Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: djlUN0KJ/yecLvCs/m0ZFG4NP0GV8aR58ogFr5Ihb9w=
Subject key identifier: 5E:AB:67:DE:62:3C:CE:BE:A9:7E:EB:3B:38:DF:C3:37:11:BF:28:BD
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 01A0D07F8A6C8E231D9B6C7B3F7934284AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1758
Signing time: Wed 23 Sep 2026 23:00:14 +0000
Manifest this update: Wed 23 Sep 2026 23:00:14 +0000
Manifest next update: Thu 24 Sep 2026 23:00:14 +0000
Files and hashes: 1: 5IIUXEAZNtrYdUWTfkEpoGU9_is.roa (hash: hGgqh1MUpciTEKawXPxZYEEAiYB7oibeQnzurhDNdRM=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: ZdOPo9DVX4GupJlzbXt8PWPrnpl6FjQHYJGlYAH3mqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:8a:6c:8e:23:1d:9b:6c:7b:3f:79:34:28:4a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Sep 23 23:00:14 2026 GMT
Not After : Sep 24 23:00:14 2026 GMT
Subject: CN=5eab67de623ccebea97eeb3b38dfc33711bf28bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:c1:6b:e6:dd:e2:dd:19:69:8c:24:c9:32:
9a:26:7e:fe:01:a7:74:2a:5a:75:88:f9:93:f7:42:
0c:47:15:19:a1:64:6b:b9:0c:49:3b:26:4f:55:ee:
b4:ed:b5:58:58:aa:2d:5f:de:bb:b3:96:dd:fa:66:
08:18:fd:ad:ab:83:10:41:22:ab:6b:38:59:8e:93:
eb:3e:7b:29:67:79:ba:14:72:2c:e9:e7:1f:d8:18:
37:dd:36:26:ab:7f:ad:93:77:4b:42:fd:1c:e7:bd:
39:af:42:60:b7:6c:af:a6:62:fd:a7:e1:7a:0b:91:
69:16:75:0e:62:4e:10:4c:f5:ae:22:af:c5:24:eb:
a4:b5:d2:00:3c:6e:36:3c:cd:0c:24:fb:3f:e9:71:
dc:70:a5:f5:66:ea:e6:90:48:38:c0:48:31:7e:c1:
2e:c2:44:76:65:23:4f:4e:ed:06:05:79:08:15:d4:
59:dc:40:48:06:ef:40:5d:e7:14:ea:d4:e0:64:4c:
c7:40:64:f0:33:29:43:88:1e:c2:a3:8d:09:34:0e:
5f:c6:d2:87:50:b6:8c:b1:e7:92:d1:41:0e:09:7e:
79:ab:33:85:16:64:d9:6a:a1:d6:af:a8:83:ed:d0:
8e:d3:e2:72:16:67:f4:5d:d6:24:1f:cc:7d:3e:81:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AB:67:DE:62:3C:CE:BE:A9:7E:EB:3B:38:DF:C3:37:11:BF:28:BD
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3d:80:17:a3:83:8d:ee:55:f0:21:68:26:a4:62:a9:22:8a:
d8:b3:07:a6:74:c1:cb:ac:15:d8:0a:94:21:7e:3f:4b:d6:01:
4c:cf:8b:bf:01:e9:af:a4:87:df:30:d6:df:9e:30:39:62:0b:
d7:f2:6f:e4:1a:6c:fc:95:ea:24:cb:bd:78:96:8b:b0:f1:7f:
e9:5e:03:61:22:52:c1:89:4a:27:79:04:1a:13:74:70:cd:70:
42:0d:d2:3f:8f:1a:64:30:10:e4:d7:6b:17:3b:54:e3:f2:87:
cb:ec:6e:28:fb:46:6a:3a:49:69:5a:42:3e:b7:f9:a4:ec:82:
f4:0f:67:42:1f:32:9b:d9:7a:b8:af:c2:7d:92:c5:28:39:50:
9e:d8:e9:19:33:cd:f5:75:ce:89:f5:bf:f3:37:03:0a:ff:30:
e3:b0:cd:8c:de:91:3b:01:f9:ae:7c:ad:25:6b:78:12:cf:0f:
be:5e:24:0b:1d:20:d5:a2:10:10:d6:dc:cd:1b:ea:85:d1:02:
34:72:22:f2:14:96:1b:0d:c2:f9:89:fa:f7:2e:dd:28:6e:84:
69:79:08:46:58:a8:f7:9d:e3:d4:82:4b:f3:82:7f:36:92:f0:
bd:ca:d5:55:b4:8e:3e:51:fc:60:d0:4e:b4:30:79:f5:51:98:
43:a3:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:03:54 2026 by rpki-client