
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: 5oB5be2TwulFxwCN48F4q0TI67j9hEEzByYr+cJEKiE=
Subject key identifier: 69:5E:8A:4B:82:4F:B7:2C:FE:91:30:29:77:46:BB:44:6B:25:9F:34
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 01A12AD7128A84D4D34C7FC01C98A8619333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 146E
Signing time: Sun 11 Oct 2026 12:01:40 +0000
Manifest this update: Sun 11 Oct 2026 12:01:40 +0000
Manifest next update: Mon 12 Oct 2026 12:01:40 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: 1RNhHXskk6Bh6y6Grs4x1hV0GKhJIdS/8CkslgG1Aig=)
2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:12:8a:84:d4:d3:4c:7f:c0:1c:98:a8:61:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Oct 11 12:01:40 2026 GMT
Not After : Oct 12 12:01:40 2026 GMT
Subject: CN=695e8a4b824fb72cfe9130297746bb446b259f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:f1:5e:05:be:5d:dc:40:7c:6b:52:13:44:
bc:af:57:64:7f:8b:9e:c3:61:3b:08:00:45:6c:2e:
01:f4:db:2b:71:97:56:02:25:93:04:91:6c:e3:b3:
40:f3:8c:6a:49:d9:0d:f5:5e:25:b3:76:be:de:bf:
a6:3c:c6:8a:1d:8a:ee:b4:0a:9c:32:4e:80:4a:79:
16:08:f5:17:31:74:86:fb:18:f1:75:b0:ab:98:71:
52:a1:50:83:13:62:3b:b3:7c:13:da:2e:64:67:b2:
e3:a1:45:7b:0e:ca:2b:7c:a7:9f:d6:4a:90:8e:04:
f4:af:ce:88:f7:29:ec:7d:77:cb:86:bd:75:75:12:
5b:89:b4:d4:b1:56:d6:c6:b1:2c:cb:8d:86:88:1f:
e8:db:90:ef:be:bf:1b:f8:ee:87:74:53:c3:ae:dc:
6c:c6:a4:42:1d:2e:35:bc:19:cb:09:87:fd:56:8a:
0a:01:d4:9d:bf:fb:ff:91:7d:9b:c1:92:73:eb:04:
ee:f3:16:c2:29:28:8b:90:02:75:4b:ad:f0:ba:90:
43:bc:15:ea:5a:d5:ca:f5:93:57:95:67:e4:bf:b6:
2b:2d:a2:46:d3:85:7e:10:be:a4:de:6f:c8:e2:91:
3a:e8:2f:a9:55:2a:3f:89:e7:db:d7:75:bc:65:1f:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5E:8A:4B:82:4F:B7:2C:FE:91:30:29:77:46:BB:44:6B:25:9F:34
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:47:92:d9:8c:75:e2:e5:ca:d7:7a:5e:a9:89:f2:bd:79:
a3:66:ab:32:ef:bf:a7:68:21:20:5a:3c:f9:d8:1a:31:c6:55:
19:42:85:e0:08:96:86:57:5b:c0:cc:bc:bb:58:49:bd:95:22:
21:5d:43:4e:a4:d5:9b:c9:e5:11:6f:94:9e:e0:42:ad:cc:64:
f9:db:d1:c4:0b:53:46:9f:29:14:5c:d8:05:c6:e5:d1:48:5c:
e4:19:13:6d:a8:a7:d9:e7:97:b3:91:dd:5a:d3:b2:f3:e5:9a:
a0:db:53:3a:a8:6a:8d:4f:67:42:22:db:15:ad:6a:ca:68:f1:
a5:5f:99:ec:4d:4e:ae:13:69:fb:92:01:15:0a:b8:ef:de:ff:
05:a3:3e:23:9c:59:20:64:46:ae:20:ed:d9:9c:65:3b:c3:5e:
00:96:70:22:f2:97:25:3a:b8:17:f4:6d:3f:ca:25:28:24:da:
a3:cb:d6:68:6f:f6:06:e3:53:22:9d:b7:7b:25:3c:a1:37:8f:
d8:55:7e:03:f7:0b:36:6c:7c:f6:08:26:48:25:62:25:6e:0c:
78:71:6d:f2:9f:46:dd:f9:21:b1:81:a1:a3:16:0f:0d:30:7e:
b1:bc:60:0d:6e:58:53:e6:97:e8:97:43:4e:e6:5d:57:a4:21:
5b:b8:ff:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEq1xKKhNTTTH/AHJioYZMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTg1MTIwZTdhM2I5NjJiOWZmZTRhYmVkMTZkMGFhM2Ez
MjA1MTgwHhcNMjYxMDExMTIwMTQwWhcNMjYxMDEyMTIwMTQwWjAzMTEwLwYDVQQD
Eyg2OTVlOGE0YjgyNGZiNzJjZmU5MTMwMjk3NzQ2YmI0NDZiMjU5ZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB3xXgW+XdxAfGtSE0S8r1dkf4ue
w2E7CABFbC4B9NsrcZdWAiWTBJFs47NA84xqSdkN9V4ls3a+3r+mPMaKHYrutAqc
Mk6ASnkWCPUXMXSG+xjxdbCrmHFSoVCDE2I7s3wT2i5kZ7LjoUV7DsorfKef1kqQ
jgT0r86I9ynsfXfLhr11dRJbibTUsVbWxrEsy42GiB/o25Dvvr8b+O6HdFPDrtxs
xqRCHS41vBnLCYf9VooKAdSdv/v/kX2bwZJz6wTu8xbCKSiLkAJ1S63wupBDvBXq
WtXK9ZNXlWfkv7YrLaJG04V+EL6k3m/I4pE66C+pVSo/iefb13W8ZR/1FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGleikuCT7cs/pEwKXdGu0RrJZ80MB8GA1UdIwQY
MBaAFOcYUSDno7liuf/kq+0W0Ko6MgUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgt
ODljNjQyMGQ2ZjM2LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgtODljNjQyMGQ2ZjM2
LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgJHktmM
deLlytd6XqmJ8r15o2arMu+/p2ghIFo8+dgaMcZVGUKF4AiWhldbwMy8u1hJvZUi
IV1DTqTVm8nlEW+UnuBCrcxk+dvRxAtTRp8pFFzYBcbl0Uhc5BkTbain2eeXs5Hd
WtOy8+WaoNtTOqhqjU9nQiLbFa1qymjxpV+Z7E1OrhNp+5IBFQq4797/BaM+I5xZ
IGRGriDt2ZxlO8NeAJZwIvKXJTq4F/RtP8olKCTao8vWaG/2BuNTIp23eyU8oTeP
2FV+A/cLNmx89ggmSCViJW4MeHFt8p9G3fkhsYGhoxYPDTB+sbxgDW5YU+aX6JdD
TuZdV6QhW7j/zQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:40:04 2026 by rpki-client