Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: qoO8ISVWN614UeYaGJ9Suh5+2PX/493kF11f/m8NdeI=
Subject key identifier: 49:9E:17:71:0B:B8:01:CD:B6:71:29:A3:58:27:AE:24:02:C1:FF:1E
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 01A0D26E026B997EAF855DA70B5E5CC245AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 0521
Signing time: Thu 24 Sep 2026 08:00:19 +0000
Manifest this update: Thu 24 Sep 2026 08:00:19 +0000
Manifest next update: Fri 25 Sep 2026 08:00:19 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: vyIJ95ZrwSurTjX0xbXQF27kGgBboo1/jbSx/heTt8E=)
2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:02:6b:99:7e:af:85:5d:a7:0b:5e:5c:c2:45:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Sep 24 08:00:19 2026 GMT
Not After : Sep 25 08:00:19 2026 GMT
Subject: CN=499e17710bb801cdb67129a35827ae2402c1ff1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2c:28:bf:c9:f3:64:d1:90:f8:56:81:5b:01:
21:7c:c4:86:bd:87:39:47:41:4b:c6:7e:e8:d0:fd:
d1:e7:f3:3f:50:93:ad:ec:81:eb:6a:92:3b:a8:77:
94:82:1e:21:9d:ee:78:95:96:cc:f5:00:4d:49:8d:
37:0e:ae:55:5d:ad:6a:c8:b4:cc:3e:b5:eb:d7:09:
3a:11:b7:ae:3f:8f:99:9d:af:2e:8a:07:55:a1:6d:
ae:05:66:7a:08:8a:84:3c:62:ac:f3:f4:7e:c6:64:
37:18:90:fa:8e:73:6c:55:3e:b1:d5:ac:8f:57:8a:
ad:31:37:d0:a9:fc:31:78:5a:90:2f:23:b0:65:c2:
cc:e6:68:e7:d6:2a:c0:5e:45:fa:0c:9b:35:cc:7a:
b6:ae:ff:40:85:5c:68:c4:04:f8:17:ec:72:9a:a5:
2a:1e:ba:e9:3c:4c:0f:5b:ce:0d:37:67:a1:d5:ed:
39:f5:91:08:07:a2:a5:79:89:f4:7a:6c:1c:5e:f0:
19:bf:91:89:12:58:c2:de:24:b3:51:cb:2c:1c:1d:
5e:fe:99:45:3f:63:e7:de:74:25:56:c6:2b:90:89:
d9:a7:8a:cf:ba:98:84:cf:3d:c3:98:bd:dc:8f:da:
00:17:dd:6d:63:0d:64:ff:c9:41:2f:d7:21:43:6f:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9E:17:71:0B:B8:01:CD:B6:71:29:A3:58:27:AE:24:02:C1:FF:1E
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:f1:7e:10:75:58:2b:b0:a1:8d:c3:4c:2f:82:42:b4:e7:
3f:4e:0f:04:bc:e6:ec:97:95:4d:77:7d:59:53:0d:d9:4f:f4:
05:09:a3:d0:55:16:24:a6:5a:3d:65:09:ff:16:e5:94:a8:82:
dd:09:6d:21:1a:77:06:1e:c5:bd:c2:1d:01:90:88:7b:8d:78:
dc:91:b8:dc:31:b2:bc:59:f1:64:cc:8a:8c:e1:8d:8c:3d:af:
f3:b9:3c:90:7f:cb:fc:c3:51:da:09:62:41:ee:94:36:06:bd:
6b:e7:6d:1e:bf:d9:91:cb:9e:48:de:28:0d:fd:40:58:0b:74:
e0:df:62:5b:7a:9f:a9:e7:89:11:b5:a0:d9:78:42:a6:58:82:
6e:66:90:1f:e3:3d:a8:dd:d5:53:db:b1:bd:70:20:f4:98:15:
37:12:18:03:84:e0:c8:e0:a6:bb:c1:2c:f9:4a:57:9c:58:ae:
ce:3e:cd:9e:77:b1:2b:9a:1c:c3:83:cc:88:f8:61:76:ba:38:
26:08:9e:de:ca:44:ab:bd:41:b3:b0:7f:fe:5a:0a:cc:b8:92:
15:3d:82:f0:ac:21:11:f5:4f:56:73:e9:1c:52:1e:2e:f3:21:
52:b4:61:94:74:51:46:48:12:67:7d:1f:11:f6:b6:83:76:a9:
03:7a:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:42:35 2026 by rpki-client