Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: gNHYjh69CAhy3OAoEgI/MWZZpgGRHEhpOSO2lc1ZXzc=
Subject key identifier: C3:DB:25:43:9E:8B:2F:18:5A:56:44:F3:CE:4C:A5:FC:34:B2:A8:4C
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 01A0E2BDB4C93C21AFAAEC8A0E83CA46EEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0EE6
Signing time: Sun 27 Sep 2026 12:01:18 +0000
Manifest this update: Sun 27 Sep 2026 12:01:18 +0000
Manifest next update: Mon 28 Sep 2026 12:01:18 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: xYUH/SFQunx5+GnEkjnuqHgC/YkbRgFbwhkECAKzOrY=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:b4:c9:3c:21:af:aa:ec:8a:0e:83:ca:46:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Sep 27 12:01:18 2026 GMT
Not After : Sep 28 12:01:18 2026 GMT
Subject: CN=c3db25439e8b2f185a5644f3ce4ca5fc34b2a84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:3a:da:4b:0e:d1:c2:45:e5:3a:89:4b:c4:
f7:e7:72:6f:75:c6:f1:4d:0c:25:a3:cd:ca:c4:b7:
88:aa:2e:ec:d6:1d:15:ac:da:9f:89:e2:9a:92:dd:
be:10:23:cd:35:62:f5:6a:8c:ac:e1:8c:8b:3a:03:
cf:8f:f2:3b:e9:4f:02:29:c2:d9:e4:50:c0:f4:e3:
2d:1d:51:18:23:72:2f:83:59:33:ca:a1:b3:21:ce:
86:44:7b:3e:b4:04:02:d3:28:46:c6:a9:f1:3d:f1:
37:1b:f0:02:10:bf:e5:13:17:db:c4:35:60:fb:18:
49:77:fd:77:d6:38:9f:a0:57:87:84:0d:75:a7:f3:
43:cf:2f:ab:09:04:77:cc:64:1a:b8:6a:8d:ab:83:
23:18:02:b7:2a:38:47:8b:c6:1c:08:10:e7:b7:fc:
b5:d6:80:38:7f:b0:a2:90:38:e7:5f:62:61:f1:7b:
15:67:82:a8:0b:86:62:f5:dd:d2:b6:08:01:82:86:
43:3f:48:cb:ff:be:ed:f0:30:36:ae:43:f3:9b:c4:
a6:67:8d:47:11:a3:61:4b:50:67:75:f5:50:d4:a0:
39:15:78:66:09:55:c0:7d:3a:a4:81:3a:8a:35:c4:
01:a5:48:f2:a6:11:92:3f:d6:7c:bc:76:ba:3e:08:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DB:25:43:9E:8B:2F:18:5A:56:44:F3:CE:4C:A5:FC:34:B2:A8:4C
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ed:83:51:c8:a0:26:4c:45:a2:f1:5d:a4:03:f5:cf:60:02:
64:fc:05:39:22:c8:10:9b:6d:bc:b9:70:19:09:f3:95:c1:52:
65:6d:03:13:7c:35:00:25:90:43:34:06:0f:bf:e9:a3:ec:b4:
bf:52:e3:a6:36:53:86:1a:a9:01:ef:4f:4e:8d:16:7c:e6:35:
91:5c:4a:43:69:3b:a7:d0:a8:35:e2:3d:32:52:08:2b:b4:3a:
1c:fd:e1:5c:41:05:34:99:ab:14:2d:bb:14:90:8c:fb:8b:4e:
5f:4f:f7:a7:d8:bc:f5:4a:5c:ea:38:db:11:aa:c2:55:a4:1a:
f9:0b:17:d1:10:62:11:7a:92:39:3f:54:f3:c3:a0:03:b5:69:
75:13:82:bf:0f:57:18:9f:ae:2d:31:b1:15:fb:59:6b:4f:98:
e0:c6:43:8e:eb:f6:0e:d2:72:7d:a5:54:2e:12:ee:46:64:3c:
e9:47:13:12:35:f5:ec:ca:6a:05:28:77:f6:ab:62:6f:48:77:
60:8c:87:ae:d2:13:94:2e:ef:27:f8:b1:ff:10:96:85:0a:34:
e5:04:b1:99:0e:5f:1b:3d:98:6f:7b:e0:f3:15:16:47:9b:97:
01:42:60:2a:d0:8b:e2:b2:bf:73:0e:4f:c2:29:ee:23:07:34:
67:e8:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:42:36 2026 by rpki-client