Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: UzsGlWYh0dOPqJcORsbC4uIy3CvTi65+ztstUlBvu9A=
Subject key identifier: 3C:91:0F:D2:91:7C:02:3B:42:E6:28:0E:5D:A4:F6:59:6B:80:ED:47
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 01A0C6D80DC75DC631CBD3FB837433464480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 06D7
Signing time: Tue 22 Sep 2026 02:00:43 +0000
Manifest this update: Tue 22 Sep 2026 02:00:43 +0000
Manifest next update: Wed 23 Sep 2026 02:00:43 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: zcgBDUeQOEgBemCgQtyMqdIPUazR1W3qtdXj6MqE7FM=)
2: VRLe_vrVUBu7hrug_AwRCwsEDDw.roa (hash: 1ZW4YMZPRX134FBX/m+hkmhqXkoGgUz70QQefV/wFo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:0d:c7:5d:c6:31:cb:d3:fb:83:74:33:46:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Sep 22 02:00:43 2026 GMT
Not After : Sep 23 02:00:43 2026 GMT
Subject: CN=3c910fd2917c023b42e6280e5da4f6596b80ed47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:81:66:fd:b1:57:9c:9c:10:57:f5:54:40:
94:d8:ae:88:1b:17:12:dc:c4:db:6a:e8:7c:05:70:
13:ef:09:f1:25:6e:53:51:a0:fd:df:72:c0:61:d2:
aa:4f:59:e9:fa:46:24:04:55:d2:81:05:e6:b3:66:
6c:fa:67:56:86:68:19:a1:66:40:bf:22:8c:c4:0c:
16:08:ba:b1:90:48:39:45:8a:db:63:cb:c4:80:b1:
98:b7:60:7c:7e:98:49:d9:64:69:81:b1:1a:a4:c3:
0e:b2:41:59:f1:eb:02:65:22:23:96:05:64:be:fd:
7f:7c:b9:ca:3e:b2:03:f2:0e:cc:79:e9:dc:35:9e:
b4:15:d9:0d:ff:a6:5e:af:fb:b9:ee:4c:8d:00:0d:
67:b4:04:2c:64:a4:ee:67:5e:f4:01:0b:64:0f:d5:
13:ee:b6:08:d1:b4:85:e1:2e:72:61:c3:94:1c:71:
15:79:88:57:d8:9d:5e:70:dc:4d:16:b4:2f:63:47:
13:d9:72:ca:a9:48:d7:e7:ff:78:19:63:db:04:aa:
0e:b7:7a:e8:d5:5f:c2:c4:d4:81:76:26:8a:01:32:
1d:e8:1f:68:05:9c:67:1e:ae:c8:b8:5d:21:40:7d:
0e:56:1c:57:47:18:cc:a8:fc:64:39:77:64:e9:02:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:91:0F:D2:91:7C:02:3B:42:E6:28:0E:5D:A4:F6:59:6B:80:ED:47
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:30:0e:3b:c9:fa:82:aa:03:26:d2:60:4e:a0:c1:b1:39:43:
ba:08:76:2a:f4:02:64:d6:2d:19:9b:97:34:45:c6:99:34:12:
09:2b:12:ea:10:a0:fb:43:e2:20:c6:4d:ee:24:dd:bb:94:1f:
1d:ea:22:57:41:cc:28:19:af:23:04:05:6d:fa:dc:a9:19:a3:
07:09:ff:67:04:50:d1:d9:cd:c4:1d:60:68:e1:52:1b:bd:3c:
1c:3a:7b:52:70:ec:f0:b6:e1:93:ad:0a:b4:81:08:09:8a:14:
c2:7a:a8:71:88:98:d1:ec:5a:bb:fb:21:6e:16:87:39:82:29:
53:76:9d:08:9e:12:1d:f8:36:b6:98:84:f9:b3:1e:94:e7:af:
3d:18:ab:4a:58:12:d6:25:56:91:67:e0:12:10:9b:9a:ac:f2:
bc:f3:c0:c2:5f:91:1b:1b:fc:76:d0:4d:f0:33:4d:22:f5:d1:
b2:f6:2b:fc:25:5e:3c:9b:68:63:2e:11:08:ab:58:8c:d0:4e:
d2:ae:21:75:af:e3:8d:30:9c:6f:9c:86:4e:53:6f:57:49:7e:
9a:83:a8:3a:df:5d:b7:2e:94:80:b8:77:d5:3b:89:37:83:c4:
b6:ee:94:74:3b:a8:49:87:73:75:8e:c0:f9:94:48:a6:6b:d3:
da:30:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:12:00 2026 by rpki-client