Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier: bHZf6V0ohi++d3N3G3l6C8t7TKuI9blawFbC597ABy0=
Subject key identifier: 92:D1:3A:BE:8B:43:83:C6:2F:61:42:D2:3F:56:B1:E5:7A:06:F6:A4
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01A0D538BA9562607681B87927D79D5E4A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number: 1723
Signing time: Thu 24 Sep 2026 21:00:59 +0000
Manifest this update: Thu 24 Sep 2026 21:00:59 +0000
Manifest next update: Fri 25 Sep 2026 21:00:59 +0000
Files and hashes: 1: 1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa (hash: r4s/pYFFvl0PuU1Pc1ZEalLcMszU2nIBrtcNDifNzEc=)
2: 59Qy54NWnnaF0UonsrF_AIsT2AM.roa (hash: fe8mUsn7ORXLXCy47FezO3nIOf1E6XAt4wFRWRU6mf0=)
3: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: yYbfCXJhSS/tOrFhjkn8hUdD3VbVbtVjyVphXxo0FQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:ba:95:62:60:76:81:b8:79:27:d7:9d:5e:4a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Sep 24 21:00:59 2026 GMT
Not After : Sep 25 21:00:59 2026 GMT
Subject: CN=92d13abe8b4383c62f6142d23f56b1e57a06f6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:93:53:4e:84:ae:d0:33:a5:15:e4:1b:f3:
11:a1:3d:5f:a2:a2:90:3b:be:3b:8b:9d:b1:2f:cd:
fb:6c:1f:a9:41:df:af:a9:1a:9b:f3:b2:b0:c1:91:
46:58:84:89:9b:51:33:b6:d1:09:19:2c:b9:e2:ff:
a4:0f:ee:97:e7:52:d2:da:7e:ac:95:9a:d4:6e:c4:
60:a2:39:06:e9:74:0e:ee:07:00:63:4b:35:38:b0:
9f:13:2c:9a:d5:4b:05:07:b5:3f:fc:08:6f:a0:37:
f8:20:d8:a1:cc:93:c9:7c:0c:4c:c3:1c:e9:6a:9d:
db:35:e9:34:5e:1b:20:24:f4:cc:79:9c:c5:d4:f8:
00:55:8e:0d:e3:e8:d3:e2:c6:d9:d3:d6:29:a8:26:
e5:ce:16:10:13:17:04:62:8e:10:97:38:2b:27:c5:
a8:24:96:26:74:11:f7:55:89:f0:a8:a2:3a:b7:d6:
7c:75:ec:e1:ae:cf:5d:81:bb:5a:30:bc:c9:bd:45:
24:c5:12:76:e1:83:82:11:d3:bb:2b:99:ec:b1:27:
57:1a:de:3d:b1:8a:bd:2f:1e:96:af:fa:f3:0f:96:
f8:af:1e:b3:a3:76:d1:e4:07:cf:19:e7:e3:75:05:
25:fe:13:1c:98:cc:29:70:33:4c:39:b4:db:8d:17:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D1:3A:BE:8B:43:83:C6:2F:61:42:D2:3F:56:B1:E5:7A:06:F6:A4
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:90:4f:40:98:8c:bd:b8:20:50:32:6d:88:4c:58:52:30:d6:
e7:81:78:d1:3a:67:02:18:fd:1f:91:55:1e:4d:58:9b:57:4a:
25:48:54:fc:d0:3e:65:36:2c:89:05:74:90:31:77:c3:aa:d7:
72:1a:8f:4f:72:0b:80:0c:2a:23:af:48:96:8f:4b:4c:9a:ba:
ae:5b:fa:54:0d:65:4a:3a:60:d2:e3:e6:68:b0:81:86:b1:b9:
47:dd:71:ec:a1:62:b9:3e:3a:c0:84:e7:6e:15:22:ed:f7:e8:
4b:4d:57:67:ec:dc:1d:7c:5e:a4:16:47:a4:07:f7:c4:31:c6:
2d:ac:4a:e9:33:4a:58:93:81:c0:94:4d:58:ea:c7:9a:ef:9e:
e6:eb:c1:7d:8e:ec:ee:b8:3f:ac:e9:c0:af:f3:47:50:00:3d:
d8:76:56:99:b5:bb:80:2f:97:76:d9:93:4d:2b:16:dc:81:35:
54:3e:88:ee:01:a6:06:71:13:ec:9c:63:93:32:0c:09:c1:ff:
d2:5c:41:3a:1e:9c:21:eb:b2:09:4f:87:a8:f2:74:89:06:2b:
42:c6:7f:f8:5c:91:7c:3d:3d:51:17:c2:7e:1a:52:df:ba:ad:
7b:cc:25:2c:8f:8c:f1:75:6e:b6:5c:28:08:f5:78:56:c6:b7:
b9:00:9f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:14:59 2026 by rpki-client