Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: A1fw756qlzBcSi01VHuytewR3PUjma+yrvJ90lCXZ04=
Subject key identifier: AE:5E:0D:8E:75:ED:76:B8:F8:4D:E6:9A:75:21:58:42:0D:81:57:19
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 01A0CF6D03CD89F5AE9FC05E3A4C05D32EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 10F8
Signing time: Wed 23 Sep 2026 18:00:23 +0000
Manifest this update: Wed 23 Sep 2026 18:00:23 +0000
Manifest next update: Thu 24 Sep 2026 18:00:23 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: dL8+WwAygDF1gMsZWVjSoEg8xDb2iv8fz9zCasbbAC8=)
2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:03:cd:89:f5:ae:9f:c0:5e:3a:4c:05:d3:2e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Sep 23 18:00:23 2026 GMT
Not After : Sep 24 18:00:23 2026 GMT
Subject: CN=ae5e0d8e75ed76b8f84de69a752158420d815719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:36:d1:dd:06:c4:91:1c:c4:ef:25:39:8c:
e1:39:60:21:29:23:a6:ca:31:85:ae:2e:90:29:15:
ea:25:a3:77:f7:4b:2f:cd:36:21:a2:a8:34:1f:3f:
f6:cf:41:d5:9a:57:73:e1:74:d6:53:63:7b:6a:b3:
1a:84:9d:e4:39:cc:cb:d9:6a:5b:62:5a:31:0a:c6:
3c:7a:39:bc:71:51:94:67:15:ba:f0:54:fe:08:21:
47:34:fa:90:b1:b3:98:33:6c:35:6c:c1:59:ed:13:
9e:b5:39:86:4a:b5:0d:35:4c:98:5c:82:7c:f7:c9:
2a:f8:d1:a4:10:b9:d5:af:89:7f:28:11:a5:9f:4f:
c6:7a:40:4b:09:25:00:6d:5c:c0:c6:3f:20:de:5f:
6d:84:74:9f:f5:92:ac:f9:be:e9:06:78:0a:47:2b:
1c:5f:5f:71:a1:15:97:6c:52:62:0e:9f:d9:f1:2b:
17:92:bf:4b:52:2b:96:66:d5:b0:89:a5:c8:03:76:
fc:ff:f5:4e:4c:85:85:b6:85:a7:8b:54:58:88:6f:
0f:e1:3e:45:31:a6:d2:74:25:87:c7:3c:a3:7c:3e:
3c:d2:2f:da:10:4b:7c:df:a8:8b:4d:0e:31:5c:5b:
fc:3c:88:19:90:84:ce:61:97:02:a4:54:3b:8e:19:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5E:0D:8E:75:ED:76:B8:F8:4D:E6:9A:75:21:58:42:0D:81:57:19
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:8c:c7:99:31:ae:c5:c5:d8:bb:8b:01:06:8c:af:6b:5c:
38:b2:77:ca:c4:ae:ea:44:b2:e6:7c:d9:0b:aa:b6:99:e7:88:
1c:c0:2e:3c:bc:ff:20:e8:39:db:c0:54:16:93:a9:c7:bb:57:
9d:ce:e2:e4:99:8e:fc:52:c1:f4:df:09:c6:72:94:1b:50:34:
14:32:5a:43:67:32:ad:9f:3e:b1:87:b1:8d:80:88:fc:e4:38:
41:8c:57:9a:91:7d:8a:25:2a:72:e5:1f:02:a0:f2:4c:02:15:
df:38:91:03:fa:25:55:54:b9:b1:37:b8:22:11:e5:17:31:aa:
26:99:2f:6d:0e:22:a5:e0:bb:85:d5:f0:d8:08:81:30:19:a4:
92:77:99:26:1f:c4:34:98:56:65:34:6e:f3:fb:dd:b5:94:21:
3f:a6:57:0b:99:15:b1:4d:b3:00:d9:e6:1c:b5:f5:a8:a0:df:
87:bd:63:f2:25:43:a9:02:36:87:cc:1e:5d:c8:8d:1b:90:7a:
78:3d:c3:ab:bb:14:cc:2c:05:03:67:24:ed:4a:c4:f2:72:e6:
3b:36:78:71:7f:b7:14:7e:38:22:c8:5f:aa:1d:f1:54:4b:ad:
54:75:13:b4:b3:97:c0:ec:3a:cc:60:28:45:15:d7:48:5d:c1:
48:d4:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:35:04 2026 by rpki-client