Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: VbYMdw34CzO5RRXeL9M5d+YGVa0GFzN5W2R/VYSc5OE=
Subject key identifier: DF:F8:15:0B:D9:B5:BA:7C:20:46:70:B5:05:62:FD:37:50:19:98:1F
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 01A0DBA954C38117FC5BA15CD4EF86484E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 1803
Signing time: Sat 26 Sep 2026 03:01:42 +0000
Manifest this update: Sat 26 Sep 2026 03:01:42 +0000
Manifest next update: Sun 27 Sep 2026 03:01:42 +0000
Files and hashes: 1: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: p+f3gu5RLJ8dr6E7vE22p0T2pzjpd/8eKvb7kLXJcr0=)
2: Wu9t7d9tnZW1AA2IWZCyVHCZEmo.roa (hash: kOHm2lN17Qca/qCn59+JS7mNSFFu2Gxe0p/zQAQ3878=)
3: ew282-AhNX4FMYFmo40ImlhZsYU.roa (hash: 7VW/QfG/Z+KeGR3BpgjUt4A9hj2uza0zmvqYLXTnLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:54:c3:81:17:fc:5b:a1:5c:d4:ef:86:48:4e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Sep 26 03:01:42 2026 GMT
Not After : Sep 27 03:01:42 2026 GMT
Subject: CN=dff8150bd9b5ba7c204670b50562fd375019981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:b5:86:cc:24:19:ff:56:e0:f8:9f:b2:2e:
83:c7:95:86:ed:aa:c2:6c:2f:8d:e5:86:9c:52:1c:
dd:b9:71:a1:99:82:fe:08:15:9e:d1:f5:15:3b:7a:
08:8c:8e:1a:4b:a9:60:c5:9e:ae:8e:3c:b8:e2:8e:
1d:3e:9f:bf:9d:4f:00:77:fd:bd:fa:db:c7:cc:91:
f6:3c:eb:37:28:c8:b7:ba:69:5a:c5:f1:bc:3e:88:
a3:b9:7e:16:7b:15:32:fa:ae:9e:b0:a4:f2:14:3a:
8f:6c:12:d0:d7:1c:aa:0f:e9:18:c4:72:24:24:57:
70:2d:78:3a:59:5f:39:16:a5:22:87:41:5c:cf:f7:
94:3a:9d:1e:24:c4:a2:df:ed:3a:fc:a6:65:32:72:
1c:3f:0e:85:1c:0f:25:94:f5:72:e1:0b:6c:7e:a4:
18:45:9f:dd:fc:ae:97:e9:a7:d8:e0:8e:07:00:c3:
05:bb:0f:56:5a:04:01:84:88:b8:19:56:74:07:40:
08:f6:15:3b:38:03:e6:01:09:d1:67:93:5d:3b:63:
d3:24:76:dc:e6:f1:26:ea:2f:31:d9:f6:8a:9d:39:
5e:00:a2:e0:a3:47:e9:ce:75:92:71:21:7a:7e:83:
13:01:19:1d:b0:cc:3f:cd:64:ba:29:db:b7:ef:47:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F8:15:0B:D9:B5:BA:7C:20:46:70:B5:05:62:FD:37:50:19:98:1F
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:fc:a0:82:8e:eb:ae:28:d1:9f:77:d4:8d:bf:88:17:c0:76:
b5:92:c5:4b:c1:a1:a5:2d:30:46:6c:c3:6a:e0:c1:ae:06:a1:
d6:e6:a6:1b:48:56:84:c2:97:fd:89:9b:0f:29:76:48:d6:7d:
7e:a3:3d:c4:f5:7b:2d:5a:04:7a:a0:3e:b7:5d:04:52:a0:39:
75:86:ec:e2:bd:ae:e0:19:ff:b8:97:54:55:b1:e4:24:d0:b8:
65:a2:ef:70:2d:28:51:9b:29:1c:f8:af:82:d3:65:7f:17:18:
0c:9e:75:e9:33:d9:49:e6:bb:ce:ac:a0:cc:2c:58:3d:b0:75:
50:56:4c:c3:81:c0:1c:44:8a:09:69:38:75:5b:95:31:ec:ec:
47:5e:83:95:2d:8b:51:e7:8b:86:e6:2f:dd:87:17:ab:eb:bf:
36:8b:06:fc:63:a6:cb:39:47:94:22:51:8d:48:c1:bc:73:70:
52:32:2b:cd:f0:75:d5:0b:42:f8:3e:ee:d5:20:41:75:8d:a1:
17:59:88:ce:f2:6d:ce:ee:1e:95:87:a3:f7:23:c5:48:91:e0:
08:fd:77:8b:bc:71:23:08:1c:f7:db:61:0e:21:6c:25:f1:e1:
15:07:b4:cb:42:57:f6:dc:09:72:23:be:7e:6c:c1:68:7d:c4:
f4:de:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:55:30 2026 by rpki-client