Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
File: D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft (raw, json)
Hash identifier: 38qVZwucdXiSJteDeHUHPoponlOdYBmQM6QUG+8qkOU=
Subject key identifier: 9A:C9:DF:21:62:05:02:71:3D:27:E9:21:3E:94:B0:D5:C0:C7:B4:2A
Authority key identifier: 0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
Certificate issuer: /CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Certificate serial: 01A0DC17974EA72F9E8EDD18E148540C4145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
Manifest number: 02A7
Signing time: Sat 26 Sep 2026 05:02:08 +0000
Manifest this update: Sat 26 Sep 2026 05:02:08 +0000
Manifest next update: Sun 27 Sep 2026 05:02:08 +0000
Files and hashes: 1: D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl (hash: 2rLSigwUuUz6MJNq594U8HVefNAvbFxYbZAxYhviAsk=)
2: H-D51HjMjjsYfo5DLvOZXJ5NZgQ.asa (hash: gpkxWbtRBEgASTgFzDt/pFMdPMHMMXFwys4WlumWGfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:97:4e:a7:2f:9e:8e:dd:18:e1:48:54:0c:41:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Validity
Not Before: Sep 26 05:02:08 2026 GMT
Not After : Sep 27 05:02:08 2026 GMT
Subject: CN=9ac9df21620502713d27e9213e94b0d5c0c7b42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:c2:a9:7a:33:a2:3d:57:8e:87:6e:53:e4:
ad:43:d8:f1:04:29:5c:2c:64:4f:44:dc:30:01:46:
e1:d3:fa:05:03:0c:08:3e:5c:8a:34:ac:90:09:09:
d8:d1:05:43:b8:d6:6c:7a:82:23:6f:82:9c:75:7f:
73:1e:fe:45:3b:f7:81:a7:ba:9c:97:94:ad:5e:5c:
c8:2b:8f:91:3d:ad:49:3c:22:59:9a:b8:29:bf:ac:
e2:f2:89:e4:fc:be:66:5c:37:cc:cd:72:d9:22:fc:
62:bc:64:0f:ae:8f:01:ba:27:ec:3f:76:da:57:d4:
32:62:2c:6d:bf:ac:17:9c:92:8d:7e:33:cc:b4:eb:
a0:32:9a:74:3e:dc:59:cd:d7:cd:21:d8:46:43:21:
a7:ef:24:99:fc:54:b9:a7:56:b1:40:1e:b5:2e:33:
26:a3:e7:76:22:67:b0:b6:b0:48:01:31:63:1d:1d:
7f:a0:58:72:63:86:b8:24:d5:1b:98:a0:ad:a7:ac:
dd:ea:59:45:45:ca:a2:cd:62:1f:d5:a3:75:ac:56:
37:11:5c:1d:e5:a0:d9:38:fd:f8:16:5d:94:4a:96:
4a:aa:51:15:f7:7c:43:38:1f:e1:1a:2f:a0:dd:e9:
62:17:bd:d1:37:d8:c8:dd:d8:e0:3e:ab:c8:45:df:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C9:DF:21:62:05:02:71:3D:27:E9:21:3E:94:B0:D5:C0:C7:B4:2A
X509v3 Authority Key Identifier:
keyid:0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0a:1f:a5:61:53:3e:f7:8e:48:06:c6:6e:d5:08:6f:f0:c7:
d3:1a:27:64:dc:7b:1c:21:3b:8e:80:04:68:3a:b6:d2:9b:66:
a1:67:7a:1e:e4:8f:e7:26:15:f0:83:63:4c:b4:00:2f:2e:25:
e2:73:fc:07:71:e9:f6:99:c1:2f:6c:a2:b0:eb:d9:b3:46:60:
67:5f:af:3a:db:a3:32:8b:1d:d3:c9:29:40:35:73:4d:30:b9:
9c:79:63:aa:a2:28:0f:24:5a:1a:eb:9a:4e:4f:27:17:65:1b:
92:90:79:8f:ba:5e:ea:3d:69:c4:e6:61:c7:cb:fb:76:62:3a:
94:7b:10:f6:51:d4:dc:b4:c4:a3:a8:28:be:f5:ec:ca:1c:7f:
29:6b:5f:8f:0c:e3:9e:67:82:fc:dd:4b:ac:cc:60:b8:81:dd:
7a:2a:c5:89:35:a8:6d:14:64:38:38:54:b4:cd:ae:05:44:9d:
53:f5:7c:6f:7a:5d:0f:6f:27:4a:32:c6:d6:b2:39:52:57:ee:
e8:4a:69:f5:5c:52:ca:25:0e:8b:66:90:0e:ae:8b:db:40:d2:
dd:00:29:53:34:e9:72:4e:7d:de:f5:f9:17:83:72:04:2f:80:
2c:b0:62:b9:03:8b:da:f7:e2:12:f2:01:45:af:ba:a2:24:e5:
44:5b:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:04:57 2026 by rpki-client