Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.mft
File: k5ZDXlb-x6vQKL3Dwlho0vuOcb0.mft (raw, json)
Hash identifier: 5ApRUewxQ95dDUZ6DjPs4pivvigGXTMLp7WkpiAjSj4=
Subject key identifier: 07:D6:8E:CA:9E:7F:E4:DC:BC:8C:F0:06:97:D1:5E:3E:6E:04:7E:AE
Authority key identifier: 93:96:43:5E:56:FE:C7:AB:D0:28:BD:C3:C2:58:68:D2:FB:8E:71:BD
Certificate issuer: /CN=9396435e56fec7abd028bdc3c25868d2fb8e71bd
Certificate serial: 01A1DD26B894401CF8007FE8225579122CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.mft
Manifest number: 31
Signing time: Sun 15 Nov 2026 03:01:04 +0000
Manifest this update: Sun 15 Nov 2026 03:01:04 +0000
Manifest next update: Mon 16 Nov 2026 03:01:04 +0000
Files and hashes: 1: k5ZDXlb-x6vQKL3Dwlho0vuOcb0.crl (hash: +rDtxjZ6ROSYaT75nN23ZI3Ohf294PEuD+6JGTGMW+I=)
2: zgu285HIUDX_FfAU2g0C9dCoPqs.roa (hash: BUCgc1r0kJzlH4EQ3Njx05+dZ35V9ufoTD2Lecacvbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:b8:94:40:1c:f8:00:7f:e8:22:55:79:12:2c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9396435e56fec7abd028bdc3c25868d2fb8e71bd
Validity
Not Before: Nov 15 03:01:04 2026 GMT
Not After : Nov 16 03:01:04 2026 GMT
Subject: CN=07d68eca9e7fe4dcbc8cf00697d15e3e6e047eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:6c:46:c1:43:1c:38:15:7c:8a:16:f9:71:
92:37:bd:1d:b9:d9:65:51:c5:38:6e:c2:c5:24:85:
12:74:17:74:b6:24:7e:01:57:c1:c0:65:7d:5c:02:
5f:31:11:0f:99:7f:d2:9a:e4:d3:37:ff:1a:4c:58:
9a:ee:a4:5c:7a:72:9a:2a:93:79:9d:35:6b:ed:29:
76:4e:d6:11:66:35:0a:5d:02:d7:fa:a6:b0:29:81:
16:36:ed:6b:97:65:73:f9:95:0a:fa:e9:16:1c:53:
e9:5a:d5:09:64:98:41:a9:d1:62:07:54:41:81:43:
4d:92:22:5d:a8:03:b1:6e:9c:5d:f6:cf:19:8d:a5:
3d:5c:73:20:99:56:b4:85:63:0a:4c:06:10:a5:48:
e4:51:51:de:00:be:08:1e:8c:2b:d8:4f:b9:4e:3d:
a5:23:7a:40:47:8a:8f:20:58:2a:3c:44:15:86:01:
25:16:dd:a8:4d:cf:dc:cc:3e:cc:75:c9:3a:f1:f5:
b6:d1:14:8f:f1:01:c3:74:d3:16:31:12:27:d7:60:
d5:78:99:01:39:bb:0a:b1:c1:20:64:53:a2:95:0a:
ac:7e:a9:ab:48:63:77:8d:7b:f1:7d:b8:96:34:13:
67:a0:d8:57:ae:3e:a2:2f:5c:7c:f4:81:05:85:ec:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D6:8E:CA:9E:7F:E4:DC:BC:8C:F0:06:97:D1:5E:3E:6E:04:7E:AE
X509v3 Authority Key Identifier:
keyid:93:96:43:5E:56:FE:C7:AB:D0:28:BD:C3:C2:58:68:D2:FB:8E:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c6:bd:89:fb:77:c4:17:91:1b:31:9b:53:cd:23:0a:34:cc:
57:70:56:ba:1a:05:0b:10:51:da:fe:82:af:0c:75:58:84:75:
d2:af:bc:4f:b2:5f:7f:73:0a:76:30:44:4c:b7:39:a9:81:a7:
75:17:f7:93:24:1b:ea:4b:7b:9a:9f:e4:8a:4d:54:4f:63:99:
69:56:32:a7:54:ed:6b:12:4c:ee:91:de:13:6e:34:60:f1:9c:
7f:11:60:f4:f1:0f:9d:09:22:93:f3:63:05:0e:9d:2d:23:c1:
b1:c7:1f:89:7e:d7:d9:5a:51:ea:75:1b:c1:e1:80:d9:47:5e:
57:cc:92:a6:71:07:25:b3:9d:85:23:69:b5:bd:e4:60:00:cd:
1c:35:e5:1d:b8:20:1b:02:50:c4:ad:8c:88:10:db:4c:97:79:
c8:1f:ac:a6:7f:81:8e:f0:ed:6c:0c:c2:62:62:f9:c8:1c:88:
bc:43:0d:fb:7c:80:b6:a9:9f:da:a4:01:8a:aa:d0:e5:c7:72:
c2:c0:c2:7a:4d:46:29:67:69:c0:8a:36:6f:79:f8:36:bf:77:
b7:1c:00:3c:ce:e8:33:99:01:d3:75:1b:06:9c:3f:0a:94:ba:
20:d9:7b:8b:6d:7a:c0:93:b4:05:2a:9e:50:12:6a:cf:d7:a2:
21:d2:b2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:34:03 2026 by rpki-client