Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: wHw+l547yFu9j39DN/NyNMOhEMWknXqiz0GDn1nzUhE=
Subject key identifier: E6:2A:61:C8:78:22:7A:B8:01:8C:CE:6B:D2:06:D5:68:6B:4D:EE:78
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 01A0D3B88F31E4D6646B860477199943C808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0E5D
Signing time: Thu 24 Sep 2026 14:01:22 +0000
Manifest this update: Thu 24 Sep 2026 14:01:22 +0000
Manifest next update: Fri 25 Sep 2026 14:01:22 +0000
Files and hashes: 1: 4GxbIuH661wSAuRQff8xB62kOr8.roa (hash: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: 6zsOWED88bnrGs6b+bvakH+hRA9/KReMD+calrohYfc=)
3: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (hash: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:8f:31:e4:d6:64:6b:86:04:77:19:99:43:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Sep 24 14:01:22 2026 GMT
Not After : Sep 25 14:01:22 2026 GMT
Subject: CN=e62a61c878227ab8018cce6bd206d5686b4dee78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:68:6e:10:4c:fb:2b:33:c6:c9:b6:1a:41:
0a:08:b5:7b:81:b6:11:f3:5d:b3:45:a8:c8:af:f9:
3d:fc:e7:6e:93:98:2b:1b:01:54:66:1e:3e:12:25:
5d:ab:ba:83:ff:66:70:2f:b4:aa:a6:da:a1:67:65:
fc:c4:21:cd:3e:66:e4:bd:f3:5f:29:b2:22:ba:fb:
42:d7:4d:52:00:95:ef:e3:40:4a:a6:18:03:3a:80:
7c:99:0e:4a:05:7a:dc:f6:5d:f0:68:c5:88:25:ad:
61:80:28:ae:b2:4f:8a:ce:10:39:36:74:36:e5:97:
25:16:f4:5f:13:26:14:03:71:19:db:0e:e8:50:6d:
05:3a:aa:0d:32:42:de:22:ed:f2:be:fe:39:c8:45:
bc:d6:ee:40:d6:f1:90:f3:9c:1a:56:d3:66:b8:a9:
2b:8e:0e:87:32:31:36:32:a2:24:51:50:82:49:58:
61:80:9f:33:fe:9b:6b:90:07:cb:d6:ad:a7:ed:58:
3c:05:89:6d:cc:ac:0d:77:8f:74:19:0b:cf:b4:31:
dd:08:6f:17:35:1b:13:56:c0:0c:0f:28:59:35:f1:
99:a3:67:14:ac:c3:cc:0b:ec:a8:19:db:46:20:3f:
38:73:7a:45:5a:f4:ef:50:c7:24:84:46:a7:48:ea:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:61:C8:78:22:7A:B8:01:8C:CE:6B:D2:06:D5:68:6B:4D:EE:78
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:94:27:69:7b:3a:d2:a9:fa:b2:0e:dc:88:10:f1:50:b2:13:
ff:1f:dc:8b:5f:48:af:54:67:e4:79:32:8c:c6:d7:64:fe:68:
4b:36:80:22:16:b0:51:ab:4b:a8:e5:62:e5:84:1a:fa:ed:0d:
45:54:5f:56:06:55:92:f8:93:df:77:e7:2b:d7:d1:1d:b5:78:
d8:4a:76:7a:f2:1f:a1:50:73:42:64:3d:bd:bc:a3:7c:71:36:
e3:56:fe:f2:1b:cd:7b:66:62:2a:08:91:6b:08:2e:53:b5:78:
ad:4b:53:0e:72:8e:bb:16:95:de:13:19:8b:c4:13:63:77:de:
f9:05:ea:0c:70:b5:4b:bb:83:a6:b3:f9:60:84:ce:33:55:8e:
d9:6a:a8:10:01:80:94:3c:b0:1d:a0:c6:89:df:7c:28:e1:f3:
16:cf:2a:25:b8:b6:4e:f3:d9:12:d4:63:66:96:9e:f7:a7:21:
b7:ab:c7:a6:1e:0a:6d:19:9e:b8:23:f3:93:a9:1f:e7:fb:08:
24:fd:51:92:e1:9b:71:52:3b:27:5b:7a:4d:ed:f1:4f:45:67:
c0:63:21:33:d6:bd:e1:49:6f:66:a5:81:6d:ba:35:a0:47:fd:
af:35:51:61:35:c0:c9:ff:b1:51:bc:15:1d:cf:70:57:a4:73:
8e:14:3f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:37:55 2026 by rpki-client