Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
File: 5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json)
Hash identifier: XYQ+UGaokxH8cn0YIVI6TB5pwbwlaFuT4bHagVUoEBI=
Subject key identifier: E9:F6:85:54:F7:47:D3:E0:34:64:B5:2D:69:7C:49:B3:93:A0:91:3C
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial: 019D26CD635F2C76FCC0775AF9EE4A189616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
Manifest number: 010F
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: J4rXqVxMYCsjhSz+XiiLyisiSF6of6nioMk45VkAX/s=)
2: HW91ceRJgWG3iZvp7l-CZ4g114o.roa (hash: DJW7zDRRrxF8a0KLlMx4QW/WpXaZuql+x/3IqGrDfJE=)
3: MHca-Spbwu4KckiWw0Dq8WRDlXI.roa (hash: 1Fh8PbvTtxhEEhmRRroTAZu9epm44Y5y/MNbSvWf+o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:63:5f:2c:76:fc:c0:77:5a:f9:ee:4a:18:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=e9f68554f747d3e03464b52d697c49b393a0913c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:e3:62:90:3d:dd:cf:ae:71:75:85:e2:a0:
cd:31:4c:4f:fa:1c:ea:c0:f9:50:f3:9f:e3:88:7e:
14:66:70:42:da:d5:e7:71:77:a2:31:5b:cc:fd:34:
66:a3:43:bf:4b:56:e6:6e:ea:26:d8:64:c6:7a:38:
6b:49:41:1b:7e:cc:f2:94:9e:8b:a9:69:c9:fd:8f:
9a:ad:ad:c3:b6:64:95:7c:69:d1:3e:0c:1c:bb:5e:
ee:e9:05:49:b2:e6:98:11:d2:b4:53:30:73:e7:ba:
5b:e8:bc:cc:b9:da:6a:ad:15:7c:32:c6:b1:c1:2c:
f8:19:ac:75:6d:a6:8e:bd:52:54:21:80:a9:cf:5d:
d5:8c:a7:85:0b:f6:10:9b:31:66:2e:44:cd:0a:75:
1a:09:40:14:22:b3:ac:2d:9b:1a:ac:29:1d:7b:3a:
fc:ec:33:fb:0c:d6:84:e4:31:31:92:59:ad:5d:dd:
23:96:8c:ed:4c:ac:8b:c2:ca:90:57:65:bd:1a:30:
00:aa:e3:f2:d8:42:5e:83:44:fe:8f:f7:d7:b3:75:
44:b5:a3:f3:8a:87:a2:c9:bd:d9:53:12:d3:f3:d4:
d1:8c:bf:3c:05:f6:4b:8d:a9:06:e5:7b:e3:3e:63:
ad:d2:36:b2:27:ef:a4:6a:92:0e:ba:d9:14:5c:25:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F6:85:54:F7:47:D3:E0:34:64:B5:2D:69:7C:49:B3:93:A0:91:3C
X509v3 Authority Key Identifier:
keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5d:c2:aa:9e:e4:9e:b6:96:a4:62:28:f7:83:98:35:e8:d4:
79:6d:8d:ae:0c:4c:31:ee:8b:16:2b:00:95:5d:b5:18:93:a6:
ed:d9:36:fb:94:58:6d:1d:16:7c:f8:58:5d:53:9a:d4:20:d6:
bc:93:12:4c:5e:ed:c4:63:c0:45:24:77:d9:13:b4:f5:a8:e6:
06:6a:27:97:c5:69:e9:73:39:4f:b4:06:21:70:4e:a9:33:28:
41:be:ad:3e:00:a7:68:a7:5e:c6:ec:5c:f0:fc:a2:f9:d7:41:
1e:cf:74:83:f5:da:0b:a6:15:ad:da:ac:95:9f:77:d9:0d:29:
50:bd:1a:8d:52:13:66:7c:36:d9:f1:05:ee:66:43:50:e3:11:
b3:c8:eb:72:fe:52:a4:56:d3:be:c8:31:33:b0:5f:f3:da:89:
f9:63:69:4a:d4:22:c4:62:14:56:9b:fa:c6:f3:23:54:3a:cb:
20:7a:c9:39:a9:96:36:e5:17:da:ab:47:35:8f:0a:cb:e7:82:
51:8b:74:61:f1:b8:61:55:fd:38:ca:8d:ea:08:60:c4:d5:2b:
4c:fc:e1:8e:1f:42:45:f1:1b:ae:7d:d7:8e:50:fe:d7:7b:4e:
c2:68:d7:25:ef:89:3b:ee:ea:24:34:c7:cc:f8:12:8b:62:25:
96:bc:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:00 2026 by rpki-client