Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: XP6GBi/039qs+toGg16PhtyQZatXC6Gu2fSODoJovEU=
Subject key identifier: 02:D7:2B:0C:D1:D2:93:17:4F:32:A7:54:D8:59:18:A8:31:8D:6E:11
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 01A1C21D176B1E11CBE7E3CE3449238A45A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1877
Signing time: Mon 09 Nov 2026 21:00:48 +0000
Manifest this update: Mon 09 Nov 2026 21:00:48 +0000
Manifest next update: Tue 10 Nov 2026 21:00:48 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: zWCHFB83G2VF1nUOJQKQz2i1fi2S1VYmidOawBkS844=)
2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:1d:17:6b:1e:11:cb:e7:e3:ce:34:49:23:8a:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Nov 9 21:00:48 2026 GMT
Not After : Nov 10 21:00:48 2026 GMT
Subject: CN=02d72b0cd1d293174f32a754d85918a8318d6e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:6a:23:dd:2f:f6:91:be:fd:72:a1:9a:8c:
66:75:b9:5b:0f:3f:45:84:fa:16:32:6d:6a:d1:a3:
12:f2:21:66:70:6b:9a:c5:56:26:1a:30:1f:dd:b9:
41:1e:45:66:a3:ea:d7:2f:f5:05:6b:2d:85:ca:6c:
8b:e5:bb:54:a9:45:1c:fb:30:f3:d3:0d:74:ad:aa:
34:71:f1:9e:56:7a:d7:15:ac:db:6b:68:49:18:47:
6f:ba:8e:ee:31:11:90:68:43:56:78:b9:e8:6a:4b:
f3:61:a6:d8:40:a9:2b:44:10:31:67:7e:5b:64:f6:
d3:64:d6:70:7e:12:1b:5d:94:82:19:d0:9e:3a:cc:
bd:53:53:01:cd:30:c9:a2:85:d0:cd:a9:8b:8c:37:
79:19:6d:73:39:68:e7:37:d9:6b:f1:31:ab:c3:36:
15:f4:88:00:ea:7e:88:47:a3:89:8d:c8:cd:84:bb:
55:04:27:71:71:76:42:e2:88:b9:c8:f3:72:50:4f:
cf:a9:72:82:82:9a:6b:04:e0:03:5a:a8:b4:f1:a0:
a6:8f:22:7c:76:95:c2:a6:97:af:61:c0:e0:48:0a:
05:16:65:29:54:fc:75:3f:11:d7:db:fc:fb:e8:28:
34:4e:00:cc:7c:24:83:48:4c:ad:1c:81:4a:ed:9a:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D7:2B:0C:D1:D2:93:17:4F:32:A7:54:D8:59:18:A8:31:8D:6E:11
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c5:61:66:ae:c6:f0:0e:ac:82:14:58:a5:40:e2:cb:ca:02:
f4:93:d1:a9:c0:d6:7f:bb:e5:df:02:a7:de:3a:6c:81:0d:e3:
b7:94:58:e6:5f:cb:04:e6:6f:98:14:00:00:30:98:10:a2:47:
3f:3c:57:62:5b:a7:ac:40:12:32:79:18:55:6c:1d:5a:59:b4:
59:37:3b:0d:03:76:db:a2:37:ec:73:56:18:2c:8b:8e:9c:5b:
a0:8c:87:77:33:e2:84:d5:d2:05:d3:2b:d9:c6:3f:32:78:bb:
2a:7c:1d:9a:f7:8c:ec:3e:f2:72:c9:96:a8:80:bb:19:a6:01:
37:af:a9:df:83:45:66:68:aa:af:f0:e1:ea:d1:56:14:cd:8d:
04:27:e0:6d:30:63:bd:72:1e:f1:13:69:1b:f1:7a:83:e9:2e:
5c:79:0d:6a:65:94:a1:ae:34:55:6b:ca:ee:50:6b:75:de:59:
61:27:1e:08:fe:66:bc:a6:bf:db:b6:3f:c8:49:2e:5c:c0:fb:
83:73:9d:01:fb:62:dc:e5:67:91:fd:c5:ef:a9:d9:1c:8c:5d:
62:a3:b7:28:a0:cf:ce:d6:01:23:1f:f0:dc:bb:4c:c6:2f:af:
2d:c7:08:dd:b9:e7:97:b5:f7:9c:0c:54:8e:95:b0:ed:e0:21:
06:cd:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:47:51 2026 by rpki-client