Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: FrxgZCZFejX+gZdOC1ivgOgrKQjrdHwpIRHT00i5wW8=
Subject key identifier: BA:2F:F9:AC:E2:12:33:6D:C4:B6:F8:7F:60:F0:EF:7F:6C:C7:6C:6E
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 01A0DBA9484FE2ADD5BB0A84C78130A82E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: 028A
Signing time: Sat 26 Sep 2026 03:01:39 +0000
Manifest this update: Sat 26 Sep 2026 03:01:39 +0000
Manifest next update: Sun 27 Sep 2026 03:01:39 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: L2hzX1HU3k9zNM/PrTuGpd+Q8meJd6VTtBULpUn8pJA=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:48:4f:e2:ad:d5:bb:0a:84:c7:81:30:a8:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Sep 26 03:01:39 2026 GMT
Not After : Sep 27 03:01:39 2026 GMT
Subject: CN=ba2ff9ace212336dc4b6f87f60f0ef7f6cc76c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:c1:8a:d6:7b:02:b3:6b:49:fb:39:e2:97:
f5:f7:8c:28:ca:ee:a8:a9:66:58:1d:d3:d0:1f:24:
8d:90:1d:1e:92:0b:b0:1a:3c:39:9c:6b:2e:94:68:
27:8e:0a:98:61:de:0d:91:3f:c0:2a:82:6c:6a:3a:
fb:e9:58:7a:af:41:98:63:19:5b:ba:ab:e1:be:50:
62:c3:5a:bf:06:b9:85:a7:11:09:9c:68:2c:0e:55:
95:f3:5b:53:1b:fb:93:02:27:d1:a6:d7:90:d9:ef:
ed:d2:7c:a7:83:81:38:f2:50:aa:a4:27:7a:af:c5:
6f:33:8b:af:bb:1a:7b:b5:7f:b3:f4:cf:0f:a9:7c:
08:b7:54:10:da:b5:e2:01:27:76:10:c9:b1:8d:83:
87:13:fa:15:1e:19:de:89:df:71:a6:85:db:5c:cb:
3a:46:a5:61:b1:c8:c5:2f:4a:49:aa:40:2d:92:83:
65:f2:bf:63:ed:94:b9:84:24:fa:52:f2:f1:96:e9:
a8:83:ad:e5:87:46:61:85:98:28:6c:bf:12:94:72:
1c:10:97:0a:59:04:73:c6:de:16:35:3d:c6:2b:36:
17:47:78:26:e4:8b:cf:a4:99:1b:d9:b7:0d:ee:05:
93:db:15:b1:07:9d:6b:78:1b:ad:ef:a8:32:92:56:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:F9:AC:E2:12:33:6D:C4:B6:F8:7F:60:F0:EF:7F:6C:C7:6C:6E
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:02:44:e6:7b:34:62:07:f7:7b:a0:51:55:66:70:ed:8a:4f:
a7:1c:fc:3b:77:2b:0c:81:9a:c2:ca:c9:a0:03:40:63:79:60:
b3:e6:cf:3e:46:ee:ba:ce:5c:19:7a:54:05:9c:17:69:32:95:
0b:9e:04:98:a4:78:35:d6:e4:6e:3f:a5:20:cb:12:6f:42:fc:
3b:10:cd:d9:33:94:12:67:89:f5:73:34:3b:ef:f0:f1:9e:f3:
d0:09:36:37:0b:e1:cd:3f:6f:59:89:91:c8:c9:21:95:78:83:
0a:ae:15:62:34:a6:df:dc:8d:cd:28:a9:ea:c4:4c:46:71:e9:
0f:b6:de:70:c9:f4:b2:bf:b3:08:40:02:5e:d5:7b:73:f7:ef:
d1:59:3f:e2:eb:70:a1:f4:3c:67:21:54:4c:49:0a:54:d7:6f:
4e:41:db:33:37:4f:a5:3a:d2:b6:8f:b7:3a:1d:60:7f:d7:9c:
3c:6b:2c:09:e6:e5:e2:39:57:07:47:2a:e3:f6:3c:6d:45:35:
98:37:d8:04:6e:00:79:bb:d9:98:84:0b:9c:54:77:e8:cd:f8:
6a:56:d3:41:cc:b2:d5:b7:94:c4:64:5f:72:b8:05:19:96:ab:
99:0d:c2:b0:14:37:08:97:31:49:46:dc:8b:44:c9:28:bb:8c:
9f:42:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:00:11 2026 by rpki-client