Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
File: 5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft (raw, json)
Hash identifier: tycZQZw5F4/+apSdLH6SbUWh99CsENYT3yOAzXfGGBY=
Subject key identifier: 90:20:36:B7:37:50:B9:7A:A1:3E:A4:9F:87:D5:D4:EA:68:AA:79:FA
Authority key identifier: E6:37:89:9B:50:5F:34:C7:55:77:03:1A:D1:5D:46:11:59:FA:3E:CC
Certificate issuer: /CN=e637899b505f34c75577031ad15d461159fa3ecc
Certificate serial: 01A0D7968E33653389CE34EF140EF448DF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 08:02:43 +0000
Manifest this update: Fri 25 Sep 2026 08:02:43 +0000
Manifest next update: Sat 26 Sep 2026 08:02:43 +0000
Files and hashes: 1: 3aP7tf2_IEAWXMYrhkgt_FGvnoM.roa (hash: 2OptZ+4wmOrAzANexNVFxgqEQ6WPy7TJBLwiEO3CjTM=)
2: 5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl (hash: i9HgEIZ+S54MqKFH5ta0P/wTqETIgZWDC9DBCmSGZP0=)
3: TzfRur66FvDbfYwIA6WTfABNKR8.roa (hash: Lp4TCK/sD0FuHrDCv4h92ORem/N9lPxO/RDYZXsGVHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:8e:33:65:33:89:ce:34:ef:14:0e:f4:48:df:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e637899b505f34c75577031ad15d461159fa3ecc
Validity
Not Before: Sep 25 08:02:43 2026 GMT
Not After : Sep 26 08:02:43 2026 GMT
Subject: CN=902036b73750b97aa13ea49f87d5d4ea68aa79fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:e6:36:1b:52:2e:4c:d1:1e:b7:88:dd:76:
11:7b:32:85:6f:df:92:ef:9d:c1:67:59:e5:43:69:
2a:c8:1e:54:dd:05:e6:77:4e:7f:d1:cc:e5:72:94:
4a:63:1a:5d:35:4f:cf:c1:39:da:6f:57:3b:ce:fd:
af:3b:e7:d2:62:ce:22:85:9d:33:47:7e:2e:fb:ab:
1c:b9:a2:42:2f:7b:dc:90:c5:ca:c5:be:8c:0e:63:
5b:2f:32:47:64:cc:6e:0e:81:31:cf:a9:82:b0:95:
68:53:88:9a:40:72:3a:1b:13:d5:30:88:a1:63:a4:
07:f1:11:32:6b:c1:b9:09:a2:99:0c:8d:25:d6:55:
61:89:d0:58:bf:e4:00:fe:60:ca:84:3d:79:20:79:
7b:66:ec:32:e5:2e:3a:61:c4:8c:4e:98:1d:b7:2d:
c1:3a:b3:f5:d3:65:e6:3a:de:82:91:97:b3:5d:5b:
b9:63:e0:66:98:53:d7:72:0d:93:32:52:ad:e7:f4:
fd:6b:94:06:ac:0f:09:0e:64:6d:a1:49:18:86:d7:
77:06:61:7d:43:f8:b6:15:8f:bb:ae:d2:92:58:21:
ea:8f:3a:45:b8:88:c6:84:f6:60:19:7c:94:88:cf:
95:08:a7:f0:92:e1:7f:e8:b4:49:7a:78:d2:97:34:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:36:B7:37:50:B9:7A:A1:3E:A4:9F:87:D5:D4:EA:68:AA:79:FA
X509v3 Authority Key Identifier:
keyid:E6:37:89:9B:50:5F:34:C7:55:77:03:1A:D1:5D:46:11:59:FA:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:18:b8:3d:18:c6:0f:26:4b:5a:35:1e:ff:0a:12:24:32:bb:
74:0d:b2:05:7a:a9:69:a1:4d:80:68:32:1d:57:22:62:ab:76:
a6:39:c9:15:01:40:86:e9:c6:ce:66:d0:3c:71:cd:ed:c7:5e:
b7:dc:41:d0:e9:58:f6:28:f5:53:48:0c:7f:fa:02:fa:11:22:
02:92:49:cd:95:a7:6d:fa:c1:a6:73:e6:d7:70:61:c8:61:3e:
40:a1:fa:d2:d5:18:08:32:1a:9d:cd:95:85:07:bc:ae:4c:49:
34:c2:88:05:b4:34:1c:01:61:df:11:bd:65:53:83:78:17:29:
a4:93:9a:34:5a:ca:74:52:f3:2e:03:51:b3:c3:f2:7b:0c:85:
b9:1b:b2:50:97:53:88:ea:e4:db:08:8b:60:b6:c1:27:b4:a6:
30:21:fc:1a:9f:2e:ec:bc:b5:7f:b6:f7:fa:aa:fc:4f:3a:ae:
42:5e:6f:8a:3c:60:4e:86:65:5a:49:4a:63:e6:d5:9a:3d:ed:
7f:4b:2c:76:9f:e9:90:b0:03:02:75:2b:f6:bf:14:d0:01:3f:
cd:63:22:e8:28:2b:7e:46:b4:2f:28:80:28:ca:01:58:d7:c4:
a4:22:ab:65:bd:aa:59:d2:d1:aa:fb:c7:8a:aa:d3:3e:ad:2e:
52:68:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:39:27 2026 by rpki-client