Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File: 5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier: 6dNn/rfqoncvsNKllAE5Prr8w46I+pQX2AzK3fpgIQk=
Subject key identifier: 70:74:CD:73:BA:F6:9F:D2:5D:C1:83:3C:2C:36:9A:AF:C0:76:2A:79
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial: 01A0CE5A2B257015A3075AFB2C446B76BF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number: 15BC
Signing time: Wed 23 Sep 2026 13:00:10 +0000
Manifest this update: Wed 23 Sep 2026 13:00:10 +0000
Manifest next update: Thu 24 Sep 2026 13:00:10 +0000
Files and hashes: 1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: 4AVfqt51rVUFLG1n9l8rq5EcF9cDXw7mWsfHnjy/N9o=)
2: xyBwWE1V7pzMi_BB3s_8J8GEyes.roa (hash: taqunFOi7PSx5Yj4Rqnf0/xGpAdLHU4niJLVDbS+7yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:2b:25:70:15:a3:07:5a:fb:2c:44:6b:76:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Validity
Not Before: Sep 23 13:00:10 2026 GMT
Not After : Sep 24 13:00:10 2026 GMT
Subject: CN=7074cd73baf69fd25dc1833c2c369aafc0762a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:00:7a:c4:4d:b0:c3:c6:18:ab:5e:05:0e:
dc:db:9e:5c:80:82:f7:58:cf:08:d8:02:46:f0:17:
f3:da:a0:c4:9c:46:fb:8a:b7:64:b0:bf:d5:f8:0e:
65:18:bf:d5:b4:a7:ca:18:fc:68:5d:5e:68:1c:fa:
f9:11:b0:84:47:38:1b:16:4d:da:be:60:ef:1a:29:
4c:fb:b4:e8:64:65:ff:70:22:6b:44:7f:1b:59:33:
53:84:4e:38:d1:4e:85:21:3b:17:9c:29:e3:12:41:
83:88:02:d2:f6:7c:97:59:8a:65:f9:5c:a4:82:71:
f4:42:52:c1:61:98:94:8a:f7:5e:a9:00:f9:e6:6e:
a8:54:f7:d5:9e:e4:25:8d:62:a9:0a:30:81:1b:6e:
00:55:ab:9f:f5:6b:58:71:8f:c7:24:02:38:46:a2:
bc:65:03:d7:d4:17:8d:91:5f:a6:d6:ca:c2:6f:1a:
34:5c:35:b4:35:40:e1:40:85:35:12:19:54:e5:61:
3b:09:73:9f:8d:25:0c:c7:ac:be:dd:93:56:3b:e0:
78:2e:fe:dc:e0:5c:08:23:9b:87:8e:1e:12:da:37:
90:d5:63:19:e7:ed:ff:2c:3b:70:06:ee:89:96:0a:
24:17:0e:c2:0c:da:ef:cc:8a:f1:11:02:7c:38:f6:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:CD:73:BA:F6:9F:D2:5D:C1:83:3C:2C:36:9A:AF:C0:76:2A:79
X509v3 Authority Key Identifier:
keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2d:ef:6d:3c:0b:71:e3:87:5c:89:40:0c:79:74:fa:c3:a8:
60:f9:52:db:52:c9:f4:6c:1f:5b:67:71:10:47:bb:d8:65:ae:
0e:c0:5d:91:0b:9e:a5:92:c2:33:18:8f:a8:a9:51:fc:88:04:
ff:53:55:29:c7:ea:14:2e:db:c4:66:72:5d:60:e8:60:4e:2b:
a9:2c:5e:d0:76:cb:8f:a9:a0:6b:00:f2:8c:1f:d3:fc:86:ba:
12:c5:5b:86:8c:25:f8:fb:4b:5f:96:bc:f9:88:8c:80:39:ff:
1e:ed:50:13:ed:e0:41:21:70:db:2a:62:a6:28:6f:85:94:41:
b2:22:bd:cc:8c:c3:70:ac:8b:45:ba:d2:dd:9f:c2:19:7e:9f:
36:32:94:4e:d5:11:db:bd:ee:2e:55:29:24:b5:8b:fb:5f:f6:
f7:ec:1c:c2:c6:15:31:f9:1a:94:77:89:e6:dc:a2:64:1d:a7:
44:40:55:bb:45:40:18:0f:63:e5:79:9e:8c:7c:3c:e7:d4:2b:
6e:a1:38:23:29:d5:c5:f5:24:ca:c2:0e:63:da:cd:1a:6e:06:
e8:45:26:47:da:b9:06:49:fa:70:5a:08:a4:78:51:ef:4f:f0:
b6:de:d9:80:33:ee:15:5c:af:d9:35:d0:ae:0d:b4:d5:65:8a:
1d:fc:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:41:24 2026 by rpki-client