Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: 6+tUvZhiZ2iZuf1nQKSmHxl84if7MqPvqyGgEtQNe/c=
Subject key identifier: E7:F0:4D:75:77:F5:D4:45:28:A6:38:F2:6C:A5:23:BC:2E:F1:BE:9C
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 01A0C6D80E60FB1323D36B7D49551F786668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 02:00:43 +0000
Manifest this update: Tue 22 Sep 2026 02:00:43 +0000
Manifest next update: Wed 23 Sep 2026 02:00:43 +0000
Files and hashes: 1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=)
2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: pXqViFbZ0ojEvQ+s8nPDafcwkZLwY3d+QwqlFZ60ork=)
3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=)
4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:0e:60:fb:13:23:d3:6b:7d:49:55:1f:78:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Sep 22 02:00:43 2026 GMT
Not After : Sep 23 02:00:43 2026 GMT
Subject: CN=e7f04d7577f5d44528a638f26ca523bc2ef1be9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:2a:72:df:4f:be:2a:0e:96:1f:9c:d0:69:
46:9a:3a:1d:75:f0:03:a1:40:0e:2d:ed:a9:85:bb:
72:e2:3e:bb:f8:90:52:a0:a1:65:f9:02:b2:39:19:
95:14:60:17:aa:39:2c:b9:54:b3:99:c1:e3:b2:92:
29:b0:32:c5:a8:ce:0f:e1:38:c8:d4:af:1e:b0:a8:
48:0b:31:ac:b0:9a:3c:86:7c:4a:a1:bb:d5:59:5d:
92:f8:cc:54:ca:9e:16:c4:4a:f4:c3:4c:58:5b:98:
c1:58:10:c0:79:9c:51:58:25:73:41:c8:41:9a:39:
6a:51:23:c9:69:d8:1e:42:90:b4:6e:e5:db:38:31:
14:6e:c8:fa:84:a9:76:89:b5:bb:27:15:71:9d:8c:
3e:0f:2a:25:18:da:ba:48:54:a4:90:75:b8:57:a4:
fd:96:3d:99:2f:43:cf:be:e8:22:85:05:c4:66:31:
fe:0d:0a:49:55:34:cf:77:28:66:e2:8d:43:8f:54:
9a:63:e7:37:68:f5:09:51:1c:03:5f:2e:3b:25:98:
a4:b8:37:d4:98:f9:f6:3a:95:97:e7:5e:6a:91:f0:
9e:3c:80:18:bf:7a:51:97:36:c4:fd:cc:b7:a4:17:
d7:ae:95:2f:be:2f:bd:49:d3:60:00:2e:35:65:b8:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F0:4D:75:77:F5:D4:45:28:A6:38:F2:6C:A5:23:BC:2E:F1:BE:9C
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8f:c7:24:9f:63:31:e9:d6:fb:ea:52:38:54:1e:39:04:d1:
38:1b:0c:68:07:8d:14:b2:bb:bc:45:c8:dd:f9:35:75:a9:86:
db:13:3c:e4:b2:16:84:67:e3:5e:6b:95:63:fb:6f:b4:4a:7e:
43:29:84:3c:39:0d:28:eb:2f:7a:ae:f8:81:4c:51:04:0a:77:
f7:78:e8:b5:65:20:87:fe:41:d7:1e:35:c1:7f:2c:83:a8:86:
08:90:23:77:00:6f:f9:f0:14:4f:7a:be:5d:d2:7d:ff:af:54:
ae:7e:e9:c0:0a:a0:5d:62:9b:99:bc:d2:35:c0:3d:89:50:49:
03:65:3e:ad:32:5c:8a:b8:cb:67:1a:0d:81:e2:61:1e:a8:16:
66:8c:d9:d8:d7:31:58:45:10:ae:eb:5f:ed:7d:78:7b:d1:c3:
e3:7a:cc:25:80:57:b7:4b:ee:ff:59:4e:cf:a3:fa:1a:ab:1a:
dd:3a:4f:8e:64:35:17:34:a0:7e:f6:90:e2:7a:c6:1d:c8:99:
af:3d:2b:a4:07:9b:f5:56:60:3d:eb:2d:e2:ae:50:ba:18:17:
65:17:3d:c5:0c:07:31:c2:8d:a4:3d:f7:58:2e:52:56:3b:96:
50:f8:5c:97:41:4c:0b:c5:ea:2b:54:d9:b4:a9:f6:59:fb:be:
8f:f6:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:59 2026 by rpki-client