Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
File: s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json)
Hash identifier: xK3/pvTtR1ntrE5K1DyHTRl8M52TGq7kDFFnxC2Ft8M=
Subject key identifier: 33:E3:B1:CC:C9:CA:DE:24:9F:7B:B4:D7:9F:43:AD:32:9B:D8:EA:75
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Certificate issuer: /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial: 01A0CE5A70468E3255B56074F3C6426DE8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
Manifest number: 028E
Signing time: Wed 23 Sep 2026 13:00:28 +0000
Manifest this update: Wed 23 Sep 2026 13:00:28 +0000
Manifest next update: Thu 24 Sep 2026 13:00:28 +0000
Files and hashes: 1: ptxNY_ik7GTtx3Nvsz1IktW_2ug.asa (hash: zaORMCc6le7BfLENyKhZEMkSVb/nKVxd6bCWLklbXHA=)
2: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: /h/mFE4RAetOEI9BTsrTeoi7PSu/DnbSrx4cStnYAUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:70:46:8e:32:55:b5:60:74:f3:c6:42:6d:e8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Validity
Not Before: Sep 23 13:00:28 2026 GMT
Not After : Sep 24 13:00:28 2026 GMT
Subject: CN=33e3b1ccc9cade249f7bb4d79f43ad329bd8ea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:49:12:99:21:e5:e1:e5:41:de:21:9a:6b:
2d:52:04:75:0e:05:a4:b8:50:90:33:56:2f:d4:e0:
20:45:b6:92:74:f5:10:00:f0:e9:4d:4d:26:0c:e6:
33:12:65:bb:8b:4c:bd:9b:65:98:53:09:56:8e:55:
cb:53:5c:64:2b:ee:06:1d:a7:1c:d6:fc:a5:8f:cb:
1e:79:6d:72:6a:a4:14:eb:67:ba:f9:59:55:b6:5c:
e4:4b:8b:ae:78:c6:33:52:66:de:a6:b9:0b:a2:7f:
10:65:0c:dd:11:ad:26:62:71:88:d2:98:b5:a9:94:
12:cc:6e:c8:e0:25:c8:2b:73:2d:44:67:ec:4b:15:
f9:e6:90:43:a7:b3:5f:d3:9b:01:8b:74:04:5e:03:
e0:2f:69:f6:d1:4e:63:6d:bb:21:2f:3b:1d:8e:fc:
73:20:63:cd:1e:b6:bc:a1:88:a0:e2:65:47:9a:44:
bd:33:49:bc:69:f5:80:76:0f:74:3a:1a:ab:e9:c8:
78:0c:ee:d7:61:b7:2f:ff:39:b9:c1:68:a1:0c:03:
dc:80:72:cd:d2:f4:33:bb:8a:c1:b5:e2:53:65:a8:
34:44:8f:d4:73:5b:f3:25:5a:a2:80:ff:ed:ec:46:
2f:bf:e4:c4:a4:53:de:3d:31:7d:0a:9c:1b:ee:7e:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:B1:CC:C9:CA:DE:24:9F:7B:B4:D7:9F:43:AD:32:9B:D8:EA:75
X509v3 Authority Key Identifier:
keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b0:b6:4c:8f:9d:8e:2e:43:82:7c:5c:9d:2b:93:a6:2a:14:
ea:6a:c2:90:33:69:a1:de:73:36:e8:06:b3:d4:af:f9:4b:22:
fd:c2:a5:b5:29:8a:ca:38:2f:a5:ec:08:a0:c0:94:f9:da:79:
6d:10:ee:d9:8d:31:45:be:18:a3:fa:48:1d:8a:45:54:37:ff:
40:bc:e7:8c:c8:26:23:7f:97:57:3f:12:5d:3f:8b:5e:3f:77:
b9:5d:7c:81:91:f9:60:35:8c:b7:a4:46:a3:aa:d7:c1:2d:30:
2a:b6:20:a2:58:1d:2c:21:6c:40:f0:59:77:da:48:23:8b:ad:
2d:77:cb:3b:cc:48:dc:9f:b4:cc:f1:3a:65:d8:79:06:88:b4:
bf:c4:bc:93:c6:ee:00:8d:9e:99:30:9a:ff:d4:73:84:76:4d:
2f:bd:87:11:0f:5d:6f:ab:88:a8:c9:6d:ef:8c:e0:e7:4e:36:
75:e6:34:9f:44:b8:0b:38:1f:20:f2:b6:eb:f0:81:07:de:a9:
b0:63:94:db:94:ea:19:0d:04:4a:8d:aa:4c:9b:6f:b3:ae:8b:
10:2b:9a:3d:90:fb:25:96:ed:82:86:93:d0:9b:c7:80:d5:9e:
80:44:03:cb:4d:41:84:f3:cf:4b:f8:2f:e6:a2:9b:57:2b:7c:
18:b9:ce:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:29:55 2026 by rpki-client