
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: O/a+DeQ9hUlvpntHZsq59w/nSHHH3zJccYSSOeZRxwI=
Subject key identifier: 47:F0:89:01:29:94:FA:64:34:A6:43:78:2F:CD:10:24:5D:4E:6A:09
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 01A0D07F9B116F02A24C33E35C83FAA9CBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 070F
Signing time: Wed 23 Sep 2026 23:00:18 +0000
Manifest this update: Wed 23 Sep 2026 23:00:18 +0000
Manifest next update: Thu 24 Sep 2026 23:00:18 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: CLIuogczz9zSVlu3fFlqhEVe2HsETSAU/9WNK7JcC+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:9b:11:6f:02:a2:4c:33:e3:5c:83:fa:a9:cb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Sep 23 23:00:18 2026 GMT
Not After : Sep 24 23:00:18 2026 GMT
Subject: CN=47f089012994fa6434a643782fcd10245d4e6a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:23:ac:f4:f7:32:aa:73:c5:41:5c:96:ca:
5b:c0:03:3a:48:c9:92:4c:99:55:5e:03:7b:28:8c:
33:6d:1f:ae:9f:11:43:e9:b3:dd:c7:7d:ed:81:8f:
c2:c2:9e:69:ac:a8:fe:d0:28:b9:86:32:f4:ef:68:
a1:a7:9b:f2:79:8b:28:bc:72:e8:9c:94:8f:80:d7:
76:26:05:93:1b:04:92:01:2e:b3:a0:78:53:d6:0c:
95:09:38:82:c2:54:db:0f:ab:ee:2a:09:71:62:98:
6e:46:cd:db:d0:e0:0b:7d:0b:20:3e:06:1b:05:09:
0a:2e:35:c5:8b:26:2a:22:ab:da:9a:f0:bd:d2:b2:
70:09:3a:6b:52:bd:a2:b7:11:eb:65:bc:4f:8e:c6:
cd:36:9b:92:1f:0b:7f:f5:04:f6:33:36:e3:ac:0b:
7b:da:11:46:82:f4:a5:8d:cb:54:50:8a:6d:6c:67:
2f:6d:8d:37:cc:dd:04:2a:b2:aa:3b:3e:49:03:1f:
6f:93:91:70:6d:ce:64:f1:79:f2:7b:a9:e0:d3:30:
10:ae:17:56:cc:53:b8:bf:20:9f:20:2f:3c:75:01:
ca:3e:fc:c5:04:9d:7a:f1:55:6c:bd:04:b4:99:6c:
83:ad:f7:04:1d:42:fb:c7:5f:8e:7c:cf:d7:f1:a6:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F0:89:01:29:94:FA:64:34:A6:43:78:2F:CD:10:24:5D:4E:6A:09
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bd:ea:39:e2:70:67:8b:ca:a4:21:8e:24:69:eb:b3:76:18:
bc:7e:b8:80:a5:c1:23:4b:2e:39:33:0c:bc:d1:91:54:40:6a:
4a:49:1a:1c:5d:19:a1:19:09:30:2d:8c:1c:fa:d4:ee:40:81:
16:42:7b:09:ad:57:81:18:3c:40:ac:4b:2a:9e:55:f1:41:b2:
58:91:e9:d8:d9:56:ef:fb:c8:9b:39:e1:ba:d4:3e:ac:46:ce:
c1:11:be:1e:3e:69:a0:bc:fb:f9:3a:20:67:af:e8:cd:c3:e9:
1f:9f:77:54:7f:85:a1:93:57:e3:ca:25:c8:85:ae:d2:f7:c0:
fc:d1:a3:fc:a4:4b:4a:87:23:d9:39:a2:94:7f:b9:12:56:66:
3d:a1:3c:1a:f0:fb:2d:22:32:f2:1f:06:49:4f:a4:30:fa:9d:
7d:12:07:de:8c:0b:6c:cf:aa:07:5a:ff:a1:4c:c6:e3:51:d2:
1a:76:64:ea:b0:62:64:79:92:3c:8e:68:bf:5b:81:10:18:65:
a8:5f:08:63:31:e6:23:a5:5b:e9:24:60:45:40:bb:0e:51:72:
33:3d:98:1a:ea:19:1f:b0:3e:e0:33:2d:7f:03:be:08:37:34:
e2:1d:78:28:ed:9d:7d:f0:ef:b5:ba:a0:ec:41:f7:ae:2c:69:
e2:ba:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:11:40 2026 by rpki-client