Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: 8INBON/CWonucWHRMrpip0bQ6FATFgitcVopy7A2GWY=
Subject key identifier: EC:CE:14:66:1C:58:78:11:FC:14:FA:1A:1A:C6:50:22:DE:6F:DE:B5
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 01A0DA28A0C0F2F25B4E70A1D23E8E15DF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 20:01:30 +0000
Manifest this update: Fri 25 Sep 2026 20:01:30 +0000
Manifest next update: Sat 26 Sep 2026 20:01:30 +0000
Files and hashes: 1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=)
2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: UIdZnkTLXPLxrWCV7D99ltFppBl33IU4JyHXk6tBSTk=)
3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=)
4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:a0:c0:f2:f2:5b:4e:70:a1:d2:3e:8e:15:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Sep 25 20:01:30 2026 GMT
Not After : Sep 26 20:01:30 2026 GMT
Subject: CN=ecce14661c587811fc14fa1a1ac65022de6fdeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:47:05:24:2a:15:c3:80:e4:1a:2e:49:6a:
15:54:40:33:ba:7d:e4:dd:aa:d7:8f:94:34:55:67:
00:79:fe:09:97:9f:9e:74:ed:bd:b8:db:ac:2c:b2:
f4:83:0e:5b:da:e1:e9:4d:34:18:56:cc:7b:3c:3b:
38:35:2a:1f:cd:e0:8b:c3:82:e1:b6:db:95:23:55:
e0:11:4a:a1:23:33:6e:e9:0b:d1:95:38:01:88:ed:
03:98:53:cf:57:cf:19:25:04:b7:b4:8a:57:e5:a6:
a7:b1:28:50:c3:db:99:8a:e7:75:d3:62:1b:01:75:
76:14:80:14:19:86:75:62:82:06:53:55:f1:00:9f:
03:f1:62:ca:5a:86:97:95:36:3f:48:30:42:ff:d6:
32:ee:97:4c:d4:29:05:ca:89:cb:54:49:7a:72:dc:
e9:2b:43:46:9e:5d:2b:e5:fd:cd:d2:21:f8:9e:cd:
7c:94:a8:e8:32:ae:74:1a:66:ad:aa:ab:26:75:32:
2c:65:78:b2:5c:ec:b9:a6:19:b1:34:fa:ae:c1:4a:
87:72:c4:0d:d7:1b:0c:61:c2:8b:bc:35:8a:ed:df:
e3:e8:64:a6:73:a1:3e:e0:39:73:b6:d6:5a:6f:86:
29:fc:f8:f2:85:c7:2c:58:49:69:92:31:b3:55:27:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CE:14:66:1C:58:78:11:FC:14:FA:1A:1A:C6:50:22:DE:6F:DE:B5
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3f:29:04:95:72:16:bd:9b:2a:93:54:eb:30:dc:f6:86:cc:
8c:1c:61:aa:09:c4:ec:0f:ee:5b:da:d2:62:bf:a1:7e:5e:c3:
16:95:da:92:42:89:fa:c7:8c:f2:ee:84:92:16:ec:50:5d:bd:
75:37:17:fc:37:10:54:4c:ff:90:8f:8c:4b:53:eb:29:7b:20:
90:db:ab:c8:cc:42:c1:ce:71:04:8f:bb:48:27:11:8b:45:26:
7f:98:95:6e:96:f8:3b:f0:53:fb:20:e1:ef:2a:69:4f:fa:86:
d7:f3:0d:35:a6:13:43:55:4f:1c:33:77:e5:47:24:58:a9:3a:
3f:3c:05:3a:70:64:b6:36:3f:1d:80:82:9a:dd:26:d4:9a:c6:
92:79:ab:53:dc:16:3f:b9:bc:1c:5c:a8:c7:b3:5c:95:9f:e4:
ac:8c:fe:94:c9:07:99:14:d2:9d:85:03:95:30:35:97:7b:fe:
2a:13:db:1c:63:dc:24:6a:3c:29:8d:d3:cd:f2:3c:5d:c2:34:
c0:92:a5:84:ba:0f:a4:5f:15:f9:4d:70:d2:1e:a9:7a:6d:db:
0a:60:76:5b:4a:60:d2:53:a4:3e:e5:13:2c:25:79:d2:46:b6:
fd:32:27:47:0f:cd:77:8a:c6:85:61:d1:77:2f:1f:d1:d6:38:
9e:00:ad:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKKDA8vJbTnCh0j6OFd8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi
N2YyZTcwHhcNMjYwOTI1MjAwMTMwWhcNMjYwOTI2MjAwMTMwWjAzMTEwLwYDVQQD
EyhlY2NlMTQ2NjFjNTg3ODExZmMxNGZhMWExYWM2NTAyMmRlNmZkZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ulHBSQqFcOA5BouSWoVVEAzun3k
3arXj5Q0VWcAef4Jl5+edO29uNusLLL0gw5b2uHpTTQYVsx7PDs4NSofzeCLw4Lh
ttuVI1XgEUqhIzNu6QvRlTgBiO0DmFPPV88ZJQS3tIpX5aansShQw9uZiud102Ib
AXV2FIAUGYZ1YoIGU1XxAJ8D8WLKWoaXlTY/SDBC/9Yy7pdM1CkFyonLVEl6ctzp
K0NGnl0r5f3N0iH4ns18lKjoMq50GmatqqsmdTIsZXiyXOy5phmxNPquwUqHcsQN
1xsMYcKLvDWK7d/j6GSmc6E+4DlzttZab4Yp/PjyhccsWElpkjGzVSdFYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzOFGYcWHgR/BT6GhrGUCLeb961MB8GA1UdIwQY
MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt
YjdkYzgzNzA2YTJhLzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh
LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID8pBJVy
Fr2bKpNU6zDc9obMjBxhqgnE7A/uW9rSYr+hfl7DFpXakkKJ+seM8u6EkhbsUF29
dTcX/DcQVEz/kI+MS1PrKXsgkNuryMxCwc5xBI+7SCcRi0Umf5iVbpb4O/BT+yDh
7yppT/qG1/MNNaYTQ1VPHDN35UckWKk6PzwFOnBktjY/HYCCmt0m1JrGknmrU9wW
P7m8HFyox7NclZ/krIz+lMkHmRTSnYUDlTA1l3v+KhPbHGPcJGo8KY3TzfI8XcI0
wJKlhLoPpF8V+U1w0h6pem3bCmB2W0pg0lOkPuUTLCV50ka2/TInRw/Nd4rGhWHR
dy8f0dY4ngCtnw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:10:27 2026 by rpki-client