Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: 9U01WALW9MsV1zOMU7afgrh388W7ZwUTLDeAOdVm+gQ=
Subject key identifier: B7:77:9F:BB:E4:5E:57:67:E9:EB:87:7D:2E:5E:4F:DB:91:7A:F2:1C
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 01A0C9D904ECB9F528CB98E2E7BD6B2C88BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 084C
Signing time: Tue 22 Sep 2026 16:00:38 +0000
Manifest this update: Tue 22 Sep 2026 16:00:38 +0000
Manifest next update: Wed 23 Sep 2026 16:00:38 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: 4SnN2Oee/+ILAukSIBZ8V1iz6QalJzZC0L7wA0S0b7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:04:ec:b9:f5:28:cb:98:e2:e7:bd:6b:2c:88:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Sep 22 16:00:38 2026 GMT
Not After : Sep 23 16:00:38 2026 GMT
Subject: CN=b7779fbbe45e5767e9eb877d2e5e4fdb917af21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:2e:c9:b7:dd:de:ce:20:13:4c:a9:89:9e:
40:4b:bb:f3:bf:85:86:de:85:46:c9:7d:2b:5e:82:
7e:fb:74:dc:82:aa:8d:c6:53:c0:e7:10:12:d3:b6:
24:c3:72:0f:ba:78:1e:bf:f7:6d:4a:51:fb:fe:46:
1b:14:8f:58:d5:13:18:15:c8:98:e9:cd:3c:02:d3:
77:27:d1:2e:51:6c:05:f9:5e:e0:4e:c1:c1:95:08:
29:5f:27:58:f5:fc:a8:1d:c2:86:54:39:15:81:95:
15:ac:3b:f4:83:ce:41:08:07:6b:c2:50:d1:c3:e5:
f1:e3:46:23:b5:0d:8d:b5:3f:19:7a:c6:d7:df:bb:
ee:cd:bf:33:f0:c2:51:ca:e2:76:cd:81:c4:4b:d1:
b1:22:d0:fa:2e:bd:f8:07:d5:ef:ac:de:5e:dc:34:
27:7f:05:a0:dd:7f:50:5f:75:79:a5:b5:40:cb:d3:
ee:59:d3:ac:c1:04:84:50:98:08:35:4c:32:b1:a4:
bb:e1:03:37:b4:9e:c2:46:24:76:e5:5e:65:c7:a7:
63:5a:f5:6d:34:a6:d1:6e:a6:78:e8:6f:5e:ca:47:
33:0d:df:6a:73:79:ff:ab:01:d2:c4:df:4d:64:29:
07:b9:e5:f5:94:45:da:b4:5d:e8:ae:bd:64:a5:63:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:9F:BB:E4:5E:57:67:E9:EB:87:7D:2E:5E:4F:DB:91:7A:F2:1C
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d3:41:1b:ab:eb:a0:77:e1:90:70:52:03:7c:25:b0:c1:96:
1a:1f:47:ee:0b:27:4d:91:84:fc:e6:5d:a8:9a:92:6f:7d:4e:
03:3f:28:91:d9:d7:7e:f0:47:a8:45:ad:63:e4:58:40:c8:ef:
8d:3b:5e:04:3e:7d:1c:38:75:04:68:dd:67:97:95:19:1a:70:
4f:21:c3:9b:08:b9:ce:e4:84:4f:bb:9a:2a:28:86:44:32:d3:
43:fe:15:f6:a3:26:e2:50:21:35:7d:b0:5e:36:e8:86:90:ba:
09:a1:d3:9d:f7:f9:f4:58:81:91:2f:54:1e:2b:1a:d7:b3:b8:
5c:fe:d1:49:3d:b7:4d:92:ed:95:d4:26:23:f2:e8:85:a8:37:
48:26:02:be:13:f2:b3:74:b3:b7:d1:8f:0f:65:41:57:a2:42:
01:fa:22:91:59:9c:9a:3b:d6:10:99:cd:f8:71:ed:55:99:e8:
88:1d:5b:53:56:78:3a:0e:06:48:8e:3c:c1:3a:d0:f0:3b:fc:
9e:27:fc:62:29:c2:d4:1e:d0:57:81:79:c2:b0:b0:31:77:0e:
8c:72:ad:a7:b1:1c:8d:3e:68:06:b0:e2:29:a3:a7:eb:76:5c:
18:16:22:7d:e9:30:a5:81:5a:bd:86:87:75:22:9c:37:cf:d4:
4e:c8:5d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:08:09 2026 by rpki-client