Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: RwKUpotaBBLGayyMR4E6DoD8qCumBV+b7ebx6ZEkMqE=
Subject key identifier: 1E:44:46:86:AB:8F:AC:5F:BB:F9:D3:D4:A4:A0:F3:37:DF:29:EB:87
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 01A0D15BBE2A6657D74F67CBF935E9810982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0FAF
Signing time: Thu 24 Sep 2026 03:00:45 +0000
Manifest this update: Thu 24 Sep 2026 03:00:45 +0000
Manifest next update: Fri 25 Sep 2026 03:00:45 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: SbHu+pWxXcD221Dc02A5u7KF+wHA65M8aickOttGEHo=)
2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:be:2a:66:57:d7:4f:67:cb:f9:35:e9:81:09:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Sep 24 03:00:45 2026 GMT
Not After : Sep 25 03:00:45 2026 GMT
Subject: CN=1e444686ab8fac5fbbf9d3d4a4a0f337df29eb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:1f:6a:71:36:4f:d6:66:ce:8f:46:cb:d8:
c4:22:38:d3:5c:f4:80:1d:c6:d3:a0:a2:63:ee:7c:
02:c7:05:f6:bb:b7:e5:8f:a8:c4:2d:ed:0d:15:5e:
3b:ff:7e:8c:48:c6:db:64:7d:34:68:2e:8e:be:1d:
1e:34:9c:a7:62:b1:33:e1:8f:54:78:61:f0:8e:67:
fd:f6:df:b1:b0:5c:ec:11:90:e4:f4:43:d0:22:bf:
71:3e:79:11:f6:16:b9:41:be:87:4c:48:e0:92:57:
35:80:50:dd:47:d8:f7:bb:a5:4d:ed:92:cd:a3:f5:
9e:54:94:c8:4b:42:4b:4f:52:98:9e:ed:d9:f8:9d:
3e:19:99:f5:97:d2:4d:c4:fc:21:fc:a6:d7:eb:3b:
46:83:4d:03:96:54:ee:23:a6:7b:a5:b1:16:64:7d:
d4:e6:d1:f0:e3:85:b3:d0:1a:0b:bc:87:f3:01:9a:
bd:9b:17:c2:30:bf:cf:7b:6b:6d:44:30:75:56:59:
70:7d:0e:33:f2:06:e4:4d:d9:6e:25:ba:f0:1d:c6:
cc:2a:a6:a2:22:fc:a3:3e:d9:db:3a:ae:0d:86:64:
59:68:87:65:07:e4:48:61:65:11:bd:2d:a3:b5:c7:
c5:22:fa:bb:89:2e:42:e0:3f:81:b0:d1:21:23:32:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:46:86:AB:8F:AC:5F:BB:F9:D3:D4:A4:A0:F3:37:DF:29:EB:87
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:90:bc:50:d4:eb:21:c7:e2:94:fb:22:6b:35:06:ec:5f:17:
33:85:b9:05:1d:e8:f6:ad:c0:2a:16:8a:31:bb:eb:f3:f1:53:
dc:7c:bb:16:c7:7b:c4:fe:70:6c:32:00:0c:dd:0c:3f:75:8a:
b9:d4:b0:4b:91:a0:e6:42:88:a3:f2:b2:5b:68:9a:bb:c2:44:
d2:5d:87:b6:09:9e:24:6b:e9:7f:45:1e:3a:d0:a2:7a:0c:5b:
c4:f8:11:e3:7a:80:29:c1:2b:9e:fe:69:8a:eb:c1:9d:69:aa:
e0:ab:0a:e4:5a:40:e8:18:2b:d1:3b:d6:c3:d7:a5:6b:af:74:
30:41:40:48:ca:87:d4:ef:4f:35:26:3a:33:e7:aa:12:59:e6:
08:3e:7d:d9:08:80:6d:09:d6:d3:f5:f5:8c:f0:82:03:8a:5f:
4e:74:d7:69:00:d7:df:de:05:87:39:80:5c:57:57:83:0f:d4:
b7:26:7c:a7:d8:47:a6:bb:e4:3d:21:87:b4:0e:73:66:aa:4c:
f2:08:55:1f:25:25:d4:3a:e3:3b:63:52:6a:ef:03:11:17:01:
ab:ae:5c:50:52:6c:cf:58:4d:fc:cd:66:20:4c:71:06:13:36:
91:45:0c:b5:15:89:56:97:0f:c2:fe:da:ad:fa:cf:12:03:d9:
26:91:6d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:53:34 2026 by rpki-client