Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: C0/cdH4iDEVtlPfpFdOAmMvd+nNPLNtfZNBbSr12GIw=
Subject key identifier: A4:E2:1C:14:53:71:F5:AE:60:05:88:6A:4A:D0:EF:90:A3:1C:30:4C
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 01A1E05FBC9D41EEA189FE0DEABC66AD77BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 17AA
Signing time: Sun 15 Nov 2026 18:02:12 +0000
Manifest this update: Sun 15 Nov 2026 18:02:12 +0000
Manifest next update: Mon 16 Nov 2026 18:02:12 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: TD3ctaD6TQz4kXv3jCJl3Wy7jMMwbHhswm2HnPCi7V8=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:bc:9d:41:ee:a1:89:fe:0d:ea:bc:66:ad:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Nov 15 18:02:12 2026 GMT
Not After : Nov 16 18:02:12 2026 GMT
Subject: CN=a4e21c145371f5ae6005886a4ad0ef90a31c304c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:5a:3b:c0:f6:c9:fa:db:dd:e3:ef:4c:3e:
ed:d6:0a:30:41:39:e1:ab:87:60:78:b0:b9:ce:c2:
31:61:6a:e6:13:88:5a:9b:df:03:af:e5:ca:88:d0:
7a:71:6a:ae:1c:00:40:40:0c:42:48:14:4d:7a:c9:
77:2f:81:c1:03:c7:46:c1:e4:7d:0c:1d:86:fe:29:
67:6d:a4:69:fb:34:ff:74:82:6b:01:7f:9b:03:07:
e4:55:09:48:06:56:2c:7d:9d:2b:74:6d:15:2a:69:
77:29:ba:4e:2b:b3:fb:6c:36:67:86:3e:28:65:de:
ee:d0:6b:dc:d5:dc:59:75:77:57:c3:6b:b4:71:0e:
97:b5:8e:78:20:94:81:9d:ef:9f:de:27:19:1f:e6:
e5:a9:cd:c7:84:08:0e:f5:96:18:c5:bf:0c:ac:8d:
f1:ea:cb:9f:28:7c:57:be:4e:88:36:b4:44:02:4b:
d0:ad:ee:12:1d:46:00:7e:71:25:ef:d6:28:46:c1:
03:5c:47:df:26:70:67:d4:fc:63:8f:5e:91:09:7d:
67:06:e5:14:7e:d2:ea:17:cd:8d:8f:5e:e2:62:8e:
a4:51:df:18:d5:25:15:49:33:bf:27:f7:9d:d5:ec:
13:7e:4e:6c:fa:4e:1a:b7:e6:4e:9f:97:c3:ff:8f:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:1C:14:53:71:F5:AE:60:05:88:6A:4A:D0:EF:90:A3:1C:30:4C
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:36:95:74:10:20:61:9f:08:49:07:d9:71:98:d6:8c:32:d0:
1d:98:80:e6:cc:51:68:00:fc:65:4a:09:2f:fe:8b:7d:4e:34:
c2:ae:e8:27:27:7c:30:24:7b:74:0a:2a:3f:23:fb:fe:a7:f3:
96:45:ae:22:c9:5e:52:0a:bb:0f:49:8f:74:fd:4c:ca:92:83:
a4:85:3d:e3:ef:1f:4d:c5:63:d0:82:ba:8a:99:0b:9d:31:9f:
eb:4a:e0:31:f6:e3:a4:96:59:68:11:c2:3b:4f:a3:99:53:38:
0d:92:de:1e:48:c3:e6:cd:23:44:ec:c8:08:10:af:45:b9:d2:
83:c6:d5:5f:e9:24:64:58:7b:ba:68:9a:a7:e3:9c:6a:84:b8:
fa:e3:d1:c1:23:d8:04:13:30:c4:9d:05:6b:cf:81:f3:7c:eb:
3c:09:86:61:ce:e4:60:ef:84:0d:49:23:b2:72:89:a7:33:37:
d3:13:d2:d3:a8:7a:24:2a:fa:f9:8f:3a:fc:96:98:fa:3a:cf:
8a:db:2e:10:94:12:af:6d:94:cc:48:9f:c2:b2:89:51:d1:94:
51:47:e5:60:61:8d:98:22:51:81:6d:90:e6:f3:02:d8:95:e5:
03:76:cb:81:93:ab:00:f1:89:62:d7:a8:5d:38:8c:1e:c8:29:
3f:e3:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:20:08 2026 by rpki-client