Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: tZ6kxNzOljouT+jAE6/GYjntGGvsNp9ag4tFLnEd8bA=
Subject key identifier: 3F:F2:62:65:D4:AF:55:45:B4:F2:B5:0C:E9:32:5A:54:7E:A9:7C:8A
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 01A1396DCFE8880C6BD18B936D59606ED9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 1255
Signing time: Wed 14 Oct 2026 08:01:00 +0000
Manifest this update: Wed 14 Oct 2026 08:01:00 +0000
Manifest next update: Thu 15 Oct 2026 08:01:00 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: mlukY9JPCjAMFSLQoXr52yGQqIH4YkzkbXUFyT170lw=)
2: vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa (hash: R/EtSB73ZGWrRnb/Gf2BJqZ0RYrtTKAiO9HiXzdMKyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:cf:e8:88:0c:6b:d1:8b:93:6d:59:60:6e:d9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Oct 14 08:01:00 2026 GMT
Not After : Oct 15 08:01:00 2026 GMT
Subject: CN=3ff26265d4af5545b4f2b50ce9325a547ea97c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:c7:1b:2e:05:c4:70:dc:a2:97:6a:f2:32:
47:96:97:10:b2:3a:2f:55:f5:00:87:af:4e:73:a6:
e3:4e:d9:23:17:c4:df:f0:af:ee:00:7e:c2:1b:30:
cc:99:9a:f0:d2:4f:6c:fa:31:e4:34:b6:e2:01:e1:
01:c6:6d:46:ad:b4:64:77:44:b7:39:6a:8a:62:8a:
6a:0c:55:95:ae:a3:2d:cc:f4:65:3a:59:aa:81:9f:
3b:70:58:b1:16:df:53:dc:c1:a3:0e:1b:04:f4:88:
1c:3c:40:bc:cb:ec:28:09:18:99:ba:33:08:47:76:
ec:32:6f:d7:89:c0:49:df:7e:88:aa:ff:95:0b:52:
e8:a2:a3:99:da:23:db:11:86:b2:ee:0e:fd:69:f1:
e0:05:20:d2:c5:f3:24:aa:68:be:66:52:4f:80:66:
1b:51:1b:17:bc:b1:61:61:80:fa:0f:56:6a:bc:ce:
4c:6a:bc:d2:95:bf:6b:74:aa:a2:13:35:69:12:c1:
fe:c9:5b:ac:d3:4e:c1:7e:3f:8b:e0:e3:9b:a9:57:
0c:29:df:ee:f5:8c:4a:b1:2e:70:71:88:8c:a5:d3:
c6:4f:02:17:db:fe:f0:90:28:c9:ec:fa:ab:43:cb:
f2:9e:d9:ae:a4:96:b5:24:62:04:ed:8b:c7:c8:ab:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:62:65:D4:AF:55:45:B4:F2:B5:0C:E9:32:5A:54:7E:A9:7C:8A
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ee:58:d9:23:44:21:f3:0c:2e:6a:b7:be:40:91:53:03:80:
ac:75:ed:99:08:db:7d:1e:5b:6e:a9:f0:60:8f:3e:4a:cb:a6:
28:92:7b:a2:af:c5:4a:bf:8e:0d:91:0a:f7:09:8f:d7:5d:9b:
aa:b1:3a:68:3c:30:94:46:9e:4b:3c:f9:f6:f1:02:ff:7f:ee:
8a:62:76:3d:5c:c8:d0:a9:52:c7:36:90:48:bb:15:4f:a7:dc:
b9:fb:a3:98:59:e6:77:ad:7a:4b:04:91:93:86:da:59:81:8d:
ec:8d:92:dc:fe:66:d0:9f:18:0e:e3:d2:b4:73:47:24:99:0b:
8d:66:cf:e3:c8:da:51:4f:7e:f4:5f:fa:ae:60:85:17:a5:2b:
41:97:13:30:37:b6:b3:eb:1f:fe:ae:93:93:c5:3d:d7:c3:25:
23:3b:c9:eb:7a:ae:73:73:29:3f:ad:21:c0:e0:8c:3e:b3:ff:
51:48:01:fc:f6:b0:9d:67:6f:7c:c1:cf:07:a7:da:ca:9d:50:
ca:96:de:63:d2:4f:c2:46:2a:0a:aa:aa:e2:f0:0e:59:5c:98:
b4:59:1f:ee:c0:46:42:19:80:32:10:6e:f5:bc:42:4b:64:98:
c0:b1:bf:cb:e9:27:79:6e:2d:b2:89:13:15:ef:48:1f:e6:52:
8e:08:04:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:27:03 2026 by rpki-client