Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: AxIIBCwg789nrCPcG8g8ok/oQaOEFDpq4RR3VYmRTYo=
Subject key identifier: B7:72:34:45:D6:3F:8E:E8:59:AE:4D:19:70:00:0D:49:0F:1B:9A:FE
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 01A0C3D7003ED90C16BE9122D23A3FBBE100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 12:00:42 +0000
Manifest this update: Mon 21 Sep 2026 12:00:42 +0000
Manifest next update: Tue 22 Sep 2026 12:00:42 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: BsyDFA1saResk5PIjd7vud7ugz9cwyH//u73wkDRvW8=)
2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:00:3e:d9:0c:16:be:91:22:d2:3a:3f:bb:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Sep 21 12:00:42 2026 GMT
Not After : Sep 22 12:00:42 2026 GMT
Subject: CN=b7723445d63f8ee859ae4d1970000d490f1b9afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f6:13:e2:b5:32:09:f4:1b:33:f8:b8:2f:4f:
c3:76:f6:8b:2f:36:98:19:36:f7:85:b3:c8:6d:05:
70:9e:4c:27:72:8d:35:ae:b6:e5:39:89:ab:2c:6b:
45:7c:17:d9:40:fe:b3:56:10:7a:5c:c7:5b:ac:65:
cb:94:13:f0:68:90:8f:1d:43:66:3c:31:03:03:bb:
5e:69:46:00:b9:65:f6:50:4d:d9:29:54:36:fa:58:
54:91:16:9a:32:c3:57:3d:17:19:2c:fd:77:db:eb:
32:9a:98:a5:40:19:3e:ab:4f:2d:08:87:fa:73:a1:
0c:d5:2a:69:2e:cb:94:e4:8f:66:b4:ad:1d:21:6e:
53:90:10:d2:bf:fb:04:11:80:2a:b5:f8:23:9d:5c:
54:2f:1c:62:28:19:52:09:aa:ef:86:63:43:cc:ac:
25:b8:fc:ee:b3:2c:90:f3:b6:ec:6e:cc:87:86:17:
b2:ea:4b:78:27:7f:40:55:8a:ed:70:d3:70:8a:a0:
67:c0:0e:73:5c:18:71:c8:5d:63:55:c5:ad:ae:b3:
96:ee:bc:ec:cc:2a:fe:2e:09:28:20:95:74:b4:c7:
ef:36:36:44:96:2f:fa:f4:2d:f2:0e:60:5f:21:87:
f1:b2:79:e4:c9:c2:94:f8:59:b9:76:f8:72:b4:1b:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:72:34:45:D6:3F:8E:E8:59:AE:4D:19:70:00:0D:49:0F:1B:9A:FE
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:09:cf:33:18:76:6b:e4:d5:5d:12:a2:a1:0c:ba:48:04:96:
37:48:92:ab:10:65:a9:56:12:06:68:65:27:54:e8:e1:61:a3:
49:3a:57:96:80:8a:00:ce:68:02:2e:8b:76:e3:64:d8:39:07:
e6:dc:92:bc:83:f8:da:0a:4a:5b:65:d4:76:29:dd:15:4e:52:
89:74:67:94:92:b0:d7:13:79:72:49:8c:51:a9:74:dc:4f:58:
6d:cc:db:6e:5c:36:91:e9:de:cf:99:09:22:b3:8a:64:83:ea:
68:bb:5d:6b:f7:80:28:73:a9:91:7d:27:03:bd:95:73:b7:f8:
00:d6:c7:8e:62:b6:7c:85:5f:25:bd:19:d2:65:81:9a:9f:0f:
21:79:a0:15:0e:17:15:7f:44:87:22:ee:56:cc:a5:c4:04:f6:
14:17:24:46:25:9a:79:c4:05:aa:8c:e5:67:03:3a:d7:19:33:
76:3f:a1:32:56:39:f4:dd:c7:0a:c7:b9:88:2b:dd:4c:97:36:
95:d1:0f:5c:cc:d1:29:33:8c:cc:fa:99:f5:26:ab:30:a8:b0:
f4:0d:d4:03:5b:ed:9e:51:8c:85:0e:fb:e1:7c:48:d2:79:89:
23:cc:a4:b9:c1:bc:c9:d2:68:52:45:99:a2:2a:4f:09:a8:0c:
5b:a0:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:22:23 2026 by rpki-client