Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
File: 5D_0Mpxm5bDVELjy6viwfn1ce0A.mft (raw, json)
Hash identifier: B5uLJKEeKO/J/7QTsc5JPwSnr8ciD50KU+doJkN2BeA=
Subject key identifier: D2:B1:AA:C4:DC:69:89:AE:78:5E:93:40:C4:78:6D:3F:5F:EE:16:E9
Authority key identifier: E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
Certificate issuer: /CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Certificate serial: 01A0D012F147E786FE4CA231DF6938CD217C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:37 +0000
Manifest this update: Wed 23 Sep 2026 21:01:37 +0000
Manifest next update: Thu 24 Sep 2026 21:01:37 +0000
Files and hashes: 1: 5D_0Mpxm5bDVELjy6viwfn1ce0A.crl (hash: bqm8YNIs79jzalPHJq9H/rPOt0MuDXHfQjt3/3ek0/s=)
2: vMzqrHDtZQseD1IfDrA-iShDNwk.roa (hash: cIZbKSavouxTcPZPOTmND0k51VrW5LYVlRN+D9j5W+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:f1:47:e7:86:fe:4c:a2:31:df:69:38:cd:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Validity
Not Before: Sep 23 21:01:37 2026 GMT
Not After : Sep 24 21:01:37 2026 GMT
Subject: CN=d2b1aac4dc6989ae785e9340c4786d3f5fee16e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:47:7f:11:1f:de:0f:f1:30:ed:e0:03:4d:
be:96:e1:50:bd:87:92:cb:3e:83:02:4c:8d:da:bd:
cd:9a:71:5d:67:ea:c8:45:5f:9e:0f:d4:61:5b:de:
d8:81:7d:17:e8:0f:5c:e3:1b:08:96:28:65:e3:88:
8e:e8:68:05:e7:ac:e7:fc:84:26:f5:cc:7c:56:e4:
63:81:27:99:4e:21:9d:55:a8:17:66:21:80:67:7a:
54:af:a3:d4:ad:03:87:b1:67:85:af:3f:83:1f:a8:
cf:9a:28:2d:2e:38:2d:fb:fe:2d:5c:02:8e:4d:b5:
da:e2:22:1e:23:a5:8b:66:8c:5c:f8:65:98:a6:7a:
0a:70:f1:f2:0d:a6:b3:70:f2:7d:b7:c3:8b:72:00:
b7:8c:2d:58:dd:7f:00:6e:fa:24:40:65:a7:b2:59:
3d:97:a7:7a:21:72:20:c0:93:52:49:46:77:c7:79:
8e:e1:4c:c8:1b:56:7e:0f:f6:28:29:af:e6:d3:d0:
58:19:ac:73:5f:57:52:65:e5:b5:9a:12:a2:e6:66:
dd:f5:4d:76:fd:1f:a1:eb:34:2c:bf:15:af:5c:f1:
38:9e:47:36:7d:13:00:b3:31:1e:1e:1e:41:c1:77:
cb:d7:a1:38:fb:ca:06:a0:13:f5:62:1a:51:87:98:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:AA:C4:DC:69:89:AE:78:5E:93:40:C4:78:6D:3F:5F:EE:16:E9
X509v3 Authority Key Identifier:
keyid:E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:61:f0:f0:ea:c5:7e:55:1a:9e:2d:4c:ed:3f:e9:4a:17:11:
4b:bd:e6:c8:47:19:04:83:51:3e:a3:98:e6:ce:91:8a:00:53:
d6:ff:f7:6b:d6:41:29:e8:aa:d1:27:c1:50:16:69:4a:06:fb:
8f:e6:18:77:45:22:80:3a:c7:b6:fd:b5:a7:a3:22:a7:01:ad:
45:93:0b:b9:be:57:c3:fb:7b:d3:21:cd:b1:75:ef:c2:39:25:
96:31:bc:0c:ae:bb:48:9f:39:33:1f:e3:fb:08:8e:60:2b:f4:
55:da:b4:75:56:5c:68:60:c3:e8:5e:dc:18:a3:e3:a5:e3:12:
12:4d:16:d4:fd:49:f5:b1:e7:1b:b0:19:c4:cf:3f:4b:9b:ef:
ec:9b:40:c4:29:b2:82:c4:19:be:3b:d6:ee:1b:b5:14:08:6f:
3d:d8:98:b7:3c:3c:16:fe:b4:03:09:a2:1b:57:d1:a7:cc:70:
53:0a:9f:d3:48:c7:79:7a:8f:f0:32:cc:3a:e1:98:06:d8:62:
bf:16:32:65:8d:6a:bc:c5:49:0a:d1:63:93:89:bc:0c:26:88:
49:69:17:2f:03:c6:7e:d5:01:d7:b4:52:9c:04:4b:e0:7c:0a:
29:96:28:26:ec:c3:b7:d9:66:c5:45:ae:49:81:f4:6a:9a:6f:
98:ad:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:03:12 2026 by rpki-client