
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: w1cnPS4v6b6Pyv9YgddqRE9gf480ZjiTj5uME4aSpJ4=
Subject key identifier: F9:3D:72:47:02:F1:2D:A0:6E:53:83:83:88:90:81:91:DE:BE:CF:60
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 01A0DF18975961400E0B27987A4B4E8529C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 0857
Signing time: Sat 26 Sep 2026 19:02:05 +0000
Manifest this update: Sat 26 Sep 2026 19:02:05 +0000
Manifest next update: Sun 27 Sep 2026 19:02:05 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: YIOiQ2EJ3+iolPHvcA4XuTx8ZFoC0kqSoizfF8N8NYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:97:59:61:40:0e:0b:27:98:7a:4b:4e:85:29:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Sep 26 19:02:05 2026 GMT
Not After : Sep 27 19:02:05 2026 GMT
Subject: CN=f93d724702f12da06e53838388908191debecf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:05:b7:fd:db:5c:2a:dd:f0:33:08:46:d3:
f3:7f:4e:5b:b7:c3:22:c1:8b:0e:57:90:0a:ab:99:
43:cf:37:55:19:96:05:24:df:33:c4:f4:2b:76:04:
cf:87:a4:53:90:92:5f:44:a1:1a:eb:95:50:4f:9f:
13:a0:2f:b2:7c:b9:62:36:e8:dc:6d:f7:7f:98:cd:
45:69:eb:e6:d0:42:ea:df:f0:0e:39:bf:de:7a:90:
a9:07:ab:ab:4a:ec:65:a1:e8:42:29:03:32:52:b5:
34:fb:a6:8c:ca:ee:d4:ab:dc:08:a5:b1:16:87:aa:
e5:71:0a:a6:b2:e1:c0:94:e6:1d:43:76:9a:4a:b3:
73:0a:2c:8a:c4:7c:45:23:af:b4:59:48:41:dc:ea:
e8:23:7c:0d:67:8d:99:af:cd:5d:6e:3b:56:fa:46:
71:9b:d5:57:d4:f4:26:c4:6b:7a:ac:eb:6b:0d:ad:
d8:4f:79:3e:76:2c:cd:bb:80:b1:ef:91:f4:2f:f9:
af:a9:1c:e0:27:19:dc:05:4c:43:0a:94:78:af:a1:
35:29:94:67:fe:fe:e7:bb:2a:34:c7:92:f7:95:f5:
d8:ea:1c:16:cf:06:f6:36:1f:82:4c:8f:83:b8:af:
75:fd:50:c4:6c:b3:5c:3d:dc:f5:b9:a7:45:09:cf:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:72:47:02:F1:2D:A0:6E:53:83:83:88:90:81:91:DE:BE:CF:60
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:57:79:ab:8d:7e:2c:ce:b6:a3:2d:f7:6a:f8:da:51:c1:1b:
03:f8:d5:e3:45:e9:2f:ec:1a:75:fb:38:f3:09:b3:cf:1e:2e:
02:45:12:20:5c:f8:11:99:5e:fb:a4:12:80:30:cd:79:b7:94:
40:2c:6a:f9:20:a3:38:6d:9e:f9:d2:e7:46:4b:8d:03:d5:85:
9d:4d:19:86:8c:1d:89:1e:9d:74:6c:69:c0:61:93:25:c7:38:
e0:54:af:1a:cf:87:ca:d4:ed:02:41:2d:18:25:4f:c9:c3:8c:
c4:fb:15:06:9e:78:6e:a1:93:60:6b:1e:af:d7:ca:eb:3c:7a:
f3:6f:ec:0e:6f:b8:eb:a9:fd:96:f0:d8:8a:1f:80:d3:0b:b8:
dc:38:0f:9c:1b:c8:74:13:e3:74:81:c1:4d:dc:41:3d:ed:41:
2e:50:ad:65:1e:79:10:08:53:cb:03:79:e0:61:f2:3e:39:1e:
12:72:81:18:8c:ec:88:93:e2:45:48:64:60:59:a5:d7:97:a0:
18:18:a6:f2:49:86:40:80:32:1f:e8:38:cd:97:9e:c1:16:83:
cd:e8:ae:9b:42:43:44:7b:31:a7:75:71:78:f0:0c:04:cc:8c:
45:7b:44:60:e2:6a:30:e7:15:5e:69:1e:b1:d6:59:d0:be:b8:
71:a0:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:52:46 2026 by rpki-client