Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
File: s5V9y_9QghTcodun9TIXIFs-Tqo.mft (raw, json)
Hash identifier: qvHu4Q11+7AX0YcB4nGnqcXBPT0eXyW2KToxqLBL2hU=
Subject key identifier: E5:35:92:CF:F3:E1:9E:2B:98:E7:76:3E:1C:3E:F9:60:07:6B:E5:9D
Authority key identifier: B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
Certificate issuer: /CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Certificate serial: 01A1231DC1F4AA76A2E13E7295883CF565EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
Manifest number: 0110
Signing time: Sat 10 Oct 2026 00:01:55 +0000
Manifest this update: Sat 10 Oct 2026 00:01:55 +0000
Manifest next update: Sun 11 Oct 2026 00:01:55 +0000
Files and hashes: 1: _WtOo9YuQrokwTxQAJF58cfpSiw.roa (hash: OUo6i8y7m+/3FUoqkAIpfYsD0Rzx/nPmH8P0JQ2rHyk=)
2: s5V9y_9QghTcodun9TIXIFs-Tqo.crl (hash: hnLNcXCrBJU0tc1IZx46ojtnifEJVbshWEqMia2AB9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:c1:f4:aa:76:a2:e1:3e:72:95:88:3c:f5:65:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Validity
Not Before: Oct 10 00:01:55 2026 GMT
Not After : Oct 11 00:01:55 2026 GMT
Subject: CN=e53592cff3e19e2b98e7763e1c3ef960076be59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:54:0e:31:3a:38:3e:18:1d:5e:05:e7:02:
cd:66:db:02:23:82:fd:00:79:00:d3:b0:d0:40:65:
80:31:a0:73:7e:43:78:68:44:01:bc:a2:e5:3f:81:
65:1e:8a:cd:b1:60:5c:dc:e0:57:2a:bd:60:85:8b:
b2:e8:7c:33:72:1e:37:3b:df:5a:37:77:cf:98:09:
d0:93:9a:99:59:50:06:56:ef:4c:09:4e:22:1a:6d:
a0:62:42:65:3f:23:b8:76:9e:d6:b3:27:2d:cf:27:
24:4b:a9:c5:bd:58:b2:ed:a0:00:10:24:a8:00:ab:
78:08:1e:4c:75:de:17:3e:66:1a:06:1f:12:57:73:
b2:fc:7c:4b:21:b7:62:47:ba:3d:bf:9f:df:c8:57:
74:13:6a:6b:2d:9e:5e:57:71:4d:d1:73:ea:26:53:
0e:d7:6e:c2:16:20:9e:a5:be:d4:64:3f:ea:3e:c1:
1c:4f:83:2d:ea:6b:ac:9d:e8:d4:ac:80:5f:38:df:
21:1d:35:1f:9b:12:36:74:e6:00:fe:19:a0:31:93:
47:3b:cc:fa:e0:72:a2:a7:99:f6:8f:d1:5a:b9:5a:
2a:68:b6:f9:e7:f8:c1:45:30:9f:e4:69:ac:2f:12:
92:9b:93:a5:1b:a6:db:f0:b7:c8:bc:2f:c8:a9:00:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:92:CF:F3:E1:9E:2B:98:E7:76:3E:1C:3E:F9:60:07:6B:E5:9D
X509v3 Authority Key Identifier:
keyid:B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:01:99:7b:46:d7:e0:3f:54:0c:bf:3a:cf:bb:ba:d8:ae:68:
d2:37:56:db:2c:3a:69:5a:63:ea:12:59:10:47:55:b2:05:30:
eb:73:0e:bf:54:20:ed:2c:dd:0a:0d:02:96:51:b2:0b:14:b6:
50:76:0f:67:87:a4:58:62:f0:13:7b:5d:e9:03:24:e2:12:36:
c6:3b:47:5a:a6:5e:9f:6f:1b:84:04:71:e2:e2:08:3c:03:92:
b6:66:fd:11:23:b2:52:b8:27:e6:94:a4:03:e4:92:ec:eb:e6:
34:04:93:9d:8d:63:88:b5:af:a3:d7:23:67:36:e6:50:73:f8:
3d:0f:fe:70:a4:11:81:15:e6:1b:8c:a4:f5:bc:69:e5:45:c9:
c5:0e:42:c3:b8:3d:f2:92:11:7c:06:d3:f0:f3:f9:e7:88:93:
8c:09:59:e7:d7:71:dc:6b:b7:d9:0c:2c:bb:e5:08:ce:a1:a4:
65:34:9a:e9:2c:7b:91:9e:3d:ca:27:33:1d:54:c2:a3:f3:28:
6e:73:c0:4b:d0:9a:8f:7e:11:ac:1f:39:22:bf:84:73:53:60:
19:a1:3f:ad:d6:5a:b6:b1:8b:34:c8:3a:be:93:4d:02:57:bd:
5a:c4:60:be:e1:5a:2b:1b:fa:a2:dc:03:07:f2:7d:b4:0e:28:
87:c0:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 04:04:09 2026 by rpki-client