Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier: lNe6rpgNzcjD9GuVQYRyXx0yrQ47wrzAK4ncZzySumE=
Subject key identifier: EB:3F:0C:77:3E:7E:68:AD:D4:76:C1:1A:F5:19:7B:C3:C3:5E:E0:20
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01A0C5C554471CA1313CAFCE85E548EAC932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number: 171B
Signing time: Mon 21 Sep 2026 21:00:38 +0000
Manifest this update: Mon 21 Sep 2026 21:00:38 +0000
Manifest next update: Tue 22 Sep 2026 21:00:38 +0000
Files and hashes: 1: 1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa (hash: r4s/pYFFvl0PuU1Pc1ZEalLcMszU2nIBrtcNDifNzEc=)
2: 59Qy54NWnnaF0UonsrF_AIsT2AM.roa (hash: fe8mUsn7ORXLXCy47FezO3nIOf1E6XAt4wFRWRU6mf0=)
3: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: NKd4qIk8xi6SXX2SPMZ9lQv1FcnSjt488aRmL8JLFI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:54:47:1c:a1:31:3c:af:ce:85:e5:48:ea:c9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Sep 21 21:00:38 2026 GMT
Not After : Sep 22 21:00:38 2026 GMT
Subject: CN=eb3f0c773e7e68add476c11af5197bc3c35ee020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:ab:25:ab:d3:7e:06:4a:21:f8:cb:9f:e7:
10:3e:68:e3:fb:26:3a:46:29:5c:85:56:6a:69:0d:
58:20:b4:b8:74:69:6d:51:83:f0:af:b1:56:89:38:
75:97:4d:15:c2:5d:8e:f5:84:68:b4:2c:88:6e:6b:
fb:4f:84:52:7a:f9:af:cb:f2:ca:30:23:48:1f:6a:
28:e0:dc:c1:18:05:08:12:47:7b:33:06:b0:51:61:
bc:e6:18:de:b9:33:48:31:3e:1c:76:5c:bb:58:83:
3a:6c:4e:27:87:ee:21:69:d3:bb:75:b3:44:a2:b8:
e7:c1:23:96:41:9d:39:5b:87:11:a3:3e:b0:5d:6e:
a3:17:e3:a5:30:57:e9:a4:fc:97:71:b5:b7:39:81:
66:eb:11:88:11:a6:f4:76:2b:29:d4:70:bf:d9:65:
ee:c2:7f:7e:39:0b:a9:e6:ac:f4:5d:23:f0:fe:e2:
4c:f4:03:f2:2f:14:a5:9b:64:25:5f:61:c9:95:28:
21:e9:b8:31:48:eb:c4:1a:10:ee:4f:c9:9a:af:10:
f6:74:36:8e:75:89:0b:dc:1f:c9:af:ed:81:d8:af:
d9:4b:64:40:a8:06:96:63:a7:36:cb:b1:14:3c:55:
ae:53:ee:32:2f:c1:81:9a:6d:36:34:85:40:11:cc:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:0C:77:3E:7E:68:AD:D4:76:C1:1A:F5:19:7B:C3:C3:5E:E0:20
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cd:a5:c0:bc:be:8f:c2:18:ee:cd:f2:17:b3:2f:1a:03:e4:
b1:20:aa:c6:78:d5:dc:1f:88:39:e5:22:5f:00:dc:6a:5c:5b:
42:a8:c2:43:05:ba:ee:0d:ef:2e:95:47:d5:bf:38:de:97:1e:
44:d8:85:04:10:16:7d:41:b2:2d:88:a1:05:3b:c2:87:1f:5c:
17:29:c3:7e:06:4c:dd:b1:c1:16:61:40:93:13:1a:06:ac:1d:
8a:f0:dc:82:f1:82:39:57:77:34:73:42:27:1e:31:19:d6:fb:
eb:44:d4:04:b0:49:bf:7c:f6:89:0a:14:b1:00:84:b8:96:cf:
7d:bf:23:92:75:b5:92:d5:09:03:b9:13:6e:b1:8b:f6:2f:2c:
1f:5a:78:b0:60:ee:1a:01:a4:83:17:0d:93:c6:d6:39:c3:0a:
4b:21:e7:f2:3b:12:2a:d2:0e:87:2c:e9:37:00:21:ae:1f:7e:
d1:07:10:94:e9:f0:0e:7c:47:54:3e:2c:0d:cc:2a:aa:66:85:
72:08:61:7b:46:ca:d0:62:01:4e:13:86:10:91:d6:c2:85:c8:
76:ae:92:13:86:31:e4:42:68:db:e5:17:fa:2a:70:8b:0c:1b:
43:47:65:f3:10:06:dd:b9:41:18:06:5e:68:97:31:2d:d7:db:
e2:01:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:44:39 2026 by rpki-client