Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
File: 5Y8ma01YAFUs7adrgycbTI4V44o.mft (raw, json)
Hash identifier: AnruqSBnl3Vd8hSQrOm2jQ3kAO41QkI6CRV8Dy3NQDU=
Subject key identifier: B2:42:0C:3A:CF:00:44:06:57:22:CA:36:80:74:6C:DA:58:5E:04:8F
Authority key identifier: E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
Certificate issuer: /CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Certificate serial: 01A0D124EE40CB241DF6DE6593B78CABDBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
Manifest number: E8
Signing time: Thu 24 Sep 2026 02:00:53 +0000
Manifest this update: Thu 24 Sep 2026 02:00:53 +0000
Manifest next update: Fri 25 Sep 2026 02:00:53 +0000
Files and hashes: 1: 1-_1G1tATdFEJfv4st45_Q-d33kQ.roa (hash: p1aXapIIZWhXgIor7qn5hSGBNLqdBcmtQEmWKYSt1FY=)
2: 1Lrbwdn9oPlof5ajHq8YeOhYWPQ.roa (hash: 9ssYEoOHl8YOeIpzXb3TsKUuGip5v41JmeW+Sm6r4Hw=)
3: 5Y8ma01YAFUs7adrgycbTI4V44o.crl (hash: DZr/qDdvf3219DryZXkElaoOeO0wnvYDtcxn0SywIog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:ee:40:cb:24:1d:f6:de:65:93:b7:8c:ab:db:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Validity
Not Before: Sep 24 02:00:53 2026 GMT
Not After : Sep 25 02:00:53 2026 GMT
Subject: CN=b2420c3acf0044065722ca3680746cda585e048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:45:e8:0a:ce:02:52:92:9d:87:b8:f6:ea:
f0:54:bd:7a:92:ad:2c:f7:4d:e5:62:c7:34:53:f8:
b9:80:c6:a5:c8:0a:66:e7:ab:cb:a1:f3:9f:00:34:
e5:3d:82:a4:81:34:18:86:2a:60:de:9a:6d:b4:78:
07:53:3b:35:c1:cf:15:7f:56:59:56:db:84:1b:31:
da:35:42:d7:a8:eb:02:04:bb:bb:94:d6:d9:ab:55:
bb:35:53:f4:48:d4:f7:0d:7e:85:4b:97:44:fc:ea:
4b:d2:8d:42:9b:d1:76:bb:20:51:77:e0:7f:dd:71:
31:60:bc:7f:30:56:ad:a9:43:0c:0a:bd:65:f1:3a:
cd:19:ee:4b:ea:ab:b6:73:02:35:82:97:53:a9:90:
a6:40:37:6c:2a:56:3c:21:c1:c5:24:a4:66:da:e9:
7a:46:c8:14:73:cd:c9:32:40:d0:18:08:cf:74:67:
fa:16:fb:f6:40:29:47:20:0b:bc:7f:5f:da:8d:47:
4c:32:1e:a6:42:d0:a3:5b:5f:8c:88:d0:18:07:e7:
ca:cb:ca:f5:16:03:17:f5:11:97:e4:f7:f3:26:da:
87:58:90:b3:a1:35:61:17:26:c4:44:59:fd:d7:70:
c4:ba:9f:cb:93:0c:25:83:b9:f9:c3:10:f1:56:ac:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:42:0C:3A:CF:00:44:06:57:22:CA:36:80:74:6C:DA:58:5E:04:8F
X509v3 Authority Key Identifier:
keyid:E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a5:cf:99:bf:af:11:3e:d0:62:0a:6b:10:e8:36:a2:cb:a6:
88:ec:15:e9:a4:a6:b9:b4:05:db:ae:3e:b9:e5:09:3b:4a:3b:
21:07:b2:d3:d9:16:0e:81:04:e8:b1:8d:d1:e1:70:2c:a9:7c:
3b:f3:71:ba:06:13:e6:f1:5e:84:3d:5b:de:4b:1b:3c:ec:c3:
0d:c0:2f:a7:47:a6:c7:f2:62:82:87:40:3e:5d:58:61:22:cb:
87:2a:cf:2d:15:1d:48:c1:e5:e7:3a:8a:2a:70:67:ca:0c:3d:
37:13:c9:88:44:48:f1:7e:fd:58:33:d9:a7:7e:cc:78:a1:bb:
2b:77:6c:19:d4:62:72:18:0d:d9:f0:50:96:69:2c:fb:40:a0:
50:3a:a4:8e:93:31:2d:8c:83:51:1c:f6:ef:bb:24:eb:f0:4c:
d0:c4:ed:8d:ed:18:dc:d6:12:ac:aa:6c:85:42:17:56:9d:8a:
4d:bc:e5:bd:d1:ec:a3:f7:c0:d5:7f:45:49:92:bc:70:d6:7b:
f3:32:eb:10:be:be:cf:38:fa:71:8d:58:be:e5:84:a6:a9:ab:
de:6f:25:fb:79:10:e7:92:d7:fa:a5:27:41:0e:ad:fb:80:13:
2c:7a:0c:8e:51:61:53:ee:91:fc:52:ef:3f:3b:d6:68:f3:3b:
30:42:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:41:02 2026 by rpki-client