Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: SkEHsXzvEMvLescWKhwYEyE+msi8dXVv1XKIbbFjYoE=
Subject key identifier: 65:96:F9:D0:6F:C3:32:26:B1:F0:D8:F3:B2:C4:88:8F:9E:88:AD:DC
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 01A0DE72B8E7E2B0E0909219AD2B4680081D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 11F3
Signing time: Sat 26 Sep 2026 16:00:55 +0000
Manifest this update: Sat 26 Sep 2026 16:00:55 +0000
Manifest next update: Sun 27 Sep 2026 16:00:55 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: CqGW0WtDStpMTQ+0m1pY58uCtcB3Taaxftu6n/5nOV4=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:72:b8:e7:e2:b0:e0:90:92:19:ad:2b:46:80:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Sep 26 16:00:55 2026 GMT
Not After : Sep 27 16:00:55 2026 GMT
Subject: CN=6596f9d06fc33226b1f0d8f3b2c4888f9e88addc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:08:60:2a:92:66:b6:bf:45:3d:37:5c:a1:
5e:c7:da:c8:6c:f5:82:4c:9c:fc:70:31:66:7f:e5:
20:cf:d6:28:97:bf:c6:83:08:66:5f:fa:b1:65:32:
c6:a5:29:49:fe:64:6c:f4:9e:35:81:23:74:8c:58:
c0:74:7b:1e:38:62:1e:bb:a3:50:8b:24:92:85:dc:
84:af:2d:fd:e1:a5:94:5a:22:4a:45:c8:44:aa:8c:
0c:4d:35:7f:57:fe:78:aa:02:c2:ef:c6:77:66:72:
2e:05:4c:35:4e:23:ce:23:3f:a0:26:17:86:f4:28:
96:2a:af:c1:6b:45:76:ea:c1:ea:1f:35:7b:74:0d:
31:38:80:85:b7:bb:dc:0e:ae:8d:20:a8:25:ed:03:
48:0c:74:53:8e:43:01:3d:a8:e6:cf:a0:6a:d7:6d:
e3:eb:98:33:d3:2c:5c:31:10:fa:29:25:4f:f6:0c:
5b:c6:04:21:cb:b9:cc:20:09:47:a6:4c:72:47:18:
23:62:f3:14:60:6c:24:b8:39:25:4e:b0:fc:78:e6:
73:36:43:de:25:1a:53:62:7a:15:6d:e4:5a:b3:75:
06:22:4e:0d:c5:2a:5f:34:4e:8c:65:01:0a:3e:4e:
12:61:97:95:b2:bb:bb:d0:5d:76:51:de:cd:4b:7e:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:96:F9:D0:6F:C3:32:26:B1:F0:D8:F3:B2:C4:88:8F:9E:88:AD:DC
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3d:4b:3b:c5:d3:26:e2:e9:a5:e0:b5:14:8e:e1:9f:cd:3c:
ee:97:91:e2:8a:fc:d0:82:01:48:81:12:89:6c:e8:88:39:aa:
27:f1:bf:d0:8a:38:5f:ea:8b:b7:da:4b:23:ec:0c:79:85:e8:
03:dd:11:59:4e:36:4c:16:e7:3a:a4:d2:0c:cd:ab:a8:d1:b9:
db:57:e4:73:24:1d:3c:d4:a0:86:48:41:aa:8f:d1:42:3d:89:
1b:b7:73:13:6e:e8:27:cd:62:5e:c2:8e:0f:b6:89:a9:aa:d1:
23:0f:71:aa:da:d4:b1:d5:22:42:f3:93:92:2c:86:ce:00:7f:
e3:9e:fd:00:62:ce:90:f7:6e:9e:fc:34:87:9a:24:30:4c:5a:
76:99:ff:48:a1:fa:01:7b:b6:55:39:c2:6a:19:65:6e:2a:e2:
65:35:e6:1b:51:7a:2b:30:fa:8d:e9:7f:1a:e9:72:b5:ab:ff:
ba:84:25:2b:64:3c:8b:d3:55:0f:26:87:90:68:f0:53:b4:5b:
95:2e:49:14:54:bd:37:d4:2c:ea:1a:fd:6d:84:2c:f8:4b:3a:
15:d6:42:81:c6:24:02:a6:96:71:99:1f:10:a9:3b:f5:48:1b:
fb:eb:73:90:8a:f2:09:28:c7:8e:89:23:a6:79:69:a6:d7:50:
ce:ea:3a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:13:40 2026 by rpki-client