Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
File: 5Y8ma01YAFUs7adrgycbTI4V44o.mft (raw, json)
Hash identifier: VUYZZJoYKZj2+6OWMjr+aEi+X0tve0OHr4o/yFWwYP0=
Subject key identifier: C6:88:4A:34:24:08:28:D6:F7:08:2F:45:D4:1C:1D:51:91:DD:63:75
Authority key identifier: E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
Certificate issuer: /CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Certificate serial: 01A0C39FEDB20D807CA35BF6DD7AF53F5FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
Manifest number: E1
Signing time: Mon 21 Sep 2026 11:00:33 +0000
Manifest this update: Mon 21 Sep 2026 11:00:33 +0000
Manifest next update: Tue 22 Sep 2026 11:00:33 +0000
Files and hashes: 1: 1-_1G1tATdFEJfv4st45_Q-d33kQ.roa (hash: p1aXapIIZWhXgIor7qn5hSGBNLqdBcmtQEmWKYSt1FY=)
2: 1Lrbwdn9oPlof5ajHq8YeOhYWPQ.roa (hash: 9ssYEoOHl8YOeIpzXb3TsKUuGip5v41JmeW+Sm6r4Hw=)
3: 5Y8ma01YAFUs7adrgycbTI4V44o.crl (hash: S8nNYWHKUhb/FucSuouoVncLNR+vLZQBAA3gmDPaB/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:ed:b2:0d:80:7c:a3:5b:f6:dd:7a:f5:3f:5f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Validity
Not Before: Sep 21 11:00:33 2026 GMT
Not After : Sep 22 11:00:33 2026 GMT
Subject: CN=c6884a34240828d6f7082f45d41c1d5191dd6375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:99:4e:ba:49:31:e9:62:d1:1b:2e:64:5c:
9d:0a:7a:09:d3:43:22:11:64:aa:c0:ef:90:44:0e:
20:7a:cd:c8:e2:9d:af:bc:ac:dc:f0:93:b0:47:01:
19:01:53:7b:43:2b:23:ea:75:52:6e:07:50:ba:7d:
aa:a3:92:94:e1:87:7b:b4:b7:b1:56:c4:7f:94:05:
72:e7:ce:0e:8e:4f:c8:04:40:4d:72:05:d8:e5:3c:
f3:1b:9a:82:63:d6:ad:ac:e1:a7:bf:d6:6d:a2:d9:
ab:b8:ce:c0:ce:0d:d3:1b:2b:39:88:a3:b9:42:67:
64:67:d1:06:59:67:f3:b7:cd:1a:a3:6a:03:3a:96:
db:58:c9:92:bf:79:da:c0:bb:0b:df:2e:f4:6e:87:
56:d1:a4:3a:6a:ba:cc:6d:8c:cd:4b:c5:97:78:65:
01:26:2a:7f:0b:8a:76:2d:13:9a:f8:03:a5:3c:85:
f3:08:9a:a0:73:85:4c:07:25:42:21:8a:b6:8b:84:
78:7e:81:dc:01:e0:03:9b:8f:d3:a1:46:c7:be:0a:
04:a3:70:d1:12:25:7c:af:c6:35:80:58:ac:bd:ee:
ab:8b:6f:07:63:79:6a:be:44:2c:91:92:2c:46:69:
58:6f:fb:02:bd:d4:d8:d9:6a:b6:0b:69:6f:37:a1:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:4A:34:24:08:28:D6:F7:08:2F:45:D4:1C:1D:51:91:DD:63:75
X509v3 Authority Key Identifier:
keyid:E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:80:89:19:0a:d1:81:c8:1b:85:24:6e:13:25:50:72:b2:2d:
b5:72:c2:60:6f:a6:5a:22:8b:16:38:cd:04:fc:d4:c0:92:f5:
26:45:8b:cb:12:98:9e:00:3e:06:f6:a2:12:e9:a3:47:58:5e:
cf:79:2b:4c:e8:be:29:c1:58:95:03:0f:15:0d:82:e4:00:3c:
9b:58:99:40:94:0d:dc:61:11:c0:cd:60:b8:75:77:af:36:6d:
17:9b:0a:b6:1d:87:3e:6b:6f:54:f6:18:ed:38:de:3b:8f:9f:
08:d9:07:9c:ba:c1:64:d8:3a:b1:8a:c8:2d:f0:65:57:1e:77:
31:03:b4:c1:be:57:60:30:fd:4e:2f:ad:cf:46:cc:42:66:ad:
24:ef:41:0b:5d:ea:40:7c:3a:ca:eb:23:60:5a:cb:7d:90:ac:
93:0f:b5:cc:63:38:d8:7c:5e:b5:81:75:68:d8:6a:ce:39:72:
98:4f:f7:27:1d:0a:0a:ae:3f:7b:48:7c:93:99:ea:93:fa:fe:
ce:aa:88:c7:98:8e:8c:2e:3b:a6:86:af:59:ad:fe:dd:2c:77:
50:45:f6:ce:33:9b:a6:6e:6c:bc:9f:98:8e:73:28:f4:50:d2:
a5:45:b9:63:e6:17:c9:9b:ad:d0:0d:8f:8a:a3:cc:82:b9:0c:
62:5f:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:32 2026 by rpki-client