
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: v2J+zGNd8o8shL+d3JpaArLUprHYFZHi0MExSTABfGw=
Subject key identifier: 61:06:39:72:35:BD:77:88:3F:14:AB:38:F3:76:F8:7E:95:5D:29:3A
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 01A0C6D7B842D9932487621FC30384A131A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 070A
Signing time: Tue 22 Sep 2026 02:00:21 +0000
Manifest this update: Tue 22 Sep 2026 02:00:21 +0000
Manifest next update: Wed 23 Sep 2026 02:00:21 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: 4rLortryiQUQXKaZ05svBj9esrCKQ5dMh+HM5foIWrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:b8:42:d9:93:24:87:62:1f:c3:03:84:a1:31:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Sep 22 02:00:21 2026 GMT
Not After : Sep 23 02:00:21 2026 GMT
Subject: CN=6106397235bd77883f14ab38f376f87e955d293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:3f:61:45:dd:67:0e:82:f5:c2:0a:74:70:
8c:52:2e:9e:bd:d7:e8:af:4a:aa:57:77:75:78:4e:
87:88:a1:48:80:19:99:b6:24:1a:74:79:f2:63:65:
54:2f:fb:ab:ce:71:87:9b:e6:fd:b2:d8:dc:72:a5:
96:86:a7:0a:58:a0:6b:ed:de:7e:b4:dd:33:4a:42:
e2:d8:cc:14:38:5e:80:83:57:67:0f:09:be:3e:90:
07:09:c4:0d:4e:9a:19:ca:bd:46:2d:92:1b:27:99:
99:d8:95:75:0e:07:9b:61:82:b7:88:c6:08:03:36:
9e:8c:8d:47:2f:e8:e2:1f:a7:ea:33:19:c8:50:81:
05:2e:ef:31:03:67:49:71:56:6f:94:f6:78:2c:99:
c2:c0:48:47:0a:59:5e:7f:85:b2:ee:e5:39:f0:0d:
db:22:9b:66:31:3d:bb:21:0b:64:9d:b0:31:d4:95:
4f:d9:03:26:8c:86:cb:c6:a4:f9:38:9e:db:30:32:
46:2f:d6:82:f3:16:e9:90:16:e1:4a:e6:54:0a:e7:
ad:1f:cc:24:21:7b:55:8a:45:35:1e:1f:3b:e8:d7:
50:62:1e:c8:9e:7a:57:2a:c3:0a:1f:60:6c:0c:f7:
27:42:79:30:a7:43:e3:c3:36:6b:07:dd:6d:24:f8:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:39:72:35:BD:77:88:3F:14:AB:38:F3:76:F8:7E:95:5D:29:3A
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:72:81:be:76:d1:78:27:76:c8:fa:64:f1:60:0a:3d:ce:75:
51:cc:44:6b:9b:4f:97:93:ae:15:9a:6c:c5:36:43:2e:7c:3b:
b3:ff:07:d4:66:1d:0a:41:03:a0:48:bc:97:e3:4d:29:a6:1e:
70:38:fb:18:c4:4d:04:61:27:b3:56:35:cd:42:0c:69:52:ef:
ec:c5:41:f9:7b:f0:dd:ba:5d:18:b6:c9:44:24:7b:3a:0c:5f:
65:37:5d:12:8b:20:01:08:a7:a9:a3:c0:3c:ee:3f:32:97:97:
67:93:de:cb:a2:b9:7d:11:12:14:8d:a9:1d:64:8d:81:e5:b5:
5d:41:63:29:22:d9:9e:8e:d0:de:6c:1c:d2:ab:4c:7b:97:86:
de:72:b2:7e:3c:94:e2:9f:30:f3:1d:0f:a8:9d:d6:fa:ec:a9:
b2:79:0c:ef:59:bb:7a:55:b5:9e:84:30:7d:41:55:05:07:af:
16:96:4b:a0:47:f3:38:86:c3:22:35:21:bf:a1:8f:0f:20:cb:
c4:94:59:5e:65:26:8a:43:5b:cd:c6:ff:f0:3f:f6:65:fa:19:
d7:a9:f7:ae:2f:43:94:64:fa:9d:42:f7:25:e4:7e:c6:25:2f:
6d:f9:60:46:52:78:18:9b:b2:60:23:0b:8c:be:ed:e9:e8:56:
c7:a3:55:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:02:26 2026 by rpki-client