Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier: ERqJZKdYjIplxD4NtEyayJG5AeAuNEUTGo+Gy8c26Ro=
Subject key identifier: 48:3A:A1:2E:7E:7E:EC:35:7D:20:60:C0:EC:96:61:D4:EC:9E:4F:8D
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01A0E7E451AC43C2DE4A8090BACE423C8A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number: 1AFC
Signing time: Mon 28 Sep 2026 12:01:35 +0000
Manifest this update: Mon 28 Sep 2026 12:01:35 +0000
Manifest next update: Tue 29 Sep 2026 12:01:35 +0000
Files and hashes: 1: 0xg0LHFmIAhRMpdSsXPI-Ie_PsI.roa (hash: WHzwzDrG+iQh9uqHG4tV1Yh6NKaFw5D08VOYk/ojXTc=)
2: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: d+15YScTPKhWF5zvY0knKDo3A8LfhRrOtduSzHKk/8A=)
3: azXt4JSrhCkbBDLougb_ea1t6os.roa (hash: zCtBx08/hOTifYY1efRidpEdm3U/OsYy+2PnGFcIFuE=)
4: gdnHCqqe5rlMSp9i8jMZn3G-JI0.roa (hash: GuKm6FGiC6+g1cfZPjiSiXudASUHHAsp+U2KF1cnbTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:51:ac:43:c2:de:4a:80:90:ba:ce:42:3c:8a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Sep 28 12:01:35 2026 GMT
Not After : Sep 29 12:01:35 2026 GMT
Subject: CN=483aa12e7e7eec357d2060c0ec9661d4ec9e4f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:16:05:0f:bc:07:89:50:49:b7:66:47:96:
aa:aa:d5:b0:56:fb:8d:c2:af:ac:e7:17:06:c8:fb:
dd:96:67:0e:80:0b:17:1a:e9:68:68:a1:c1:e1:16:
fc:fd:cd:ae:8f:2a:8d:d4:ec:21:b0:92:33:76:fa:
f2:db:fa:63:ab:ba:f8:a2:28:5a:84:a3:a6:79:35:
52:c5:a2:cd:24:21:6d:f7:9f:e6:40:57:f0:d4:92:
31:97:d9:b9:24:ad:92:49:c1:d3:4c:97:88:c6:e8:
ab:f4:c7:7a:a9:63:df:5c:87:ba:0d:52:93:05:8f:
8a:8b:03:cf:34:cb:2d:5e:da:d6:6a:7b:f4:56:8f:
a2:6a:bf:b8:c0:dc:1b:14:88:3e:46:a6:03:ac:4e:
97:45:3b:38:1f:6b:ef:d0:0a:b4:c4:85:c3:1c:e1:
56:bc:47:4c:dc:1c:0a:e4:eb:d0:43:d4:95:81:a4:
ab:c3:9b:d2:5f:c6:11:7f:87:b7:6d:25:5a:aa:b5:
eb:ba:09:7d:47:0a:5d:2d:16:09:c7:dc:91:d6:42:
7b:c5:02:c6:d6:71:c3:b0:55:4d:1b:e4:91:6f:84:
78:68:a1:55:9f:e3:d9:41:00:a6:01:b0:35:15:af:
60:03:7a:36:55:d8:9c:c8:0e:ad:f2:aa:8a:97:94:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3A:A1:2E:7E:7E:EC:35:7D:20:60:C0:EC:96:61:D4:EC:9E:4F:8D
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a4:8f:86:49:c6:18:96:18:19:7f:7f:d8:e2:32:dc:9e:d0:
2c:ec:d6:32:c6:10:a8:f8:d7:93:97:31:0a:44:8e:70:8f:53:
52:60:31:c0:68:fd:ef:b7:2a:76:49:f0:f1:d0:21:28:79:dc:
ad:78:3c:23:5d:f9:8f:16:fd:23:df:94:18:2f:d5:74:7c:4a:
f5:b6:4f:bc:09:e7:bf:64:a0:dc:46:fe:86:83:13:23:d4:9e:
ce:ab:a7:a6:4f:c7:e2:4e:e4:3f:67:3d:c1:4a:99:4f:a9:9d:
41:7c:02:86:5c:00:0d:ac:4b:86:e1:d5:ea:9b:ef:83:2e:72:
11:c5:8e:22:7b:a1:f2:d7:01:e9:43:b5:c4:7a:bf:cd:3d:d3:
2d:ad:ff:dc:18:22:45:3b:1c:05:e0:96:b1:7c:aa:53:ca:5e:
33:fc:af:97:73:62:e4:37:93:89:6b:f0:53:eb:76:00:8e:9e:
92:7c:ec:f6:b2:d0:86:64:8d:fd:7d:27:64:64:a6:d7:c7:b2:
81:dc:dc:42:ff:f6:92:1d:4c:ea:8e:94:d8:41:0f:76:c8:ab:
75:77:23:f9:43:c1:8e:4e:8b:f4:e6:70:bd:d6:11:85:af:12:
fd:52:37:48:f0:d3:bd:2a:fd:68:e1:0c:66:78:04:dd:be:35:
51:94:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:43:20 2026 by rpki-client