Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: Xow+m7yww/RU8CGYNnmNctD0bJlb/rsKPfWa+oQvHzU=
Subject key identifier: C7:7D:20:35:A1:E3:C9:83:E0:34:7B:20:0D:7A:3D:C0:F2:10:9F:ED
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 01A0C8C62AA3D44EA2E435C0C11868D861CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 11:00:25 +0000
Manifest this update: Tue 22 Sep 2026 11:00:25 +0000
Manifest next update: Wed 23 Sep 2026 11:00:25 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: qEWi8upakTz2senteKM+8fL3jk9pqgkPPAuTjEfTY3w=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:2a:a3:d4:4e:a2:e4:35:c0:c1:18:68:d8:61:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Sep 22 11:00:25 2026 GMT
Not After : Sep 23 11:00:25 2026 GMT
Subject: CN=c77d2035a1e3c983e0347b200d7a3dc0f2109fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:c1:65:b1:8c:da:fc:c2:90:23:ee:9f:cc:
66:24:27:d9:d1:f3:9e:7b:f5:80:ac:a1:78:db:19:
17:b1:56:a3:bd:50:ae:e3:9a:9c:38:28:8f:2c:d0:
e1:3f:43:cc:1f:2d:2b:ba:7c:f8:8d:8b:d8:89:cf:
ab:77:b3:86:e1:78:63:a9:85:85:0c:24:32:94:d0:
0b:5d:90:3e:11:96:40:43:01:1f:70:c7:6d:82:b8:
6b:d6:4e:0f:af:69:42:5e:0c:10:55:ff:10:c5:f8:
2c:83:29:34:0a:c3:a2:14:c7:5b:df:9b:94:3d:01:
63:5d:b2:fb:61:7a:01:cc:a7:3a:b0:ce:60:00:cf:
aa:c8:a2:48:d4:e5:0c:a0:81:f8:67:21:14:36:b1:
92:c2:3a:ba:00:24:57:a6:53:80:33:6f:46:01:7f:
ce:91:7b:09:3f:5b:aa:36:4b:c6:07:94:11:b0:32:
02:c5:97:36:12:8b:04:90:31:35:e9:55:f0:60:85:
ab:a6:9c:17:0b:0b:15:78:95:20:1c:5e:4e:66:f1:
53:3c:d5:53:ba:32:ef:ac:14:29:7b:a2:16:d6:82:
1e:e5:80:74:73:38:35:d5:fa:83:0b:cc:7b:25:f6:
76:4d:5c:10:ba:28:0d:45:fb:cb:02:52:8c:f4:79:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7D:20:35:A1:E3:C9:83:E0:34:7B:20:0D:7A:3D:C0:F2:10:9F:ED
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ea:50:3b:92:70:15:fc:66:4a:76:b1:89:53:48:ce:e2:ce:
09:86:38:91:66:14:8d:21:50:14:0c:fe:ec:39:6f:a9:11:6f:
75:3f:84:14:fa:c1:f4:10:b0:e4:90:c2:39:66:b1:d3:03:07:
12:6f:ec:ac:e8:9e:2a:d6:d3:72:df:c4:90:e7:48:64:cd:38:
6f:a4:43:26:37:db:ac:af:aa:f8:2e:9b:d7:d6:8c:96:d8:42:
12:61:90:42:7d:6a:51:58:66:4c:b1:f0:18:55:9f:d6:d7:06:
42:ce:e1:37:d3:7b:3a:79:ee:bc:24:d6:5b:cb:b4:4c:72:a1:
96:f1:ea:bc:6c:06:62:bd:0a:be:fb:93:56:fb:91:81:16:c5:
49:be:42:33:f7:14:ff:ef:ab:6a:03:3d:b5:04:b3:71:b5:58:
2e:52:da:e0:60:0b:84:6a:c9:b8:bb:3f:d3:53:f6:a5:99:00:
9c:62:8f:aa:f9:ab:47:b7:da:92:33:e4:07:4c:a9:d2:21:5c:
68:54:06:e3:53:a3:55:ff:8d:c5:a8:9d:f0:e9:c7:05:46:33:
04:66:6e:f7:03:df:81:54:86:90:39:b7:dc:f2:74:48:9a:20:
1a:4b:fd:68:ce:8c:72:36:c6:4b:11:bc:d7:5f:8d:c4:5b:b4:
21:66:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:01:14 2026 by rpki-client