Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: wAjpUFqVG9m1w0mpwsOLFrST0R5v+663fGf5u9oGaQA=
Subject key identifier: D2:EB:76:10:72:8F:24:F3:CD:12:7D:4D:D4:50:43:50:AE:5B:F6:B1
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 01A11ABE3A573EB2464E76468B5FA38434A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 1A4B
Signing time: Thu 08 Oct 2026 09:00:36 +0000
Manifest this update: Thu 08 Oct 2026 09:00:36 +0000
Manifest next update: Fri 09 Oct 2026 09:00:36 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: dY1bFUVu7CrojwSJs20JlL6ZcPKJniP50OFQw9bu+Ts=)
2: mt8BxRlzzPaaJ7YP89nmlvEShOY.roa (hash: 5h7uCM+sM17krF3KDYCTkEInjz6mxypULE5ia4pGUZA=)
3: zh2lJfC9-wfMTO9Kozt8KhhvQ6k.roa (hash: rv7yBHp8N5Gh/amJUvtJbCTehW8L+CBJUllqP/PiPaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:3a:57:3e:b2:46:4e:76:46:8b:5f:a3:84:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Oct 8 09:00:36 2026 GMT
Not After : Oct 9 09:00:36 2026 GMT
Subject: CN=d2eb7610728f24f3cd127d4dd4504350ae5bf6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:d6:7f:b5:04:7f:e1:6a:58:dc:ce:45:55:
4a:84:45:81:b7:3e:29:f8:d9:58:7a:e8:f9:2c:9b:
d8:8a:65:fc:d5:45:89:2a:ed:34:33:7f:4e:82:15:
83:5b:93:54:8e:90:d3:57:0c:95:10:9e:3d:af:a5:
c5:e5:44:ae:16:17:7a:cd:ff:5b:aa:8b:f5:f1:16:
3f:5a:80:6f:33:e3:11:91:6d:c3:04:b2:a1:5a:5f:
81:b4:d6:1b:77:51:8d:ea:94:0b:0c:a4:68:5e:60:
a3:2e:d8:eb:c6:cb:2c:ce:7e:f9:33:60:44:fe:07:
f7:09:74:85:1a:65:99:aa:25:5d:2d:9a:d2:23:41:
04:c1:17:98:c9:ea:26:87:92:5a:58:b8:30:a7:04:
43:4c:b3:a4:ef:18:04:c2:c0:52:67:fc:9e:36:d8:
62:f3:e9:c8:41:12:4a:d2:7c:b1:67:22:1f:12:38:
f6:55:9f:41:67:6c:b9:fb:00:86:3d:ef:de:cd:28:
c3:82:c9:5e:09:11:bb:ae:58:20:97:29:0b:d8:15:
f3:f0:a3:83:ed:02:2d:1b:d5:31:9a:38:bc:d5:54:
7e:20:62:02:97:a0:9b:f5:e8:fe:f8:f6:8c:ad:9d:
44:15:e8:af:3f:ba:da:84:cc:22:3d:98:22:a9:89:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:76:10:72:8F:24:F3:CD:12:7D:4D:D4:50:43:50:AE:5B:F6:B1
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:da:64:60:37:eb:cc:f2:9a:43:96:dc:34:0b:99:fb:ab:bd:
73:17:a8:ae:84:53:50:78:a3:7b:d1:96:1c:64:ef:2b:47:35:
14:e5:02:ed:bf:cd:cd:df:20:a4:bb:93:2c:a1:eb:db:4a:3b:
11:20:e5:e6:1b:23:7d:f3:99:49:8d:f0:62:cd:39:f0:af:5b:
c8:4a:15:c8:6e:47:75:0d:56:3f:0f:e0:9a:f7:dd:71:b8:ea:
8f:5b:93:10:80:50:09:61:6a:e9:39:f5:88:ca:d6:05:c0:f2:
47:38:47:7d:f2:83:fd:1f:a3:91:ec:a0:ce:4f:14:36:7f:34:
d9:ef:5b:12:11:dd:45:aa:bc:6b:a9:97:f1:63:02:9e:73:69:
aa:69:50:4a:08:93:60:61:40:63:7b:e0:f3:d4:a1:70:26:b0:
0c:8b:63:6d:00:a7:99:98:26:d5:78:62:87:1f:19:c6:b9:da:
45:34:ec:8c:8c:fc:03:a7:5c:5f:f5:31:48:b1:08:8f:36:cc:
03:2c:45:30:4c:17:fd:22:57:7c:89:58:22:8c:ed:ce:d9:0d:
5b:0d:77:8d:f7:45:8a:f1:69:42:02:28:c0:87:fa:ff:b8:54:
71:b0:23:59:55:00:3e:b0:34:57:99:fd:c0:83:a6:fa:3a:81:
71:5b:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:23:38 2026 by rpki-client