Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
File: s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json)
Hash identifier: A9jeFf8WKFRLJLU746CgyDp6CkeF8oIz+5LJ+XJnMj8=
Subject key identifier: 2F:52:1D:20:B5:78:CB:44:43:07:2B:34:45:84:C7:34:C3:60:83:8A
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Certificate issuer: /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial: 01A0CC6C833550A4FA9E4CD2684D2FC0DFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
Manifest number: 028D
Signing time: Wed 23 Sep 2026 04:00:58 +0000
Manifest this update: Wed 23 Sep 2026 04:00:58 +0000
Manifest next update: Thu 24 Sep 2026 04:00:58 +0000
Files and hashes: 1: ptxNY_ik7GTtx3Nvsz1IktW_2ug.asa (hash: zaORMCc6le7BfLENyKhZEMkSVb/nKVxd6bCWLklbXHA=)
2: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: E+7DregzmxTvcgh+vtqnGGKHNIE6B6qj/utBxc8/HTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:83:35:50:a4:fa:9e:4c:d2:68:4d:2f:c0:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Validity
Not Before: Sep 23 04:00:58 2026 GMT
Not After : Sep 24 04:00:58 2026 GMT
Subject: CN=2f521d20b578cb4443072b344584c734c360838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:06:ca:0f:d3:7e:36:a4:b5:c0:2f:76:b0:
fe:12:d3:96:c9:03:0e:14:1d:9c:c6:bf:31:92:75:
8a:13:10:30:55:35:8c:51:8a:14:ed:e8:c0:55:54:
be:17:e3:c4:93:8a:cb:10:2c:1a:d9:4e:7e:0b:21:
cf:bd:45:72:b6:3b:fc:41:9a:e2:62:f3:7f:88:7c:
60:25:32:7a:05:6c:0e:cd:78:eb:0f:f3:2e:57:b4:
a0:ff:87:7e:75:95:36:85:ed:1d:e0:cb:88:af:dd:
06:9a:1c:3b:d7:4c:08:b8:40:87:c4:70:37:48:01:
51:9a:3c:6b:30:64:92:ce:58:d6:eb:cb:07:0e:44:
d6:72:67:e7:61:9c:a1:c7:08:33:ba:17:61:fd:a7:
db:b6:02:cc:36:f9:52:54:0b:8b:42:a0:e9:15:f9:
6c:8f:54:51:2b:ba:ef:a0:08:18:7d:8f:e2:dc:10:
11:db:2f:f8:f3:28:97:90:ae:f2:56:c8:cf:6b:cf:
1d:75:86:aa:35:c9:21:d0:37:0f:4b:dc:c8:07:03:
d0:ac:3a:e1:76:47:c4:d8:36:ec:f8:9b:a7:2e:c0:
27:82:ea:ed:ec:3b:5b:ab:7d:0e:97:71:86:25:0e:
62:ad:71:e4:4e:50:a3:28:22:f4:ef:2c:1b:b5:91:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:1D:20:B5:78:CB:44:43:07:2B:34:45:84:C7:34:C3:60:83:8A
X509v3 Authority Key Identifier:
keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:9d:f7:3d:c0:bd:80:fc:8e:d6:4c:98:f5:94:c3:3b:e6:
ea:8c:ac:1e:9a:0b:20:e6:52:71:17:aa:75:74:ac:ba:42:0b:
68:85:a9:e8:9f:fa:99:e0:c3:c4:bb:d8:c3:b5:df:8c:41:6b:
bc:9a:8a:23:da:4a:c3:cd:a3:f8:3c:1f:0e:e7:14:59:c0:7b:
25:3a:b9:59:74:08:ad:be:2c:52:76:4a:b6:cc:b9:b3:9f:86:
af:83:08:06:80:f7:7e:bc:e7:34:ec:d9:2f:5a:b3:a8:13:22:
8c:de:07:db:d0:59:82:57:0e:ed:4a:49:50:7a:94:af:fa:f9:
4c:c1:33:50:70:41:18:67:98:d5:11:ee:66:19:d6:f1:04:ea:
09:34:20:67:2f:68:36:57:2c:0d:c5:82:5e:09:27:91:d3:fd:
8c:32:d4:23:e4:09:2b:ee:d0:8a:e6:3f:09:e4:b9:cf:84:d3:
68:d5:72:2b:12:74:ce:86:74:6c:37:8a:80:5c:17:c6:d6:99:
5c:7e:3b:79:1f:4f:06:34:cf:5d:6e:19:9f:a2:29:7d:ed:bb:
dc:93:03:40:17:71:6e:b2:28:ef:38:15:03:81:2e:7a:bc:85:
75:d5:2c:06:36:91:43:58:65:7f:27:37:de:d2:7f:23:d0:2d:
f9:7a:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:07:09 2026 by rpki-client