Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File: 5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier: eSBdFG7IY4tLfMhLnZkv4SZqSs2B5q25Fre6tp+ixoM=
Subject key identifier: 35:07:3A:A8:C0:A8:80:FD:6C:AA:58:1C:D0:E4:0D:9F:F3:4E:10:68
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 01A0EC2EBEB2BB2BD9B793797D4E2945599A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number: 1A88
Signing time: Tue 29 Sep 2026 08:01:21 +0000
Manifest this update: Tue 29 Sep 2026 08:01:21 +0000
Manifest next update: Wed 30 Sep 2026 08:01:21 +0000
Files and hashes: 1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: HVHYnXswH9m2smtyJzrb3TMTxqu4hwCW6PCSoS1UWAk=)
2: s-aFo2td51VtpBYLYG1CPaknAyk.roa (hash: RjujG57h+x2URKPsUkDkS4Anzxru9fSYQ3I07HUgrao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:be:b2:bb:2b:d9:b7:93:79:7d:4e:29:45:59:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: Sep 29 08:01:21 2026 GMT
Not After : Sep 30 08:01:21 2026 GMT
Subject: CN=35073aa8c0a880fd6caa581cd0e40d9ff34e1068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:2f:e9:08:14:20:7b:97:7a:ce:cf:01:c6:
ff:f9:97:18:ba:da:7d:ad:7b:83:fe:d0:85:dd:f0:
a6:e1:cc:63:ab:c2:c9:6f:ee:ec:5a:f5:d9:8c:12:
c8:ad:74:df:b2:00:0f:ab:c5:38:d5:29:34:29:82:
a1:6f:d3:d0:51:db:fc:7c:13:7c:ba:72:27:05:a4:
14:ad:6e:7f:1c:c1:9d:78:8f:c7:72:47:52:3d:f8:
4c:be:ed:d1:96:1f:70:04:23:3b:3d:ba:4e:8c:f3:
c8:c0:5d:5a:97:03:4f:14:55:70:75:24:92:a4:4f:
4d:2a:d7:96:32:3a:8f:e5:33:eb:4a:10:6d:28:0a:
89:6f:90:cb:28:31:d8:5f:1f:a9:c8:7c:51:6c:a1:
6c:49:88:89:39:37:38:5c:d7:13:8f:e1:3f:2c:94:
7d:6c:0b:58:17:49:ff:9d:13:42:4e:82:d2:5a:05:
d2:3b:0d:59:24:37:8d:49:d0:81:c2:35:e5:ff:e5:
c9:fa:14:7b:4a:93:07:39:9d:0c:ef:57:a3:2b:86:
28:49:6a:7a:63:9e:b8:02:6b:c2:2d:ae:d6:df:31:
ec:1f:0c:fb:d2:75:5e:84:16:b4:7d:6f:88:bc:21:
f0:88:90:f2:ea:32:94:30:23:f4:c5:7b:93:f4:a8:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:3A:A8:C0:A8:80:FD:6C:AA:58:1C:D0:E4:0D:9F:F3:4E:10:68
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:61:9d:ed:7a:6f:f8:c9:df:a3:34:97:ad:09:88:f4:27:fc:
05:18:51:a3:61:05:b0:74:ef:cf:5f:b6:3f:30:5f:84:4a:20:
58:da:03:02:0f:f8:6f:12:c5:06:14:02:68:99:66:dc:7b:50:
93:9d:f6:79:1d:91:93:d6:a4:7f:2f:7f:15:00:f0:bb:ea:e0:
6a:c8:fb:93:c9:f1:d1:35:64:fa:0c:a5:6f:40:d2:ad:a5:31:
b7:4c:66:91:c7:52:73:49:79:cd:f7:0f:f9:0d:59:ce:a6:a9:
30:e7:ff:72:f3:c2:39:28:22:fd:bd:a2:22:1a:0b:42:ce:a5:
59:d0:62:f7:91:15:34:52:b1:08:29:6c:4a:2f:6b:79:09:b7:
03:cf:44:63:1d:11:9f:d7:c5:da:4f:3c:d0:b8:8c:b5:c8:b6:
17:61:25:d7:11:ea:ab:d5:4e:a8:f7:c8:70:22:50:7f:ee:b8:
7f:34:44:a7:0b:8e:d3:2a:4a:e0:f5:01:83:75:05:23:c6:ae:
d6:66:4f:c7:c3:fb:71:5a:cc:62:a9:8f:bf:02:7f:39:b5:50:
fa:d1:5c:30:99:17:02:4c:b6:ab:95:1d:37:c4:6e:c8:66:21:
72:55:f4:ce:df:a9:c1:ee:7c:88:d0:12:22:e9:90:38:a7:4c:
11:20:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:20:42 2026 by rpki-client