Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: GmCP91sJT+HY6fkHV6ITlEFQLivr0lhjE631xueHxH0=
Subject key identifier: 85:F4:5D:6F:48:B9:77:0A:0C:A9:ED:2A:01:BD:97:05:A8:54:72:49
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 01A0C10CDCEFE8482E22F39BA19584CD1B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 23:00:40 +0000
Manifest this update: Sun 20 Sep 2026 23:00:40 +0000
Manifest next update: Mon 21 Sep 2026 23:00:40 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: S9lTBQDW0jTwr6419LWBvGRQQn0loznHCXTXafBf2mY=)
2: 8n1cP-EeM_0aPON8tQRs5t94Tcw.roa (hash: oWMSKnzC7MzhiIiFzW+fvutsE0+XNV6RpmpSUYLiCP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:dc:ef:e8:48:2e:22:f3:9b:a1:95:84:cd:1b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Sep 20 23:00:40 2026 GMT
Not After : Sep 21 23:00:40 2026 GMT
Subject: CN=85f45d6f48b9770a0ca9ed2a01bd9705a8547249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:fd:d6:f7:4c:83:26:02:2f:4d:68:7a:55:
5e:95:9b:d4:fc:77:52:e3:b3:31:94:24:be:c1:e8:
d0:29:79:0f:7e:72:05:7d:5a:7b:0e:8f:b4:df:26:
99:4a:0f:72:46:dc:4b:4b:b8:33:fc:0a:5e:70:24:
ce:19:db:e4:36:e3:a2:36:b8:7b:3b:ef:fa:9c:5d:
53:3f:ec:21:a3:27:c7:2b:03:11:82:6c:39:a9:be:
50:fb:5a:0f:e5:6c:56:8b:33:35:33:6b:a1:8e:ea:
09:e5:79:b2:f3:e8:0c:e0:10:d2:5d:06:88:98:d0:
91:aa:79:32:2c:94:6a:3c:2b:7a:b6:c2:9d:c1:e2:
60:b3:f7:bc:6c:24:ea:02:4a:47:89:eb:09:b5:b6:
c1:9d:5c:52:77:b2:45:02:5b:59:69:54:95:47:fc:
3b:7f:3f:5d:9f:0a:2a:cb:22:e3:d6:fa:a1:c2:46:
90:bf:ee:1d:18:24:05:a7:0c:c9:44:7b:9e:51:6e:
72:8d:22:d3:88:da:9b:76:33:e6:8b:ff:9f:ec:b2:
22:93:48:d7:5d:0a:ec:77:fd:b5:d0:d9:01:c2:83:
66:22:38:1c:76:85:3c:c5:a1:e6:a2:7f:ab:f4:13:
b7:01:ce:3c:13:00:30:98:4d:5a:c7:0d:70:87:1f:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F4:5D:6F:48:B9:77:0A:0C:A9:ED:2A:01:BD:97:05:A8:54:72:49
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:14:80:bb:ca:38:ee:ba:77:72:10:55:d4:57:d5:76:2d:49:
a9:3c:e8:be:42:9c:fb:f5:9f:22:dd:80:55:d0:fe:60:cc:48:
2b:dc:cc:1d:cf:48:ed:8b:43:54:23:b4:ce:33:53:fe:4c:a6:
35:5a:48:0d:21:24:68:cf:3c:61:87:5f:51:c1:9e:ae:69:58:
07:93:a1:d6:34:0a:32:8e:b8:1c:b4:38:d8:0f:36:6f:63:13:
1f:c8:94:73:ea:af:67:02:0d:9b:cd:21:cf:ce:46:e4:cd:be:
d8:8e:a0:ad:fa:f6:e3:4c:d7:da:c7:7b:a7:d6:2e:25:67:f5:
0b:2a:18:b9:4a:b3:45:72:9d:7c:de:5a:ad:14:34:59:02:22:
84:b7:11:51:1c:a3:50:a8:84:8e:0c:9e:93:b7:07:39:67:34:
fb:75:f1:6c:44:67:57:7b:78:d2:06:91:78:24:36:31:db:f4:
30:33:66:b9:24:e6:e6:ce:27:9c:25:db:04:02:f4:3d:14:23:
da:66:db:f8:41:1d:51:a6:c9:bb:cd:0d:98:26:06:23:9a:a2:
c9:3b:75:57:cb:da:b3:4e:50:f8:7f:ed:29:9c:12:61:e2:f3:
0f:26:7c:27:9e:50:07:c1:09:fd:e1:d9:a0:e1:40:62:5b:93:
3c:52:17:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:09:51 2026 by rpki-client