Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: ekYw/FDLrbYE8sYzDlpLfPBQEaT5KSqaVTPcaNeZd7o=
Subject key identifier: A8:20:75:8E:31:83:0E:73:49:DC:43:AC:02:84:DA:D1:96:2A:67:B2
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 01A0C331C388A8D0D463A174832D8B6B6AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 17F3
Signing time: Mon 21 Sep 2026 09:00:13 +0000
Manifest this update: Mon 21 Sep 2026 09:00:13 +0000
Manifest next update: Tue 22 Sep 2026 09:00:13 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: LDjaAonRwMymTh/68uJKUMVvt+nBRAs/oo3Jyq/C5KE=)
2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:c3:88:a8:d0:d4:63:a1:74:83:2d:8b:6b:6a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Sep 21 09:00:13 2026 GMT
Not After : Sep 22 09:00:13 2026 GMT
Subject: CN=a820758e31830e7349dc43ac0284dad1962a67b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:a4:b3:f3:45:ad:6b:66:00:6f:27:44:94:
c3:66:4b:ea:8f:12:2c:76:4b:35:42:fd:46:30:f4:
98:46:44:78:c1:32:2d:c0:43:49:1f:30:87:da:83:
54:f2:16:43:0f:1d:af:dc:32:ac:e0:36:f9:10:79:
df:de:48:6e:9c:84:32:30:12:fd:65:90:15:42:d9:
5a:b2:01:14:1b:e5:a6:20:14:ac:5d:dc:b5:41:ef:
ed:bc:21:92:85:03:67:42:5a:2a:ee:33:a6:0b:a3:
cd:b6:60:af:30:51:4e:bc:f8:69:e9:8d:53:db:43:
4a:b7:53:b6:4e:9b:da:73:48:84:68:af:d0:1d:d3:
60:84:05:64:de:e3:1f:b9:01:86:64:1c:71:b0:3f:
bf:f6:4b:e1:f3:d5:ab:b8:01:ae:53:1f:b8:cf:c4:
e8:57:c7:bc:c1:7c:89:f6:07:5a:b6:3b:62:72:68:
bd:ff:39:40:38:0b:6e:a2:cb:bd:55:4b:b8:69:70:
cb:12:92:69:bc:ae:4e:32:bc:40:2c:e2:93:ba:bd:
e7:93:7d:13:f4:d2:79:f7:98:de:ce:bf:38:4b:16:
4d:0f:df:f8:9a:77:d6:b8:9c:72:4c:c6:1c:b3:68:
16:9b:17:d4:bb:08:ad:98:ef:c5:ba:63:03:33:26:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:20:75:8E:31:83:0E:73:49:DC:43:AC:02:84:DA:D1:96:2A:67:B2
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:17:14:e6:d4:20:7f:4c:af:18:da:37:6d:38:a8:7c:28:71:
52:48:ce:83:81:9e:64:00:17:4a:d4:fa:96:86:23:5b:ed:77:
a6:d1:77:1c:71:f5:5c:fb:cc:3f:59:c9:1c:49:7f:8c:d4:72:
fe:00:7e:72:df:91:9b:55:07:81:eb:05:44:fd:93:fc:13:bb:
5e:22:f1:ab:c5:a1:bb:f5:b9:95:63:18:0b:a9:81:60:98:27:
a4:d6:9d:15:44:20:37:77:57:d7:fd:c6:43:44:df:0e:42:25:
24:e8:b7:b7:17:58:bb:66:cf:78:e8:9b:a2:a1:fc:fb:56:7a:
2e:c1:ab:cf:65:4b:72:6a:8a:1d:d5:04:b7:7c:8d:4b:ad:1d:
f2:39:d9:32:5d:d0:a3:16:4e:b5:55:a6:d0:48:14:29:38:a6:
fb:4d:7a:96:07:b4:91:9a:20:85:5d:85:8a:c4:3e:ba:13:91:
e1:99:e6:38:44:e3:58:25:55:24:59:31:7a:25:2f:67:46:97:
66:37:90:f2:07:aa:82:16:a1:2a:69:c7:c5:c1:6e:7a:b9:6b:
b1:c0:1a:c7:a3:3d:00:59:9b:e8:20:71:97:1b:3e:ab:1f:b3:
7b:f5:36:e1:41:5a:c4:37:47:29:1b:49:f4:75:3b:62:f4:f8:
ce:57:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:30:31 2026 by rpki-client