Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: k0iOPXo5J2dvYpaVL4TjwOTiseOCjohY5jtaAeYgMhU=
Subject key identifier: 93:8E:D3:E6:3F:0C:0D:4E:52:A1:75:B7:63:26:0D:C3:9A:FF:BD:81
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 01A1C40B3DE1E5BB0252E18A7C2336C512CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1878
Signing time: Tue 10 Nov 2026 06:00:33 +0000
Manifest this update: Tue 10 Nov 2026 06:00:33 +0000
Manifest next update: Wed 11 Nov 2026 06:00:33 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: wnEkyh0Q3SHcHjbTdkcW8WcsvtOUI5Cf/OADPkVs0Ys=)
2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:0b:3d:e1:e5:bb:02:52:e1:8a:7c:23:36:c5:12:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Nov 10 06:00:33 2026 GMT
Not After : Nov 11 06:00:33 2026 GMT
Subject: CN=938ed3e63f0c0d4e52a175b763260dc39affbd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:cc:f4:92:ba:c3:ad:c7:30:bb:d5:1a:67:
56:b9:af:d0:d7:2e:70:83:76:01:d7:56:e3:6b:fe:
65:39:70:d1:ff:6f:1b:e8:3a:ce:98:d9:ff:29:a3:
2d:46:90:c2:70:08:e2:11:e5:db:5f:c9:b7:9a:6b:
15:89:35:c8:09:ab:e0:c1:8a:2f:75:0d:d4:0a:c3:
45:ea:d4:f3:65:6d:2c:fa:a1:a8:cc:cd:9e:87:09:
0c:25:90:cc:a8:98:34:15:03:1a:6c:b2:5c:d9:8b:
00:04:b7:62:8a:03:6c:de:38:69:9a:94:7f:d2:9a:
73:97:6c:42:60:1e:ff:01:ed:78:e4:6a:73:c5:f1:
2c:d2:9f:27:61:10:3f:15:d3:f1:bb:8f:45:35:0c:
d0:68:b4:f3:a7:52:0a:9f:ff:fd:c2:a4:0e:b0:df:
25:da:fe:c6:16:3b:95:a7:52:78:7a:b0:9c:30:53:
57:0c:8d:65:3e:d3:2d:14:78:ba:2e:c2:84:c7:1e:
82:02:77:b8:4e:00:3c:d5:b5:c4:9c:b7:56:1d:d5:
f6:6c:71:e8:d7:8e:7d:bc:ae:cb:1e:a1:77:4f:0d:
ed:7f:d3:bc:77:b9:bf:a7:62:b0:4b:1e:b4:29:d5:
f9:e7:a7:be:57:8d:8b:a2:ba:a6:16:94:ca:07:01:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:D3:E6:3F:0C:0D:4E:52:A1:75:B7:63:26:0D:C3:9A:FF:BD:81
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f6:12:91:95:1e:4f:06:d8:bb:a1:ae:23:2c:2f:93:73:f8:
d0:11:6b:02:57:59:3e:a7:b0:fe:31:81:81:6b:89:32:c8:c9:
d7:76:df:e4:97:9c:5e:84:e6:15:2a:56:d5:d3:6d:3f:fe:20:
7c:bb:00:75:ba:51:c0:23:ad:36:e1:c3:e6:77:96:26:00:2f:
60:e1:33:77:8c:42:9f:76:60:19:eb:f0:6d:3b:6d:2c:5c:30:
1d:09:61:83:61:f1:7c:b1:53:f9:4a:93:7f:91:0b:65:72:2a:
65:09:64:f6:6a:9c:b4:3f:77:f1:eb:37:ee:0d:ad:03:bc:50:
fa:66:6b:a2:61:d2:1f:54:d0:81:a4:a1:03:de:26:46:63:38:
f1:bb:24:e7:30:9b:70:53:45:d5:a3:8e:fa:19:89:7b:f0:b6:
0c:a4:60:0b:18:e9:5d:35:80:00:a5:b1:72:a8:3b:4b:20:46:
ec:69:a3:c3:73:f4:41:3a:0f:3e:18:ed:42:9d:c5:21:12:1d:
5f:46:4b:69:74:b6:76:fd:f9:18:be:65:2b:66:57:0c:20:97:
2b:5d:db:ce:3c:0e:77:83:01:c5:af:90:fd:f2:84:d8:bf:f6:
0b:91:f9:28:c0:18:e9:34:37:9d:5a:e3:a6:2d:54:85:8d:b4:
d0:25:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:37:44 2026 by rpki-client