Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: v/98g8yKQUlX3reaE6UI+wUX2XWM/ToYuC4xe0OO5cY=
Subject key identifier: 99:D5:05:5F:DD:93:A8:D9:3B:00:A8:CD:17:39:9A:8C:AF:B1:6E:A8
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 01A0D426A227CCE8A648332B0439B50B391B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 1A7E
Signing time: Thu 24 Sep 2026 16:01:36 +0000
Manifest this update: Thu 24 Sep 2026 16:01:36 +0000
Manifest next update: Fri 25 Sep 2026 16:01:36 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: v4PzL7LsmZlJ5beQXaTizLhRA9oO0O7RNda6Rv/69Lo=)
2: KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa (hash: QvldGhE04OV5++dEJq/jSp6fTqREgs1t+eVzU3cgY4Y=)
3: fYprx9tfSrpJ7R3f1TAiM1wmUEU.roa (hash: GnFvgFHqjbv0TdFv86yIpomdwFZ2W7tQkR4j2YTsnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:a2:27:cc:e8:a6:48:33:2b:04:39:b5:0b:39:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Sep 24 16:01:36 2026 GMT
Not After : Sep 25 16:01:36 2026 GMT
Subject: CN=99d5055fdd93a8d93b00a8cd17399a8cafb16ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:49:d9:69:cf:7f:9a:b0:2f:ff:53:b3:9c:
d4:d2:37:10:25:8f:8c:ed:a0:ab:2c:93:de:bd:e7:
c4:0e:0b:71:89:f5:76:a0:f0:fd:66:6c:08:28:0b:
05:62:37:c0:26:9f:98:8b:d5:dc:26:d4:2d:ce:50:
6a:af:cc:99:04:de:93:1d:2c:43:40:67:2e:99:91:
91:5b:30:7e:4c:39:d3:fb:eb:cf:ce:ce:ef:11:f6:
b4:24:b9:e2:4c:94:29:ae:d4:21:fb:b8:13:8c:1a:
d0:69:ed:04:79:b6:34:c0:6b:1f:1c:a8:91:76:f4:
98:4c:3c:86:ba:9e:45:76:8a:9d:22:82:83:3c:91:
6e:5e:7a:b5:fa:44:66:f3:fd:a0:a8:d4:bc:ad:04:
11:a7:9d:d4:6d:d7:70:46:74:fa:eb:29:70:b5:b8:
de:e9:e4:40:5a:5e:78:8d:7d:20:47:7f:97:68:8b:
53:b9:29:fa:52:b3:b5:51:e4:5e:ce:cf:30:af:be:
60:7d:d6:d2:86:72:c8:20:41:c0:25:90:1e:b0:64:
3d:0a:4a:cf:cc:55:1c:47:ab:a8:fa:b7:31:d5:31:
9b:d2:33:ea:75:98:63:1c:f2:ee:c3:27:ab:e3:43:
5d:4e:a0:0d:0e:39:38:66:16:7e:ab:1c:3e:aa:5d:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D5:05:5F:DD:93:A8:D9:3B:00:A8:CD:17:39:9A:8C:AF:B1:6E:A8
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:43:46:ea:36:87:63:13:5b:46:78:e6:40:cc:2b:37:a2:b4:
aa:86:9e:d3:63:3d:f5:ef:a2:1d:60:74:83:19:dc:34:bc:81:
2f:63:86:76:14:8f:4e:03:26:f0:b0:ef:b7:d2:5c:e6:3e:e9:
9f:25:0e:b6:dd:7c:ac:69:1f:04:6b:19:08:2d:b4:55:5e:84:
74:5e:f6:28:1a:65:cb:71:66:55:d3:17:b3:9f:6b:d6:cf:4f:
87:d3:8d:a0:0d:23:2d:99:9c:d3:b3:04:00:3e:c9:f4:c5:78:
08:54:90:66:9f:c6:a8:01:1d:6e:2a:67:0f:54:1e:ce:b1:16:
e3:31:74:53:47:7a:51:64:99:3c:8f:15:a5:74:ac:4d:f1:46:
97:80:91:9b:e0:59:cb:d6:7d:49:3e:c2:c2:89:b7:53:3d:f0:
20:ad:80:83:ab:54:5b:74:08:b8:79:d3:4e:55:20:2d:45:19:
4e:ae:73:a6:49:fd:73:7a:b0:bc:f3:61:ef:e6:97:8f:92:ef:
5d:77:ac:c3:35:77:da:21:81:95:99:71:35:c6:5f:26:bb:de:
89:11:1e:9f:2c:e0:6f:d5:63:0c:d5:b1:ff:2b:15:e7:56:fc:
53:ef:7b:32:46:18:d3:78:d5:3c:98:53:a1:dc:bc:ed:a7:6c:
11:63:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:57:31 2026 by rpki-client