Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: ct6jYr6cvZd+oB0PdaTVIxEkNoijdVjrori8WD7C8w0=
Subject key identifier: 59:F3:AE:14:E9:F8:27:21:78:A9:C9:EC:56:08:A9:19:DA:5C:5A:CE
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 01A0CD479CFB78FA8B25A8ED2056694A09DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 08:00:17 +0000
Manifest this update: Wed 23 Sep 2026 08:00:17 +0000
Manifest next update: Thu 24 Sep 2026 08:00:17 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: hdbwJwpoiHeQ5OfgNMMj/nvIl287kmgH2khtGShFgIY=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:9c:fb:78:fa:8b:25:a8:ed:20:56:69:4a:09:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Sep 23 08:00:17 2026 GMT
Not After : Sep 24 08:00:17 2026 GMT
Subject: CN=59f3ae14e9f8272178a9c9ec5608a919da5c5ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:dc:de:86:9e:2c:6d:f1:ac:84:cd:16:49:
ff:c1:28:a5:b8:02:7f:16:93:63:8b:19:a5:b7:6a:
1a:db:ea:1f:91:36:0c:90:b1:e8:6c:6a:7f:a1:0b:
2d:31:44:a7:68:6e:ac:72:33:3f:4d:91:93:a0:07:
a8:fb:02:7e:d5:44:ea:c8:17:53:9f:2d:bc:37:d7:
46:22:9c:6f:cf:dd:d2:30:6a:f4:75:53:c7:22:37:
95:d6:5a:b7:cb:a2:60:78:1b:28:3f:84:df:fe:5d:
99:c4:3a:3c:d8:e9:74:79:71:12:0f:c9:0e:ac:ae:
82:25:ec:df:39:b6:20:b4:06:e6:80:28:7e:f8:b6:
8b:e3:9e:5b:5c:8c:7b:4f:cc:df:a4:3a:78:cb:c2:
05:08:f0:38:f2:f7:1c:a5:8f:3b:58:6e:11:ed:0f:
04:65:19:fb:cc:06:cb:8d:36:de:00:34:e5:61:31:
c8:4d:25:73:ab:d1:0b:73:5f:6e:56:4a:36:77:10:
b4:83:02:15:9d:c4:74:40:a8:ed:1d:51:1c:fa:96:
60:7e:58:28:26:6b:f8:86:e3:b7:f7:1b:92:f1:43:
57:6b:53:8b:1e:e2:c8:8e:9c:ee:1e:3f:5b:7d:46:
be:94:db:2d:49:8d:6d:b4:90:42:67:63:d3:21:ff:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F3:AE:14:E9:F8:27:21:78:A9:C9:EC:56:08:A9:19:DA:5C:5A:CE
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ed:6b:e9:ba:97:b6:e0:e8:f8:21:6d:e2:b9:75:fa:9b:9a:
5a:2b:96:a4:25:e5:e7:5c:53:9a:65:17:2d:68:ce:13:af:3e:
2c:ed:be:e5:f8:e7:a4:f2:94:70:45:3f:bf:05:22:d7:80:f3:
79:55:76:20:9a:ff:8d:5f:61:bd:59:f2:56:fb:16:1e:ca:a2:
f0:be:bf:31:e4:07:08:04:ff:e1:0c:d7:b5:e8:ed:54:7f:d3:
73:90:0d:fd:50:6a:d5:bf:a7:49:53:d5:f4:cf:ee:38:39:9b:
61:cb:e2:21:49:c9:b6:3a:93:0b:84:b0:f8:b3:25:33:55:29:
0b:7e:50:f2:a4:01:45:82:30:e6:dc:59:bb:b0:84:64:d2:c5:
19:3f:45:90:66:a7:da:3a:97:b8:15:c0:e5:a1:89:e3:95:4e:
62:d5:ce:e9:57:92:44:f9:06:c4:d4:f4:21:e7:7d:dd:0c:cd:
09:e7:1c:0c:28:c5:d7:7f:9a:b4:b0:12:d5:ad:95:aa:d7:94:
67:1c:7f:2f:8f:56:48:84:11:87:7f:dd:f3:b1:06:a1:2d:01:
d4:91:df:df:97:54:b5:e2:62:51:a5:c0:44:a9:a6:e4:22:81:
07:61:5a:3b:4a:9b:5a:e2:66:41:2a:d9:a3:ae:77:a5:bf:27:
a2:b5:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:34 2026 by rpki-client