Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: j3Fe0Pzfmcb0uWhx518P3rYF6Nc720X+1vPpQEZxvqg=
Subject key identifier: 65:B8:C6:3A:20:ED:44:5E:B1:BC:F3:26:43:09:14:36:A6:B1:5E:46
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 01A0D34A667CDC08E835DC79B0FD826CD17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 1899
Signing time: Thu 24 Sep 2026 12:01:03 +0000
Manifest this update: Thu 24 Sep 2026 12:01:03 +0000
Manifest next update: Fri 25 Sep 2026 12:01:03 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: yq9EHSvF4lzGG5XHoJrlc++ndFnfahIoKePO5S5Va44=)
2: IWYrbXuJb7rdaqwraiq_apy6AMA.roa (hash: abrxD3L91b+QPLIZVyKImnAT+E+aScHR2G4289W+U4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:66:7c:dc:08:e8:35:dc:79:b0:fd:82:6c:d1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Sep 24 12:01:03 2026 GMT
Not After : Sep 25 12:01:03 2026 GMT
Subject: CN=65b8c63a20ed445eb1bcf32643091436a6b15e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:8e:5f:be:d2:2e:6c:a4:28:63:f9:eb:a6:
2e:3d:36:2f:01:cd:38:99:21:a3:20:ee:59:92:c7:
6f:82:d5:99:7d:30:b8:73:85:66:e0:34:96:67:8c:
49:97:70:c2:34:2e:98:97:68:3e:43:1f:2f:51:68:
db:af:73:fe:1c:48:47:77:56:10:1f:46:1e:1d:0e:
cb:92:92:cb:cf:d3:02:05:51:8e:d2:99:ca:62:d5:
ff:7e:0e:b9:a4:aa:67:0f:02:47:b2:1b:cf:62:f7:
67:4f:a9:a8:b2:41:57:1a:df:19:b4:c2:b8:9c:5f:
0f:d9:0c:2c:a2:0e:d7:3b:85:87:e8:77:c3:ed:8f:
fd:b2:64:16:f3:b6:3f:d3:72:8c:6a:a3:86:4f:02:
6c:e1:a6:1e:65:60:80:82:b4:a2:c3:ca:54:0a:81:
5e:15:2f:ed:20:3d:0f:2b:7d:d2:bd:16:e7:63:73:
24:5d:85:ee:fd:8b:43:ae:3e:1e:3b:e2:21:40:f0:
e5:6a:82:22:42:14:9d:50:3f:39:fe:15:93:5c:bf:
df:b0:83:62:97:27:f3:3f:b2:60:9b:4a:0d:20:b8:
af:d8:84:92:70:fa:29:b2:db:a1:cf:1f:cb:d0:be:
d0:16:81:33:5f:c0:48:58:94:f4:0f:62:b9:19:f8:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B8:C6:3A:20:ED:44:5E:B1:BC:F3:26:43:09:14:36:A6:B1:5E:46
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:db:94:63:b4:9e:22:04:86:bd:08:e4:9d:12:37:52:a8:6f:
da:e5:e7:87:0c:50:8b:06:af:53:e2:6f:75:1d:5a:9a:0c:15:
fe:b9:fb:c5:7b:92:ee:61:9f:75:12:71:6b:89:48:9b:b4:26:
6a:1b:c3:95:32:55:45:1a:a5:c1:34:07:61:73:1c:31:5c:4a:
19:b1:f2:b9:37:82:36:60:56:31:c5:7e:f2:bb:94:b4:c8:a1:
da:2f:99:4f:e0:91:0a:56:fb:e0:f6:51:d0:4e:5a:42:62:b7:
c2:4b:6d:19:f9:28:28:8c:a7:a0:71:7f:f0:3b:28:c6:15:c5:
c7:6b:38:20:10:b4:7b:9e:d2:7f:55:4f:26:9a:e8:87:71:54:
00:c5:9d:3e:15:d2:31:c5:64:cd:97:1d:01:89:b7:84:20:58:
13:21:fe:a9:e8:49:f6:2d:a2:b3:86:79:bf:18:d6:d1:f7:1c:
44:68:93:d5:7c:ae:43:0c:67:f1:3a:49:56:69:a2:3d:48:46:
92:cb:a2:f3:7c:be:51:7b:8f:01:c9:69:dd:c0:ba:e5:32:40:
af:3d:c1:58:fb:24:91:55:3b:12:55:5c:fe:dd:d6:26:45:8e:
c7:08:7e:f0:e4:d2:3e:d5:49:e4:6b:f8:bf:81:da:f0:b7:c6:
73:82:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:23:44 2026 by rpki-client