
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier: 5Oq7vqLYwJOqvJ+cOleKfV5fu03URpsR/eZ+W558wgA=
Subject key identifier: 24:FB:39:FD:91:4F:17:C1:D9:79:B8:8E:2C:1F:A9:77:3C:E7:D7:EE
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial: 01A0F3B1E2EC04301C476DBE46558B318883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number: 0DA0
Signing time: Wed 30 Sep 2026 19:01:56 +0000
Manifest this update: Wed 30 Sep 2026 19:01:56 +0000
Manifest next update: Thu 01 Oct 2026 19:01:56 +0000
Files and hashes: 1: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: 5SOgBlpQ1lGb1j/lPQzkjHFal5ogj6haLId64wBiTdU=)
2: BSGPWmtsgwbJGnKFG5brSPXj4hk.roa (hash: KGxIkg0MS8XaKz2jRrsvog2q0vQwaAcswUFzEf/VLTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b1:e2:ec:04:30:1c:47:6d:be:46:55:8b:31:88:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Validity
Not Before: Sep 30 19:01:56 2026 GMT
Not After : Oct 1 19:01:56 2026 GMT
Subject: CN=24fb39fd914f17c1d979b88e2c1fa9773ce7d7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:27:6a:c2:b8:0d:62:67:67:a6:b4:59:d5:
ae:e5:90:fe:85:e7:26:54:dd:c3:6d:13:0e:dd:aa:
a4:1e:60:d1:34:66:7e:c2:9c:5f:55:47:d8:b1:00:
fa:00:ae:43:19:41:64:6c:8b:da:40:f3:39:e8:65:
28:2e:77:e7:82:b7:0c:28:62:b3:ae:fd:c4:9f:f3:
1a:44:6d:3e:00:87:05:12:57:24:eb:c0:a8:37:8a:
29:ce:e0:80:3d:b8:42:c3:08:78:19:3f:98:4b:f5:
68:16:b6:cc:b6:ae:03:58:cf:aa:bd:03:e8:70:b0:
9b:ab:06:b7:5b:c8:a5:9b:d9:29:95:3c:f1:a3:23:
d6:42:b1:c0:59:56:ac:19:21:f7:6e:df:9f:cd:28:
40:2a:e1:17:9b:1d:ce:5b:5b:67:54:97:d0:a8:27:
83:40:cd:67:dc:47:51:7e:bb:cd:67:48:e9:ce:68:
c4:d6:d8:8b:70:77:e4:a4:c3:3b:b6:ec:0e:7e:42:
d3:e0:9a:c3:da:cc:c0:e6:b7:a6:20:93:a7:c4:34:
d8:7b:02:8f:4c:af:93:f6:6b:04:c6:65:4d:3f:06:
5e:8e:a4:2a:17:2f:9f:b6:8f:a4:fd:53:00:52:0d:
80:5d:2c:a2:d9:d8:06:99:aa:a6:74:3d:bd:5e:c0:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FB:39:FD:91:4F:17:C1:D9:79:B8:8E:2C:1F:A9:77:3C:E7:D7:EE
X509v3 Authority Key Identifier:
keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c4:46:cb:89:0e:d5:97:0b:6c:a0:5d:57:d6:56:89:54:94:
d5:dc:31:e8:fd:1a:26:ae:27:e6:c0:8c:c6:08:4c:5a:13:ed:
e8:2b:40:50:00:70:66:e1:c4:e0:42:12:6e:f2:a9:d3:0f:c2:
dc:b9:69:9e:f6:90:95:43:c9:3a:57:23:de:e8:e1:48:5c:d5:
25:42:3f:62:a7:7a:a1:b0:0f:56:73:c2:52:48:28:b6:d9:d5:
44:b3:8a:14:f8:ea:1f:b3:0a:b3:08:73:9b:2e:5b:6f:66:74:
bb:37:00:18:8f:d9:c4:fb:fb:46:ff:d4:e9:56:47:bb:4a:b7:
04:25:9b:44:60:39:1d:b0:e3:30:96:68:06:24:33:a0:ca:19:
2a:ed:7d:e9:48:6d:bf:6b:d2:b8:39:31:fe:7f:bc:72:09:ff:
00:0d:83:42:d8:1b:36:e8:94:11:a0:78:cb:7d:50:20:15:02:
98:44:56:97:26:fb:89:e0:f2:62:4a:2c:29:b2:84:89:7a:3c:
e2:c2:8e:67:08:a0:2b:05:94:26:3f:43:cb:3b:a8:b4:d0:18:
3c:e5:d8:5a:c0:f3:a9:41:58:43:c2:9b:88:b5:ab:a1:2c:33:
fd:5d:d3:66:0a:f4:88:ad:16:dd:90:f8:05:73:a7:42:d5:3a:
cd:6d:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:30:32 2026 by rpki-client