
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: BlU/SN+8gcKtBVVWS3BzyDq9+nG3aCwL5SOC1LLA120=
Subject key identifier: 8C:2A:66:8E:FF:FA:3D:B5:97:38:0B:F6:26:08:B7:2A:35:3F:2C:BC
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 01A1AAF0414C4C4BED1A651D5E89307EFC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 186B
Signing time: Thu 05 Nov 2026 09:00:34 +0000
Manifest this update: Thu 05 Nov 2026 09:00:34 +0000
Manifest next update: Fri 06 Nov 2026 09:00:34 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: kEH+VRatxQjJA0ro5KD4+ZN+VkEtZlGN4dWMIe91NFY=)
2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:41:4c:4c:4b:ed:1a:65:1d:5e:89:30:7e:fc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Nov 5 09:00:34 2026 GMT
Not After : Nov 6 09:00:34 2026 GMT
Subject: CN=8c2a668efffa3db597380bf62608b72a353f2cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:f6:fb:57:a4:4d:80:e3:b4:f0:7b:6d:a2:
b3:04:8d:cc:ea:8b:f1:ae:5f:a1:31:29:3d:75:e7:
53:41:99:f6:5e:89:73:e5:d4:ea:89:6a:ec:41:aa:
55:a5:27:ec:03:75:fb:9e:c3:0f:19:72:b7:53:e0:
44:d2:21:4d:71:eb:51:c0:22:bf:b5:48:5a:23:5a:
d2:31:bb:1e:81:2e:46:4e:e1:1a:2c:bd:93:f5:f5:
13:04:20:74:b2:ad:8a:58:f4:da:a7:0e:2b:ca:ef:
f3:db:43:d0:19:40:01:f4:8f:37:a5:ad:dd:46:91:
df:bf:2b:cc:cc:14:66:a1:e7:6d:d6:0a:d2:1e:08:
a3:f0:69:9e:53:db:59:ee:41:ee:f1:c9:7d:f2:ee:
b3:4d:c9:92:27:b3:53:19:3e:9e:85:3c:1e:c7:20:
d4:6a:1d:75:02:62:60:36:21:82:fe:de:dd:c6:b3:
c0:89:a9:b3:15:89:be:91:17:13:4d:27:28:73:f3:
0a:2b:f0:58:b8:58:a6:23:49:e8:2a:96:3e:70:7d:
b1:e5:21:4b:7d:a6:5a:8e:6b:ee:77:94:b1:12:35:
63:4d:87:33:b2:eb:61:45:34:a2:0a:7d:61:e7:ee:
27:44:45:ee:7d:16:ad:a1:90:7d:0f:a7:8b:67:4e:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:66:8E:FF:FA:3D:B5:97:38:0B:F6:26:08:B7:2A:35:3F:2C:BC
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bd:be:e4:ac:ee:1c:19:65:1a:6c:9d:13:0c:74:35:cc:a2:
0d:26:54:9d:12:67:db:2f:8f:f9:ef:5b:4e:9d:57:2a:96:2d:
a2:74:a7:de:a2:5e:41:84:ff:6e:3e:f3:64:a7:41:a0:59:b0:
e1:e1:d7:60:49:ae:4a:69:c3:93:48:ff:b6:ab:51:5d:fc:dc:
99:6f:66:0d:da:d2:00:dd:45:ca:f0:06:0b:7f:b1:3e:35:5c:
cd:2e:6d:b0:50:25:2c:f5:96:5f:f0:98:43:05:02:71:51:bc:
b8:19:43:f3:0b:b4:13:76:92:70:7d:4c:37:30:1e:c6:6b:d5:
7a:59:39:22:9e:ee:5e:58:4d:ec:28:80:68:89:4b:a2:d1:e8:
2e:23:1e:a2:92:70:77:5d:ac:39:b4:6b:36:6b:5a:98:d5:a0:
94:bd:2c:ee:f4:51:fd:f5:5d:f5:05:92:37:2e:6a:3c:d0:e0:
7b:1b:83:ec:f3:c0:4a:15:8f:46:ae:61:b7:83:14:02:7f:20:
6d:45:59:c9:d9:93:99:41:f0:d7:38:2c:08:62:03:fa:02:ef:
5e:69:12:36:03:c4:b2:10:51:8a:df:cf:48:77:49:5c:f7:d2:
4d:e9:1a:bd:06:24:3f:1c:11:60:8b:01:12:da:e8:39:c0:e6:
bc:cc:e4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:06 2026 by rpki-client