Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File: 5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier: hFc0jgUh6YhKzWJrI3xGRBPBBh8yBDKCamVYcixMRxg=
Subject key identifier: E5:B8:42:8F:76:89:85:64:23:3C:A5:18:0D:7F:FF:16:24:19:A8:C4
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer: /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial: 01A0C47CEFA732D4C974AB1F241D2891CC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number: 10CC
Signing time: Mon 21 Sep 2026 15:01:57 +0000
Manifest this update: Mon 21 Sep 2026 15:01:57 +0000
Manifest next update: Tue 22 Sep 2026 15:01:57 +0000
Files and hashes: 1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: WpqZ9LwNUv4rpuhBbFnSAEBOW5r6BFlD7YIkB6O3y3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:ef:a7:32:d4:c9:74:ab:1f:24:1d:28:91:cc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Validity
Not Before: Sep 21 15:01:57 2026 GMT
Not After : Sep 22 15:01:57 2026 GMT
Subject: CN=e5b8428f76898564233ca5180d7fff162419a8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:e8:e6:7a:e2:44:9b:b5:82:70:a2:4a:2d:
2a:32:b5:f0:70:5c:60:55:49:37:80:34:26:5f:d5:
5f:7c:6c:4f:94:69:83:bf:a5:f1:47:6b:a4:a1:a2:
5b:64:fb:ad:7e:c1:72:d2:bc:e7:f2:d5:7b:6b:a3:
bf:54:a8:1d:69:ba:ba:d4:f9:4c:d4:96:e4:70:3f:
82:84:47:72:2a:96:18:2c:8c:c7:a5:b6:46:0d:19:
f0:02:3a:bf:78:e4:15:d5:6a:92:c7:3d:ef:be:63:
9b:37:27:e6:22:66:7a:17:eb:67:77:4a:eb:9d:06:
e6:fd:66:d5:f8:92:95:7f:7b:97:a9:3f:aa:26:1f:
8d:8d:31:3d:eb:a5:ad:fe:20:46:9f:0c:ca:fa:08:
02:46:13:dd:fc:45:90:f3:87:70:c0:68:df:34:b9:
cc:95:a1:19:95:f4:9d:43:35:2e:1a:bc:63:61:64:
28:58:be:79:9a:46:83:19:15:84:85:82:29:de:ec:
7a:0d:d0:ab:5c:34:10:1f:7b:f5:8d:58:5e:57:8b:
7b:9e:50:c5:0e:0a:50:ee:05:78:92:53:77:68:2a:
be:b7:39:6f:2b:28:a0:c5:3e:bd:da:99:58:3c:0e:
65:50:29:01:3d:ee:94:cc:21:5e:ca:3e:95:1b:bd:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B8:42:8F:76:89:85:64:23:3C:A5:18:0D:7F:FF:16:24:19:A8:C4
X509v3 Authority Key Identifier:
keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:15:b8:bc:53:de:84:e3:4e:f5:bf:56:37:d0:d5:08:22:
7f:bd:35:ef:b3:2c:94:f2:d7:c2:db:e9:3d:e3:e7:2b:4d:5f:
79:24:a6:e6:e1:d7:fe:db:bf:3a:d6:c6:e2:f0:6a:0e:3b:44:
50:05:b8:06:81:b1:c5:a6:0a:25:ad:f3:93:5c:a8:b8:f0:89:
83:a1:e5:b5:13:1f:cf:d6:6d:26:3c:64:6a:55:c4:32:33:bc:
f0:5a:6a:14:32:d6:90:c9:eb:a1:d9:e2:dc:42:ef:6e:38:54:
43:eb:59:d9:97:3f:9c:5c:ab:33:3c:bc:de:2c:cf:89:94:ce:
2e:97:6b:d3:0d:bd:f8:74:0f:ea:20:70:8a:e1:b1:df:6c:d5:
c1:a9:6e:a7:ce:ef:46:e6:d3:f9:5d:4b:db:de:30:6f:03:57:
88:6b:d8:45:92:14:b6:48:5d:dd:4c:73:78:12:55:c2:80:ae:
90:93:47:a0:aa:b9:3f:0c:67:c2:dc:3b:cf:62:82:50:64:3f:
2a:0a:00:3c:be:89:28:ed:a1:1a:d5:29:cf:ec:5b:23:54:f9:
eb:37:ac:f7:41:2e:ec:61:08:0a:7d:ee:23:92:2e:27:10:e2:
2f:f5:46:79:d8:e4:c5:5f:0b:53:23:eb:9c:f7:8c:3c:2d:07:
06:31:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:35 2026 by rpki-client