Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: qGRUae7gxo+mnclhYp+iJDoSHnMfc9R24U2PdnDGihQ=
Subject key identifier: A8:16:9C:D4:6B:7F:C3:AD:37:DC:0B:C9:8B:43:0C:7F:CA:CE:26:0A
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 01A0D08029CE5BF81EC1A59BCDD589BD3A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 073A
Signing time: Wed 23 Sep 2026 23:00:55 +0000
Manifest this update: Wed 23 Sep 2026 23:00:55 +0000
Manifest next update: Thu 24 Sep 2026 23:00:55 +0000
Files and hashes: 1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: 92SbxO4PNHKs1IFYidmAUeG91h2P3Ef1NANED02mQIM=)
3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:29:ce:5b:f8:1e:c1:a5:9b:cd:d5:89:bd:3a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Sep 23 23:00:55 2026 GMT
Not After : Sep 24 23:00:55 2026 GMT
Subject: CN=a8169cd46b7fc3ad37dc0bc98b430c7fcace260a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:f6:0c:c3:68:eb:99:72:a4:6f:07:db:f3:
b5:fc:61:62:8a:8a:6a:14:4a:be:87:6b:bb:cc:10:
0b:f8:70:ea:b9:63:27:90:c1:56:93:f7:3e:62:5d:
a0:db:1d:9b:69:90:64:9f:47:2c:51:1a:bb:86:00:
e4:5f:38:fe:01:3f:99:4a:19:e0:68:5b:08:1f:9c:
cb:84:b3:87:29:a3:ba:ad:e0:47:6f:f1:ff:6e:02:
f2:3b:01:10:a3:d9:2a:2d:ac:d6:80:11:33:ca:cf:
25:8f:95:15:9e:21:47:34:b1:71:b5:62:89:35:27:
ff:6e:1a:3c:89:f9:76:62:ed:62:c3:25:ca:33:df:
99:08:ad:86:20:b5:55:01:9b:be:26:b4:52:15:6f:
01:1d:98:d6:a8:d6:c2:e6:5b:b7:03:0b:7c:6f:d3:
1f:3f:a0:ba:17:96:47:b0:c9:49:03:55:97:f7:27:
10:d5:f5:d2:26:3c:fd:41:a8:e2:61:19:ee:78:97:
99:66:3d:8d:a3:60:bf:b2:d6:f5:dc:a5:b3:b5:dc:
23:b7:a2:d4:a6:f4:16:ff:2e:47:1b:76:80:9d:ad:
05:39:a3:2c:b5:cc:e2:4f:1d:e1:9f:95:b1:00:79:
ab:7f:bf:71:f3:18:6e:97:b4:d7:96:cc:c4:4b:d1:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:9C:D4:6B:7F:C3:AD:37:DC:0B:C9:8B:43:0C:7F:CA:CE:26:0A
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:36:d0:89:df:6a:d9:21:0d:de:51:d5:ed:74:80:aa:d1:f9:
18:e2:c7:7f:ed:47:39:e6:d6:5f:d9:17:68:5f:4a:8a:41:5d:
68:ea:6d:78:1e:60:1b:ff:92:be:55:c4:06:68:1e:85:84:ff:
0b:20:17:c3:12:6d:44:2f:6c:c0:3e:1f:c8:18:d8:56:37:f7:
85:5f:1e:b0:c0:ab:2a:5a:a8:4d:69:68:2f:8c:51:5c:42:46:
55:b1:80:0c:72:20:13:d7:30:87:b2:c1:27:bb:b5:32:22:2f:
41:96:80:4d:fe:48:4a:42:57:ec:36:fc:d4:e7:4a:16:47:19:
4a:ef:53:55:da:73:fc:d3:bd:a2:d3:a3:ff:c1:de:f0:9e:c2:
9e:d3:54:75:75:a8:eb:dd:a9:72:55:a8:4c:b6:18:d5:56:2b:
c1:f3:7f:84:b5:20:73:bc:e5:c1:33:4f:4b:e1:5b:87:90:54:
e6:19:8b:94:71:62:cb:81:77:90:9f:49:f8:46:d5:8f:f8:25:
0c:40:c4:04:be:b6:f5:99:93:e6:64:03:ad:e5:4f:0b:be:c6:
8c:15:33:e7:c1:66:f8:b2:22:13:97:53:95:21:cf:80:da:dd:
ce:b5:c8:94:5b:9b:4a:fe:59:6b:dd:2e:67:60:73:cc:40:be:
df:66:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:58:06 2026 by rpki-client