Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: wUyaJH21p9yb1ZIhLCA25Jcv3cPUOXHioymhhSBWBdI=
Subject key identifier: 47:83:B9:16:D7:F4:C5:AF:1F:6D:30:B5:46:44:60:CC:D0:E0:89:A7
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 01A0C10CB29FB58D4C7F4390A557139F447E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 0732
Signing time: Sun 20 Sep 2026 23:00:29 +0000
Manifest this update: Sun 20 Sep 2026 23:00:29 +0000
Manifest next update: Mon 21 Sep 2026 23:00:29 +0000
Files and hashes: 1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: LxewyJiS/3sAWWFREEPb3Gwn4FCTTRy8GRZHrCMnfqg=)
3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:b2:9f:b5:8d:4c:7f:43:90:a5:57:13:9f:44:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Sep 20 23:00:29 2026 GMT
Not After : Sep 21 23:00:29 2026 GMT
Subject: CN=4783b916d7f4c5af1f6d30b5464460ccd0e089a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:98:dc:4f:08:e3:5b:69:68:7f:4a:f0:d0:
03:e7:ad:a4:74:e0:cc:b9:6a:b6:4d:73:9d:28:7a:
2f:45:b9:d8:1e:20:ac:49:07:dd:94:56:9a:06:4b:
26:50:f8:41:6b:32:ac:9d:27:b1:25:f1:a2:b5:42:
bb:86:5e:02:dc:56:65:e9:82:17:d2:76:11:02:2c:
45:b6:b5:e6:7a:c5:fe:ae:eb:ff:ee:9a:78:a1:15:
27:73:e8:2c:77:71:8e:82:c1:10:28:69:16:0c:79:
cd:a7:9e:07:e0:3b:9c:11:90:d5:46:cc:79:b2:14:
7d:cf:e7:18:6b:e0:b2:5b:91:01:66:ae:30:ce:39:
ab:95:8f:23:52:87:2d:b0:a9:3d:7c:ae:b2:62:7c:
11:4f:6c:10:0d:bd:9d:db:a1:e9:b9:e6:9c:f7:ba:
0a:23:b6:d3:11:f3:40:d9:9d:96:87:e1:c2:43:92:
d3:0d:4d:6c:45:99:a3:33:e2:bf:dd:88:72:63:52:
02:dc:88:39:30:21:91:3d:22:1f:5c:28:5a:ae:fc:
3c:c3:8a:ad:c7:51:8e:37:64:23:7f:1f:f9:c5:de:
d3:02:97:82:ad:70:93:47:26:2c:4b:87:b4:17:61:
af:2f:c4:fd:59:86:07:29:eb:7e:af:de:79:de:6b:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:83:B9:16:D7:F4:C5:AF:1F:6D:30:B5:46:44:60:CC:D0:E0:89:A7
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:db:01:9b:5f:78:8b:8d:54:89:ab:f2:73:8a:26:e7:79:3c:
4d:b5:70:88:3b:39:14:95:e3:fc:98:43:85:2b:d1:9c:73:75:
e5:85:57:37:6f:4e:a4:62:5f:24:47:01:0d:37:c3:2d:f7:d9:
e6:09:7b:6e:14:67:b7:94:66:18:a6:e4:fc:ec:e5:63:4f:e1:
df:bc:3d:37:1c:e5:07:bd:51:98:89:ec:9d:56:1a:2e:01:e2:
dc:6b:9a:0d:3c:04:ed:72:52:35:d7:8b:db:eb:cb:23:9a:a4:
11:82:54:16:67:dc:11:8e:9d:a0:c0:5c:1b:0e:70:8d:99:85:
12:f8:ad:2e:4c:fc:ad:b4:99:b6:c0:1f:e0:83:14:87:7e:5e:
b4:b7:74:42:d2:fb:ca:5a:c9:53:86:69:49:17:15:2f:b7:f4:
e4:c0:e7:8e:20:f6:65:dc:2f:0a:9e:5b:eb:a5:1d:a3:fd:de:
04:db:7f:a5:7a:94:a2:c4:1d:2f:33:00:1b:5e:b0:1a:3a:07:
fb:3e:28:a8:79:70:7e:9d:2a:bd:32:9b:76:23:8c:f0:fc:35:
14:59:d0:de:74:32:8b:d7:ea:29:36:10:12:48:b0:0c:cb:0f:
16:41:3a:95:76:dd:06:d2:d7:82:d7:ad:bd:0b:ea:52:d1:12:
37:de:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:13 2026 by rpki-client