:d1:1e:b9:82:62:e2:d9:37:84:d8:06:91:52:
21:df:7d:3f:f4:42:9b:fe:0b:40:33:b5:89:ad:a5:
c3:e4:f8:16:d0:5c:cd:49:44:0d:72:a9:59:08:ed:
6e:af:ca:d0:02:42:9c:ff:d1:c4:24:09:bb:9e:e8:
36:7c:a7:51:e9:2f:f5:f2:69:09:67:8f:a1:b4:d4:
3c:53:29:6b:89:d8:8a:07:12:5b:37:2a:d7:65:82:
7f:81:b6:40:f4:67:02:91:91:5d:3d:8d:ba:03:28:
cf:15:ab:fe:8e:d5:d5:7a:6e:75:b1:d8:90:45:2b:
fb:0d:99:f0:05:7e:9c:04:23:e0:0b:d4:fb:6e:29:
7c:fa:88:87:d5:34:9f:74:3e:6d:ff:41:f1:f4:21:
7f:d0:d3:b9:94:7a:fb:b4:5a:23:ed:da:4f:f1:8c:
9a:53:5e:10:76:d7:87:e2:b6:49:d8:ab:30:6e:b8:
b2:1e:0e:11:0e:0b:ff:25:d9:4a:e0:61:80:07:b6:
d7:23:83:ea:60:4d:28:6c:40:c4:7d:93:8f:03:a4:
4b:b1:ab:4f:b9:df:e1:7d:b5:3f:91:6e:8e:cb:c3:
6a:82:bc:21:29:44:f9:81:bd:fb:a4:89:57:25:f6:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:68:83:B0:51:6B:8F:6C:34:ED:25:46:53:75:99:54:6B:E2:56
X509v3 Authority Key Identifier:
keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:80:bd:5d:3c:54:fd:1d:33:54:1d:da:36:05:bb:ac:d9:1b:
d3:64:24:68:53:ce:d4:73:ba:fb:7b:17:e0:46:3f:c1:86:88:
b5:31:a3:de:5c:3a:36:b9:c3:2b:2b:1e:18:2c:31:62:29:96:
1b:d4:21:80:30:60:73:8e:c5:b8:1e:92:38:c8:ed:80:b8:2d:
51:b0:05:b0:32:0b:2e:f2:97:51:97:55:e4:d8:1a:d1:4d:4f:
fa:b7:41:65:5b:e0:8c:5d:94:22:4b:48:1f:37:18:b0:4a:95:
9f:44:30:06:0e:75:9b:2d:4e:2b:5a:75:25:00:1f:81:ea:ba:
8e:7f:eb:9a:4c:68:d3:77:3d:89:9b:72:0e:2d:09:47:65:cf:
c4:e7:dd:49:54:ea:07:05:cc:d8:91:5e:f1:7c:b6:0c:7f:9e:
f3:9b:00:06:c4:da:48:97:b7:30:16:d0:2f:91:a1:c0:a2:c9:
bc:97:95:09:65:71:88:10:c1:09:75:32:cd:44:9d:ba:0d:ff:
c0:8c:0e:09:e3:09:12:87:41:45:39:ae:a2:ea:65:0b:74:5e:
50:c3:16:86:ab:fd:df:74:c3:41:22:10:59:65:fc:49:85:c3:
49:52:67:f7:70:f3:48:28:65:87:43:a8:5c:ae:88:b9:ff:fa:
81:ab:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:22:51 2026 by rpki-client