Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
File: 5u3M-9t7nhk-y-gVL7WilruJ1-k.mft (raw, json)
Hash identifier: Xix/sWzv22foo8x2BSE+09kd20NAkmlTV61Bb3+JHLw=
Subject key identifier: AD:BE:A2:DA:7F:D4:BF:E3:9A:0A:E7:FB:A8:14:B6:D7:68:3A:10:8A
Authority key identifier: E6:ED:CC:FB:DB:7B:9E:19:3E:CB:E8:15:2F:B5:A2:96:BB:89:D7:E9
Certificate issuer: /CN=e6edccfbdb7b9e193ecbe8152fb5a296bb89d7e9
Certificate serial: 01A0D7CD29E94CA4B26A47C57E2A34530E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
Manifest number: 0242
Signing time: Fri 25 Sep 2026 09:02:21 +0000
Manifest this update: Fri 25 Sep 2026 09:02:21 +0000
Manifest next update: Sat 26 Sep 2026 09:02:21 +0000
Files and hashes: 1: 5u3M-9t7nhk-y-gVL7WilruJ1-k.crl (hash: 9e8Fqqrkay+aeisV1C2CGdk9hWPbCqJKtPapVws8MSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:29:e9:4c:a4:b2:6a:47:c5:7e:2a:34:53:0e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6edccfbdb7b9e193ecbe8152fb5a296bb89d7e9
Validity
Not Before: Sep 25 09:02:21 2026 GMT
Not After : Sep 26 09:02:21 2026 GMT
Subject: CN=adbea2da7fd4bfe39a0ae7fba814b6d7683a108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:8f:27:a2:9e:6e:11:78:57:4d:4e:a6:9c:
1f:d0:8e:fc:86:58:61:81:e4:23:aa:8b:62:40:ae:
1c:ef:a1:0f:46:8f:45:68:e0:83:1a:be:ec:2d:b5:
f4:0b:39:09:28:7e:76:e8:03:bc:53:8b:e2:ca:9b:
d5:38:95:14:f2:2f:5e:37:6f:05:2b:88:58:0d:51:
3f:40:54:e3:7f:f4:66:bd:01:f5:33:7e:bf:e8:be:
cc:3b:78:ac:cd:4a:b6:d1:06:17:5f:47:db:1b:b9:
01:eb:5b:dd:eb:9f:58:48:30:27:ef:8f:77:94:d0:
0f:4e:ca:db:32:7b:66:62:a9:29:c7:17:14:30:6f:
a7:f3:81:86:9f:9a:7d:c3:c7:e9:ed:8b:f6:ab:ee:
e8:e1:bb:31:dc:19:f0:43:be:a5:90:9c:e8:97:3b:
ec:81:ca:25:97:c6:3f:83:ce:d3:bf:6b:57:8b:d3:
0c:86:ab:63:f8:74:c9:d0:d6:0f:84:6d:f8:40:49:
8d:0d:24:fc:13:c0:97:2a:7c:95:f2:b2:b4:b9:f9:
df:f1:41:39:4e:8d:8e:39:47:ae:28:06:60:f5:7e:
10:92:6a:ef:28:fe:aa:c5:44:ba:b9:8e:80:b5:c7:
af:47:c9:d1:0c:99:6c:39:84:3a:cd:ad:e0:9b:37:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:A2:DA:7F:D4:BF:E3:9A:0A:E7:FB:A8:14:B6:D7:68:3A:10:8A
X509v3 Authority Key Identifier:
keyid:E6:ED:CC:FB:DB:7B:9E:19:3E:CB:E8:15:2F:B5:A2:96:BB:89:D7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:70:58:68:f5:fe:48:62:1a:71:27:a2:97:7a:84:97:81:90:
14:cc:af:a9:a4:4f:70:c1:fd:1d:c4:43:a6:69:ce:9d:0a:d0:
f0:2b:fb:b0:9e:ae:a2:46:fe:c2:48:04:67:57:ad:fe:5b:1a:
4a:e8:e1:77:61:01:45:7c:bd:f2:02:a3:67:13:99:b1:f8:08:
a3:b9:1e:0c:0a:42:b1:39:ee:4b:6e:ae:13:7c:60:40:aa:4d:
ee:ba:0b:e7:11:29:a4:fe:cb:9b:83:b0:7e:7c:93:ab:9f:ea:
36:77:d6:fd:7d:b7:c7:a7:0e:2c:4c:61:7f:61:ba:a0:6e:3e:
71:93:41:b0:66:60:4e:25:7d:c1:1c:d0:53:0d:28:c4:e5:86:
8d:c5:b3:71:3c:90:8b:97:31:f5:e8:80:31:d5:bd:bf:fb:f3:
07:a2:3e:1b:31:d6:c5:b6:d3:2c:10:ce:c2:9f:aa:ea:be:36:
90:4b:d6:54:22:a0:7c:91:7f:61:85:7c:de:f4:ae:e0:0b:71:
e3:14:c1:dd:0c:3c:ed:20:e0:8e:64:63:45:6b:ed:18:82:a1:
3e:3e:4b:e7:f3:6f:7e:38:1f:28:85:0e:d1:e2:39:41:59:23:
fa:0d:1c:ae:71:d9:c7:4d:fb:d4:11:cf:1b:0b:51:90:db:32:
38:f3:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:17:23 2026 by rpki-client