Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier: v6qF/t+K/x/c4KinERcLdg/ijOf5Dx8ZLGgp3uzoLyk=
Subject key identifier: C4:E3:54:2F:CF:0A:29:74:58:3F:72:C3:A3:07:B6:4A:80:61:46:8D
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer: /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial: 01A0C4E9861090EAA26BE61EB92D41122E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number: 067B
Signing time: Mon 21 Sep 2026 17:00:33 +0000
Manifest this update: Mon 21 Sep 2026 17:00:33 +0000
Manifest next update: Tue 22 Sep 2026 17:00:33 +0000
Files and hashes: 1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: zPlzN34Ue8KHWxKKjcZMNLDth64cOt6kwVoF5NKevgA=)
2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:86:10:90:ea:a2:6b:e6:1e:b9:2d:41:12:2e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Validity
Not Before: Sep 21 17:00:33 2026 GMT
Not After : Sep 22 17:00:33 2026 GMT
Subject: CN=c4e3542fcf0a2974583f72c3a307b64a8061468d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:43:48:e1:5d:6e:bd:92:62:37:58:f2:d3:
5d:2e:83:b4:4b:8d:f0:55:8f:1b:95:25:45:ea:b8:
b1:78:00:d2:4b:53:16:83:40:08:2e:65:19:5d:d7:
2f:cc:b1:ca:8d:6e:3c:7b:ae:ef:36:a8:08:e5:1a:
8b:b9:62:10:f3:07:01:ef:3a:65:15:f4:aa:87:d6:
04:9b:66:f1:15:c8:c7:36:d1:56:b9:40:45:e7:fa:
12:eb:7f:dc:cb:ef:ee:1f:42:d0:48:fd:b7:c9:3b:
e9:3b:0c:34:0e:ea:86:5e:7a:cd:5d:07:5d:2c:b3:
14:96:39:b8:cb:c7:ae:c6:17:39:47:6d:a5:32:ca:
2d:fe:58:01:57:b0:d2:d3:c6:f6:35:76:4e:4f:da:
c8:cc:a0:e4:26:06:21:c0:25:00:37:4a:19:4f:8b:
62:f7:bb:e7:6d:1f:a9:66:bf:38:ee:41:c6:76:c9:
ea:e2:52:61:a7:aa:b2:da:4a:ab:d1:e4:75:ab:1a:
2b:cc:3f:e0:93:55:fc:c8:41:4a:1d:14:e2:bf:2d:
ae:e3:c3:e3:54:ec:b6:52:c8:0e:3b:8c:2f:af:5c:
ad:8e:e8:fe:fa:bd:8e:70:e2:37:1f:e0:b3:d5:a0:
d4:53:cd:98:ac:08:02:f4:1e:ab:a7:c5:ef:8b:1a:
2b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E3:54:2F:CF:0A:29:74:58:3F:72:C3:A3:07:B6:4A:80:61:46:8D
X509v3 Authority Key Identifier:
keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:62:37:8c:1a:c4:a9:e8:c2:d9:37:d5:58:1a:48:ca:31:b7:
9e:d7:e7:e5:ad:8e:14:1d:c3:ab:2d:20:fa:71:b3:34:26:77:
de:c5:e8:c2:f0:32:5f:8d:16:bb:11:e1:b5:4b:09:1f:3e:1e:
19:1a:c1:df:c1:09:97:91:e2:61:78:5e:33:f2:73:7f:05:74:
b5:38:99:e6:e3:04:c9:94:ce:5b:5e:d8:bc:5c:b4:1f:91:8e:
f9:af:28:25:29:dd:47:72:f4:77:bb:8e:80:fe:84:cb:0f:ff:
94:d5:74:57:3d:22:ab:4d:ae:b0:2b:80:59:21:ca:fb:82:38:
f6:d2:0d:bc:77:a4:f5:2a:28:ec:e7:70:e1:20:fd:b9:f2:ab:
7c:7f:26:d2:35:6f:fa:de:d1:16:94:63:20:68:37:a9:96:f8:
03:e3:10:47:ca:09:6b:77:6a:19:03:fd:41:61:0c:aa:84:68:
e3:c8:99:22:28:b4:3d:ef:59:f2:c1:75:19:af:2f:65:e7:60:
43:42:a7:93:dc:ec:e0:2e:7d:e9:04:83:bf:77:38:70:77:e6:
b2:5f:67:16:47:fd:df:55:60:40:39:8e:0d:ce:c5:be:30:14:
57:c2:5b:d6:eb:5f:08:2d:76:9c:4a:93:73:c9:3a:f3:c1:c8:
07:73:d2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:14:36 2026 by rpki-client