
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
File: 5LDTY6ChegaEUahRRc5PpGTX-hs.mft (raw, json)
Hash identifier: vE6gTrfyPeSbVze+4pU08oy8wfYLUMdS8Nee3PQCt6k=
Subject key identifier: F0:ED:B5:41:2A:5D:58:0D:E2:64:2F:58:15:46:26:99:C0:F2:4A:0B
Authority key identifier: E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
Certificate issuer: /CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Certificate serial: 01A0C40D8A104006CBE7922A78D4C993DD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
Manifest number: 1396
Signing time: Mon 21 Sep 2026 13:00:16 +0000
Manifest this update: Mon 21 Sep 2026 13:00:16 +0000
Manifest next update: Tue 22 Sep 2026 13:00:16 +0000
Files and hashes: 1: 5LDTY6ChegaEUahRRc5PpGTX-hs.crl (hash: Qm+AzLq+pH3XneGwLHjDYSB6lS2Fl5gXfYdIMi/BJ84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:8a:10:40:06:cb:e7:92:2a:78:d4:c9:93:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Validity
Not Before: Sep 21 13:00:16 2026 GMT
Not After : Sep 22 13:00:16 2026 GMT
Subject: CN=f0edb5412a5d580de2642f5815462699c0f24a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:5a:2c:2c:4c:5c:ec:94:51:24:2a:ef:62:
3c:eb:92:72:53:e9:06:51:ce:bd:25:04:a7:f5:ac:
52:10:6f:88:cf:b3:45:c7:ce:21:41:eb:ef:64:6f:
f8:ee:83:6f:3c:2c:80:4e:d7:ee:66:eb:6a:8a:0d:
cd:a7:a2:dc:ab:12:60:7a:b7:12:76:11:85:14:d8:
c5:b3:1e:34:80:92:b2:f4:21:ba:f5:28:8a:98:40:
07:19:f6:a1:b6:d6:0f:ad:ad:f0:c9:64:07:a3:e1:
b0:b1:0f:f1:fd:27:30:6c:6b:14:ab:c9:e9:65:ea:
04:cc:fe:64:75:3b:d5:89:a6:b5:4c:96:16:44:fd:
dc:76:df:0e:da:1b:9f:ab:ff:4a:f6:d8:18:97:78:
ae:98:1a:65:45:51:17:d1:b3:94:7d:b6:10:b9:92:
55:1d:ce:9e:fb:f6:cf:7b:eb:ed:38:19:9a:f8:83:
e1:86:0e:3e:9d:bc:ba:c4:f3:6c:21:b3:c3:7b:6e:
7e:18:51:b7:45:ad:d1:be:ea:d3:eb:0c:70:8e:17:
ff:83:a8:b1:d2:17:1e:b0:e8:f0:99:22:1f:e6:9c:
b9:c9:3d:8c:4d:d7:0c:66:6b:40:93:f1:e6:e7:3c:
f3:7e:f7:96:89:2d:3f:9e:41:ce:02:7d:a5:c9:f9:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:ED:B5:41:2A:5D:58:0D:E2:64:2F:58:15:46:26:99:C0:F2:4A:0B
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3a:f6:af:ea:8a:39:1f:56:0c:73:ec:d3:56:64:36:3c:12:
e0:82:12:be:eb:50:f4:59:3a:ad:01:a6:86:1f:a5:ad:d3:0b:
21:18:09:a2:40:6d:f4:95:06:0a:95:5d:22:ea:46:0a:30:9f:
86:40:05:8e:fd:0a:c8:70:9b:11:b4:bc:06:e7:9f:4c:7c:dd:
ba:64:00:1f:73:81:51:a0:8a:20:db:58:52:71:78:73:c6:31:
50:fe:c2:e6:79:33:26:c3:0c:30:f4:83:73:bf:97:b2:f3:26:
02:c2:55:26:1b:ec:af:f4:88:99:d3:ee:e4:af:eb:93:f6:bd:
e9:d8:fb:c2:65:d4:98:12:bc:f5:7c:74:eb:62:e5:76:24:e5:
0a:cb:89:ba:4f:e1:b0:4c:07:39:1b:be:25:1a:f1:56:26:95:
65:d3:0c:8a:93:f8:e7:06:f0:54:b4:5b:3f:58:45:06:fd:08:
03:a4:08:6a:d6:a5:77:5b:19:1f:30:91:e2:ec:9d:e4:a0:09:
da:1c:08:d0:a6:3b:ad:96:36:db:98:6c:49:0f:49:87:f6:e7:
b1:fb:8f:5a:bc:76:4d:38:ef:0c:ae:7a:eb:34:ca:c0:4d:25:
2d:74:37:5f:54:27:a1:55:1e:68:be:76:a2:70:df:09:a1:e9:
07:22:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:31 2026 by rpki-client