Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: vA3v52Kk90PXd5AaVVFcjfqX9xQzTBqL1aq0k+ljaok=
Subject key identifier: 10:7A:F6:E3:68:87:BD:43:10:66:CA:B4:A9:14:61:FA:38:25:53:38
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 01A1242F57E9F9F9E6540DFA307B3BC642AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 0752
Signing time: Sat 10 Oct 2026 05:00:44 +0000
Manifest this update: Sat 10 Oct 2026 05:00:44 +0000
Manifest next update: Sun 11 Oct 2026 05:00:44 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: lUxlTWN9qEWmeMCmGFgOM5d3h4IRt7xw3WkXvmiqEFA=)
2: VC6pU8sH53fsSXhpjxvq2spJkW8.asa (hash: eY4uxqqdpm3pkCV4oqysR7RZdD/oSeWBc0FKFASjw1g=)
3: XaMeeXQ5ysc8kABhh0l_VC0xvRQ.roa (hash: f1b46uPGTd/9X8UPdm3VptVXLZpHjki1wLcZZ1TfO/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:57:e9:f9:f9:e6:54:0d:fa:30:7b:3b:c6:42:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Oct 10 05:00:44 2026 GMT
Not After : Oct 11 05:00:44 2026 GMT
Subject: CN=107af6e36887bd431066cab4a91461fa38255338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:de:48:29:a6:8e:61:9c:7c:ea:a9:b3:c8:
b5:59:30:48:ed:1c:8a:30:62:aa:ba:33:2c:35:78:
87:e8:33:eb:e7:f3:65:9d:cc:05:2f:30:d4:6f:94:
09:24:88:ab:31:d7:a3:87:41:0e:d1:a9:e5:1f:db:
b0:95:6f:ca:2d:73:b6:1d:d6:42:f4:8e:00:b9:b9:
82:0d:f0:48:3e:23:13:e5:b5:4b:09:27:9b:6c:27:
09:3a:ab:47:3a:22:78:b4:ee:5e:b9:51:b3:1f:ad:
c8:1e:08:89:a3:e7:5a:d4:a9:2f:5b:90:28:3e:22:
a2:60:17:ab:6a:a7:77:ce:b6:5a:38:1c:c7:74:3a:
d7:20:a1:0b:ff:c4:2a:f7:90:e6:c7:8b:47:ee:da:
1a:50:92:4f:da:b2:13:5a:e2:a4:e6:e3:0f:93:fc:
d8:04:ca:5a:8f:3f:5a:9a:48:73:51:61:59:18:be:
29:c5:3e:78:f4:38:06:ac:c0:1a:8a:00:d1:96:ac:
2f:68:3d:4d:f7:d7:38:b4:71:25:13:5f:11:b5:ff:
50:41:d8:da:86:fb:3b:07:6b:12:6e:e6:3c:d6:68:
f4:4e:32:8a:3b:17:4a:c5:ef:e1:1d:27:48:2d:be:
2b:58:9d:2e:04:ef:b0:17:e6:52:b4:4c:16:85:0c:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7A:F6:E3:68:87:BD:43:10:66:CA:B4:A9:14:61:FA:38:25:53:38
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:dd:7f:e8:ea:fd:ce:80:55:39:47:99:3b:76:0a:67:b5:9b:
12:4b:30:5b:3d:c9:11:7b:6f:7d:aa:75:c4:d6:18:ee:b6:d6:
b0:59:3c:2c:bd:40:b6:80:8a:1b:eb:5d:e2:2c:45:a9:84:f2:
e2:be:00:cb:29:dd:81:e1:50:c9:25:84:17:4f:3b:95:b9:c2:
3f:04:88:08:bd:e5:b6:34:ae:91:b8:15:34:25:4e:9b:c2:c9:
52:17:c3:c3:8b:8d:d5:23:e6:5c:83:77:26:af:81:b5:4a:49:
d8:14:e9:89:67:ae:04:da:e5:46:28:2b:98:11:8f:82:c2:e7:
96:f3:68:f5:74:9f:b0:5f:48:90:18:ab:ff:e0:64:7e:8e:1d:
45:10:d2:85:c7:16:7c:53:44:8c:4e:03:25:ef:cf:63:16:c3:
f1:58:5c:74:4c:fb:5d:74:a2:cb:74:46:4c:8f:fb:6e:cf:e3:
bc:b8:99:1c:88:05:a0:9e:db:30:2d:ab:80:b4:d8:3d:2a:53:
92:42:93:d6:8c:fe:c0:2d:11:fc:90:1c:be:23:8c:d9:b6:de:
fc:e7:2c:d0:38:e0:15:86:08:c2:7a:a5:f0:66:fd:2d:01:89:
3e:64:54:56:31:5c:78:9b:6a:61:c0:76:8a:f4:98:0a:7f:d9:
1c:05:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:53:37 2026 by rpki-client