
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: 5U3t70EGWXxztls+fhyN3XKO/SEbcfk/CRc3THM5k+g=
Subject key identifier: 12:02:4F:30:04:C0:DB:2D:FE:E2:84:50:C7:7D:26:D3:B4:24:49:9A
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 01A132FE093BD7230DF3DFD743175B582C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 0553
Signing time: Tue 13 Oct 2026 02:01:11 +0000
Manifest this update: Tue 13 Oct 2026 02:01:11 +0000
Manifest next update: Wed 14 Oct 2026 02:01:11 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: BQBohzSLXMu0HFHMEKVPkp5uHN9EDVSk+8xpnrFmqLw=)
2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fe:09:3b:d7:23:0d:f3:df:d7:43:17:5b:58:2c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Oct 13 02:01:11 2026 GMT
Not After : Oct 14 02:01:11 2026 GMT
Subject: CN=12024f3004c0db2dfee28450c77d26d3b424499a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:d4:3f:2c:53:c5:d2:cd:79:9d:16:3a:54:
f1:2c:71:3e:e9:bb:6e:40:7a:c4:93:cc:ea:cb:bd:
a8:45:71:33:55:bc:43:fe:c7:3b:c2:fe:a1:45:df:
01:14:1a:1c:77:8c:b4:7d:56:10:a6:4f:eb:96:e3:
ab:de:56:0a:2a:7a:43:55:f6:c8:02:6d:75:91:ca:
b5:10:47:4e:b1:14:7d:b7:b9:f0:7f:8c:8c:28:f5:
85:dd:a0:92:76:27:6b:2b:8f:20:49:de:06:08:e4:
8f:54:38:91:7a:20:b9:bd:cb:c2:0c:6d:65:71:42:
e1:07:db:26:12:4e:c4:96:3e:cc:87:17:f9:6c:d9:
e7:c5:78:e4:87:24:b9:eb:34:b4:22:0d:41:d7:b0:
ba:5f:2c:3b:17:1c:f5:1b:63:e3:3c:ea:44:80:f2:
3b:5c:85:f8:ea:c4:f2:b4:88:cf:e8:d2:b8:00:40:
90:19:ff:55:d7:21:19:5b:f5:2b:00:32:d7:78:68:
17:36:e6:a0:95:d2:21:9c:d1:d7:32:e9:0a:df:65:
ab:4f:09:45:9b:66:66:53:d4:10:43:a4:84:e5:16:
71:33:61:1c:95:27:23:3a:b3:fa:e4:96:e0:a3:57:
29:bb:f1:86:86:e8:4a:fd:68:0d:72:78:d5:b3:09:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:4F:30:04:C0:DB:2D:FE:E2:84:50:C7:7D:26:D3:B4:24:49:9A
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:93:c2:82:04:25:2b:a0:9b:fb:6c:89:69:14:13:a5:5d:1e:
f2:63:db:e1:ed:a1:1e:a8:47:ff:82:bd:be:94:d2:e9:12:82:
63:14:5b:b4:29:9f:a9:4c:a0:81:33:b1:9b:26:d5:04:98:e9:
82:e0:36:0e:1e:f4:0e:9c:37:01:7d:05:48:e4:4b:bf:b7:b5:
b2:c2:14:1a:04:49:8c:04:d3:f0:f6:44:f8:f4:bd:f0:bc:22:
d6:7c:2c:72:25:e4:21:b3:8e:37:59:bd:8a:e2:b0:be:f9:24:
8d:8d:ee:76:1e:e4:ad:e9:4e:98:69:27:fd:a9:cb:0a:40:b2:
42:91:bd:c7:2a:7c:e5:44:96:ae:2f:ee:4a:d2:04:86:93:c6:
f1:75:e2:1b:77:94:9d:e2:9c:a5:a3:d0:b5:c8:07:49:ed:e0:
d6:bc:25:cd:08:4a:c1:7d:7c:f0:67:2c:56:32:23:d1:b2:72:
47:a4:ab:4c:ae:f5:78:6b:90:f6:f6:d6:dd:25:01:2a:b7:8d:
f8:b3:3a:d5:a5:e5:74:09:8a:6d:6b:64:78:44:b0:22:1b:29:
1b:43:e3:40:01:c5:06:73:cd:9f:7f:31:8b:60:bc:ad:90:61:
37:b2:8c:4e:07:94:1e:9e:73:ff:e8:78:82:bd:bc:2b:b4:33:
a7:80:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:03:30 2026 by rpki-client