Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
File: 5LDTY6ChegaEUahRRc5PpGTX-hs.mft (raw, json)
Hash identifier: 8pG6C/oXJIg0DOo5BA+38nmbVayauB2fk4ZxE9Rr0nI=
Subject key identifier: 10:26:79:88:A6:3E:F3:06:19:8F:E4:0C:63:B3:71:A1:C2:40:B6:A1
Authority key identifier: E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
Certificate issuer: /CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Certificate serial: 01A1C2F8AF34071832A6EB2D2A016A83AF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
Manifest number: 141A
Signing time: Tue 10 Nov 2026 01:00:39 +0000
Manifest this update: Tue 10 Nov 2026 01:00:39 +0000
Manifest next update: Wed 11 Nov 2026 01:00:39 +0000
Files and hashes: 1: 5LDTY6ChegaEUahRRc5PpGTX-hs.crl (hash: 8vnKb7iF9gaIeop7j3hzGgtBIKg0V6Ov5tMCq2G8Q44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:f8:af:34:07:18:32:a6:eb:2d:2a:01:6a:83:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Validity
Not Before: Nov 10 01:00:39 2026 GMT
Not After : Nov 11 01:00:39 2026 GMT
Subject: CN=10267988a63ef306198fe40c63b371a1c240b6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:62:86:f5:c7:da:67:0d:05:1a:15:db:82:
c5:e4:74:d4:95:c9:50:1d:69:8e:b6:ee:8f:bf:ef:
4d:52:ee:f4:e8:60:50:c8:a9:49:6e:78:dc:52:fe:
41:44:3e:5d:ac:47:e5:23:a8:60:bd:dd:80:85:66:
40:46:4d:e1:a8:9f:a8:44:8a:48:be:76:84:ed:30:
fe:fa:fa:40:21:6f:bf:78:7c:39:12:1b:d6:87:5a:
48:82:95:b1:da:cc:1e:1d:4a:e7:15:24:5d:e7:07:
1b:2a:9e:77:1e:21:ef:70:7e:61:58:cb:3f:5d:94:
ab:72:38:23:0a:22:99:31:66:51:7f:0a:0d:f7:3e:
45:28:a8:52:65:06:30:ec:64:e2:7b:1f:05:30:06:
b3:e5:9d:cd:23:b6:c9:e4:bd:d1:40:d3:b1:23:21:
11:84:89:3d:82:cd:8d:1c:65:17:f9:fa:53:92:61:
da:e5:fd:24:3f:b2:21:20:45:4f:e7:c4:01:fc:91:
3b:a8:99:82:db:dd:2b:e1:43:c6:96:52:7d:ca:47:
b3:5b:e0:e2:6c:7a:43:c2:eb:37:f4:2c:41:9c:ca:
d0:8a:77:44:68:ec:90:ca:97:ba:af:0a:f1:02:9f:
ab:52:a7:78:f8:fa:1f:42:fd:c6:4c:cb:97:bc:12:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:26:79:88:A6:3E:F3:06:19:8F:E4:0C:63:B3:71:A1:C2:40:B6:A1
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:31:33:eb:53:ab:e6:1c:a3:f4:dd:4a:9f:89:e2:00:4e:2e:
7f:d8:43:0d:c5:8a:09:f7:50:48:33:db:b6:92:f5:18:3d:27:
6e:a1:20:17:9f:71:f3:b5:a4:59:f9:ce:a9:0d:61:9c:a3:90:
eb:d7:d4:a5:7b:e4:7f:79:84:d6:2f:7a:e8:a7:7e:f8:87:f9:
95:79:06:60:ca:b5:a1:d0:b6:4f:6e:37:8f:fd:5c:5a:50:59:
66:2b:ae:66:7c:d1:65:90:99:e5:57:d1:5c:bb:d8:5a:18:8e:
0b:b3:33:ba:80:9a:68:ca:dc:f9:46:ff:af:62:84:a4:37:b8:
37:c8:95:b5:67:92:b4:83:ac:64:3e:22:82:00:54:50:2c:6c:
82:81:ef:17:16:71:74:d2:43:ac:03:21:47:07:50:e2:ed:6d:
9d:44:c3:c8:e6:59:36:59:61:d7:26:a8:57:94:6a:f3:8a:90:
5c:8a:0d:42:af:53:db:88:f7:90:67:9f:4d:28:71:d3:57:89:
e3:9a:18:9e:30:5f:d0:0f:b4:0d:50:fd:c7:93:99:01:37:7a:
dc:32:f3:25:89:80:82:91:48:42:fe:1f:cd:fe:c2:a1:33:d0:
51:52:80:f0:cb:7a:e0:e9:a0:e4:92:f3:97:eb:98:e5:29:ae:
02:f3:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:56:04 2026 by rpki-client