Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: 4jphDTUJxIURpcvd9//CcQ3KFbhqO5V7yiYD4w824Fc=
Subject key identifier: 3F:13:1B:46:D9:AE:CB:A3:82:C1:E3:FC:CF:6B:C4:9F:A2:4F:7D:97
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 01A0D3EFA8859179B6EC1A2F5F48F6BD3461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: 0286
Signing time: Thu 24 Sep 2026 15:01:33 +0000
Manifest this update: Thu 24 Sep 2026 15:01:33 +0000
Manifest next update: Fri 25 Sep 2026 15:01:33 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: p2K0na7G2Zz56vqTMwooOClsCSFgBq0SlqKCCpAry4M=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:a8:85:91:79:b6:ec:1a:2f:5f:48:f6:bd:34:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Sep 24 15:01:33 2026 GMT
Not After : Sep 25 15:01:33 2026 GMT
Subject: CN=3f131b46d9aecba382c1e3fccf6bc49fa24f7d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:6a:f5:fa:63:ed:ee:b7:c5:ba:f4:2a:e2:
01:a0:b7:8c:ba:af:44:f4:77:3c:3f:cf:1c:46:50:
fc:3b:52:d4:a0:f8:22:bf:ca:5e:8d:1c:18:5d:d8:
37:92:8c:82:b0:ba:3f:bc:69:b2:81:3a:c4:9a:f5:
20:e7:ec:9e:88:1d:77:48:7f:cc:ff:af:6f:ba:b6:
14:8a:c3:4c:1b:13:1e:ae:dd:dc:d8:e6:f9:f5:2f:
53:9f:2f:5b:24:73:66:16:33:29:7c:a2:b0:ec:59:
ec:a7:3a:83:08:54:36:50:64:fa:ea:a1:a7:e7:af:
35:d9:b5:6c:7f:21:03:9f:4e:c5:b4:41:ac:1e:a4:
33:ac:98:b8:5e:1d:fd:9c:47:9e:43:d7:81:2b:a1:
99:e9:34:ad:3f:3f:02:92:3a:cb:8b:be:c8:81:47:
d8:cc:98:42:e5:a8:ba:46:c3:c1:98:80:55:e5:41:
68:0f:3e:d7:28:54:f2:38:f5:9d:23:03:48:9d:ce:
0e:4d:9b:86:14:db:5b:96:72:c6:28:29:1c:92:87:
f9:57:00:3b:c9:e8:a1:7e:18:36:c2:2a:af:1a:20:
f3:52:d2:c4:1b:f2:ff:f9:b4:44:aa:7c:47:44:79:
3a:04:f7:a4:84:02:44:b0:4b:f5:67:d0:90:7b:01:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:1B:46:D9:AE:CB:A3:82:C1:E3:FC:CF:6B:C4:9F:A2:4F:7D:97
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:da:fd:60:d5:ba:4b:51:bf:6f:f5:d3:ed:af:b6:b3:18:ab:
56:f7:d9:03:33:ab:2f:52:d8:e6:73:16:66:6d:53:93:14:03:
d9:93:32:e4:cf:9a:8e:0c:c7:bc:86:fb:30:2d:8e:75:d8:81:
78:0a:9d:26:39:f7:de:2c:9d:92:a7:6b:14:27:1f:ab:8b:d8:
03:c4:1e:cf:00:89:3e:b3:1a:c4:f1:02:2e:3e:23:3b:c6:0b:
f9:8f:74:00:00:60:d7:85:2a:ec:f4:0b:d7:d2:6c:81:c0:8d:
ac:92:5e:11:45:7a:e3:9a:00:33:de:01:d0:eb:ac:26:ef:fb:
1b:94:ca:21:ef:ea:66:ab:ef:9d:c2:f6:e4:ec:87:8f:50:3a:
1d:ac:96:c7:10:e4:fe:da:bf:8c:fd:9b:4e:67:5f:0e:dc:48:
c2:c8:e1:32:b8:c7:fe:dc:73:9a:66:d8:60:0e:bd:21:ba:64:
11:72:88:98:cf:42:4f:f8:e0:f2:4f:0c:df:9d:68:49:76:07:
02:09:f5:84:28:c8:61:60:e0:af:a9:78:b6:23:d4:2b:70:3f:
18:34:38:0b:b0:e5:d0:e8:52:79:6a:a3:9e:8c:e4:d5:94:9a:
98:48:de:44:81:a0:b4:1e:ec:cd:69:9b:b9:af:63:27:a2:d4:
60:be:dc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:21:18 2026 by rpki-client