Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File: 5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier: saqPtpeYX/LygDX++zRhX2EkGsx3JL9V+LUC5lmgrAs=
Subject key identifier: 23:69:EF:D9:9B:BC:F5:C4:6F:3A:E7:B6:A9:BC:F3:42:4A:01:87:00
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer: /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial: 01A0C9D8DE72F5562C28FBB7BEB73F899BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number: 12D0
Signing time: Tue 22 Sep 2026 16:00:28 +0000
Manifest this update: Tue 22 Sep 2026 16:00:28 +0000
Manifest next update: Wed 23 Sep 2026 16:00:28 +0000
Files and hashes: 1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: OZRV9UUi5H1Aw7tVBMRPvthRWG1xLTYCjKoCytgH+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:de:72:f5:56:2c:28:fb:b7:be:b7:3f:89:9b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Validity
Not Before: Sep 22 16:00:28 2026 GMT
Not After : Sep 23 16:00:28 2026 GMT
Subject: CN=2369efd99bbcf5c46f3ae7b6a9bcf3424a018700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:b4:a7:19:8e:6a:a6:cb:59:9a:41:93:e8:
9a:ed:f6:17:51:8d:93:29:c5:28:86:30:ff:67:67:
04:b2:7c:18:a0:12:0d:fe:26:cf:9b:d7:e9:ff:0e:
c0:2b:0c:2d:04:fb:fd:c1:05:52:39:15:12:5e:cf:
ea:da:ac:44:eb:10:7c:3f:b4:9b:e6:10:05:eb:a5:
10:92:94:52:2a:6f:a1:3e:15:a2:ed:2c:86:e4:cb:
f4:6f:17:6d:81:47:f7:94:12:a4:4b:1d:fa:5a:db:
5a:74:b0:19:36:92:39:4c:5c:cd:fa:cc:53:43:03:
59:3e:31:11:d3:1c:a7:c5:8d:2b:8b:f9:63:50:c1:
24:3a:c5:d5:58:ae:88:3b:42:1e:3b:8b:06:3b:5a:
7e:20:5d:dc:52:d3:e1:4b:f5:ae:f0:f8:34:8e:c0:
0d:ad:e9:d0:ff:65:c6:4b:68:4b:13:d6:78:ba:44:
fc:13:a6:2d:f6:2f:97:03:8d:cd:26:b7:81:ab:cf:
48:96:e1:aa:dd:c2:e8:22:db:f5:89:31:27:01:3c:
12:b0:54:44:d3:6c:6b:2b:f8:25:1d:78:1a:73:62:
bf:21:a2:63:ea:cf:ca:91:7d:ea:e2:5f:a8:48:76:
b0:3e:86:95:1a:e2:24:7a:c1:ce:3f:93:b1:34:a6:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:EF:D9:9B:BC:F5:C4:6F:3A:E7:B6:A9:BC:F3:42:4A:01:87:00
X509v3 Authority Key Identifier:
keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:8d:ea:bc:61:d4:6b:67:62:01:e1:cb:2c:5e:bb:ce:7b:
77:26:36:4e:b8:8b:d4:16:0b:6c:53:90:aa:c6:8a:ad:ee:85:
14:f2:00:2c:36:1c:b4:9d:08:17:1b:b1:16:f1:50:fd:47:1a:
a0:9b:fe:98:0f:54:ab:e6:80:9e:0e:67:9c:59:22:56:5e:c9:
80:75:59:f1:51:dd:7e:12:13:6f:95:c6:eb:d8:8e:e2:92:e9:
51:6f:90:ce:f2:33:67:1e:ee:36:fd:8b:48:54:67:a2:4f:32:
ac:3b:00:c6:6c:2f:29:c3:b7:0c:8f:80:a5:cc:39:8a:e0:02:
1f:ae:ad:83:8e:73:22:4b:6f:75:21:26:37:71:fe:7e:a3:16:
bf:09:af:ba:d8:e1:e1:41:57:b0:86:32:d3:7f:f6:66:02:8e:
65:35:13:79:24:cf:4d:1b:9c:2d:b7:30:4b:26:b7:33:08:3e:
48:0e:93:a6:95:a0:cb:cc:9d:97:a2:cd:0e:28:ab:4c:05:40:
2e:74:58:f2:d2:64:2c:54:95:5c:81:35:d1:95:22:e1:0f:b9:
db:e6:85:2d:e8:f3:ad:1a:be:35:13:f5:b5:15:6b:74:85:e6:
7e:01:41:d5:cc:c7:6e:05:a9:1d:33:a2:27:2f:1e:72:69:06:
5b:08:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:58:04 2026 by rpki-client