
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: bdvhD9Cr9BzlkAuFOd/fJI9sddMwFUaudBl1Y5btD+0=
Subject key identifier: 00:D8:19:FA:CE:3E:BC:73:B8:BA:1B:5A:66:88:36:51:57:39:C0:3F
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 01A0E9650CA1A94500DBE19DCF377E3BB045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 075C
Signing time: Mon 28 Sep 2026 19:01:48 +0000
Manifest this update: Mon 28 Sep 2026 19:01:48 +0000
Manifest next update: Tue 29 Sep 2026 19:01:48 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: 5wPkqv1bgK9Mtby2WNC/83wvhKsAsAQm33v8yEFO5xE=)
2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:65:0c:a1:a9:45:00:db:e1:9d:cf:37:7e:3b:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Sep 28 19:01:48 2026 GMT
Not After : Sep 29 19:01:48 2026 GMT
Subject: CN=00d819face3ebc73b8ba1b5a668836515739c03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:a4:99:9f:2b:2a:0a:01:fd:23:c7:a0:b5:
5e:ac:3f:1a:06:c1:77:c8:45:d1:43:7f:1b:3b:88:
b7:18:0e:a4:a5:61:4c:31:dd:e4:84:d3:6a:a3:f3:
bc:a6:21:27:c8:66:15:7a:43:31:b7:77:f7:c1:d9:
26:a9:49:9e:72:59:1e:77:4f:00:fe:f1:b0:92:03:
6d:a8:89:e1:39:fd:6e:12:24:ab:18:f6:fe:c5:04:
64:20:ef:5c:7f:4f:9a:66:fe:89:d8:73:7f:16:bd:
80:64:2a:d3:dc:f7:24:89:64:b6:ef:a8:3e:32:d2:
e6:b4:92:a7:ef:a4:0e:76:03:54:4f:c2:5c:1c:29:
71:d8:e7:d6:9c:85:80:e6:86:68:dc:d6:79:d2:51:
d9:4c:68:9f:db:d4:15:79:a0:d1:ab:94:1c:2a:9c:
9c:aa:56:cc:ed:53:f4:bd:72:7a:60:0f:d2:68:20:
57:19:96:0d:ee:65:81:88:bc:c5:63:0d:12:a7:0b:
8f:1a:7c:64:e2:fa:4e:d4:ac:38:02:e3:3a:f0:34:
62:91:d1:fe:b4:6e:8b:b3:4e:32:db:d9:eb:6b:13:
96:5e:c3:97:75:5c:5f:c0:6c:6d:a1:43:7a:bf:5c:
1c:00:04:36:17:e3:b9:82:85:61:f4:79:68:e0:c4:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D8:19:FA:CE:3E:BC:73:B8:BA:1B:5A:66:88:36:51:57:39:C0:3F
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:96:cd:1b:ab:7e:ba:97:a6:86:12:9d:fc:be:f3:c0:8b:
f7:e1:4e:17:50:66:13:a3:36:ab:27:a7:12:72:37:9f:c5:aa:
62:e3:bf:ff:cb:a4:4f:67:e0:bd:7d:a0:c1:93:84:91:8f:bf:
03:db:73:65:ca:12:8b:0e:a9:7e:35:19:c0:cc:f7:71:0d:5e:
68:6f:8e:b2:1b:b0:a1:b9:44:d6:28:8d:a8:d7:a6:78:3b:b6:
1c:8e:fd:57:c5:d3:f4:53:cb:a1:db:c1:a2:36:ef:f2:94:4c:
bf:76:57:c4:10:d4:bf:0c:62:a8:16:d5:f0:70:40:71:16:b3:
77:ad:99:46:b3:57:76:6a:e4:2f:12:39:c0:b0:79:e6:a8:16:
a2:da:64:10:37:2e:33:75:9f:c1:43:24:d1:f8:e0:d0:84:a4:
d9:27:15:cb:fe:e6:83:8f:38:bd:a6:a9:b2:9d:b9:d2:7d:ed:
fe:15:62:bc:ff:fa:b8:b2:5d:3c:88:87:26:95:68:20:5f:21:
92:87:ad:cd:33:86:33:95:aa:e3:4a:8e:62:c5:20:bc:aa:7e:
49:59:5f:94:95:b1:8a:f6:03:b8:fb:de:b5:1b:01:43:40:f0:
8d:2e:d3:3c:99:83:c2:51:22:69:2a:a5:10:e8:32:fd:ff:d9:
3c:1d:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:41:55 2026 by rpki-client