Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: BRCYu6XD5qxRYu4XICzi0nG4VaBZGyOARHI/A0faFoo=
Subject key identifier: 0D:D3:DE:E8:FB:F8:00:D6:57:2A:A5:E9:A7:89:3F:57:CA:B1:69:3B
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 01A0CD7F201AA9B63E236A29A47B754CF5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 09:00:55 +0000
Manifest this update: Wed 23 Sep 2026 09:00:55 +0000
Manifest next update: Thu 24 Sep 2026 09:00:55 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: QpwwB14w+og/yMQg545n5ysUsxD92rRCrDIY5hyhuyY=)
2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:20:1a:a9:b6:3e:23:6a:29:a4:7b:75:4c:f5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Sep 23 09:00:55 2026 GMT
Not After : Sep 24 09:00:55 2026 GMT
Subject: CN=0dd3dee8fbf800d6572aa5e9a7893f57cab1693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:82:8c:81:7c:f1:2f:37:22:ee:f3:08:47:
36:a3:cf:52:5c:8e:47:79:77:30:2f:64:d6:32:b1:
ae:ee:b6:52:ed:7a:04:c1:1e:2b:72:a8:91:2a:da:
92:27:0a:c6:23:d5:38:0a:86:b2:36:04:ce:5d:86:
42:45:d5:b1:05:be:b3:b4:bb:6f:a9:95:84:47:6a:
f1:69:50:53:7c:b6:a6:7a:ac:93:2f:4b:ad:48:2c:
af:47:cb:77:76:19:dd:82:ec:3b:27:61:2a:ba:77:
17:e3:0a:2d:7a:c0:17:83:1b:ea:25:ef:0f:2d:14:
27:61:35:00:f9:b0:97:24:a3:7e:78:a2:4b:ec:c2:
6b:a1:20:67:ed:22:89:b6:55:44:3f:90:db:9b:db:
88:52:ed:bb:9e:e7:0e:38:0d:4a:27:01:ba:a5:d4:
b5:f0:61:6d:15:a4:cf:d3:df:22:41:3b:7b:82:68:
7e:72:33:28:b0:02:aa:73:ed:6d:bc:40:c5:47:73:
aa:5e:31:34:37:3f:b1:dc:4f:b8:8f:d6:f7:ae:31:
1a:fb:21:37:1a:49:31:eb:14:45:80:e5:9f:b8:25:
91:27:c7:81:5f:90:2d:45:e7:14:b5:b2:14:82:8f:
1c:8e:6f:9c:d6:d4:b8:d4:36:ad:c5:9a:d7:79:a6:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:DE:E8:FB:F8:00:D6:57:2A:A5:E9:A7:89:3F:57:CA:B1:69:3B
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:31:74:45:c3:b4:ef:10:d1:bc:6e:1a:ce:19:da:61:40:5b:
43:e5:fa:f7:95:fa:e9:53:b7:6f:54:b4:9c:9b:9c:16:ca:ff:
68:40:23:be:65:b5:5a:f5:07:ab:6b:c8:3f:fe:64:64:5d:73:
11:a7:8d:45:57:2f:9e:82:3a:63:37:b1:06:57:bc:93:31:ac:
50:40:cc:3f:71:2c:f7:26:40:2b:cc:e1:95:85:dc:c8:ec:45:
4e:56:4d:32:a2:ae:05:05:57:b6:4e:04:ef:96:92:e0:b6:bf:
9c:97:b1:da:53:bc:57:61:0f:6e:b3:e2:2a:d4:24:b7:8d:f2:
c3:93:ff:c9:43:0b:0f:c6:91:51:e2:83:ff:64:7f:7a:bd:43:
73:20:76:e8:e8:01:08:5f:8b:ae:e5:bf:d6:3b:0f:0d:4e:66:
ef:e4:17:4b:cb:41:51:84:31:2f:2e:29:80:73:56:20:79:ab:
eb:6f:2d:5a:08:61:59:48:bb:ff:64:a3:cc:5f:ee:cc:ba:9e:
ac:42:ab:7f:35:3b:0b:1e:19:0e:0d:86:56:5c:98:b7:47:5e:
62:e9:99:35:3d:53:dd:8e:28:c7:1a:90:94:c6:6b:9b:9b:60:
a7:d2:ff:54:9f:6a:f5:4a:9e:70:7b:d2:69:e3:f2:56:e0:05:
e0:6e:a7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:24:31 2026 by rpki-client