
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: yUGiYtmCRxDk8EGDoQEGsU4erNTUDKHoffSHrn9Q+F4=
Subject key identifier: 5C:CC:87:67:17:04:70:B7:A0:E3:A8:5A:88:DE:DD:1C:4A:A1:3E:DD
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 01A17C602ADBB0DF739394636279E02D3A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 0520
Signing time: Tue 27 Oct 2026 08:00:39 +0000
Manifest this update: Tue 27 Oct 2026 08:00:39 +0000
Manifest next update: Wed 28 Oct 2026 08:00:39 +0000
Files and hashes: 1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: Y0GXIbl/Lb75NuzhG7Zm90ZTs+cQRfOtv6rnXN+LHqc=)
2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:2a:db:b0:df:73:93:94:63:62:79:e0:2d:3a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Oct 27 08:00:39 2026 GMT
Not After : Oct 28 08:00:39 2026 GMT
Subject: CN=5ccc8767170470b7a0e3a85a88dedd1c4aa13edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:50:75:99:06:4b:a6:b3:da:8d:bc:2b:0e:
31:a6:4d:ea:a9:0e:5b:75:5d:bd:ba:54:c2:57:ac:
08:72:fe:dd:5d:0f:69:9b:96:c1:c1:2e:55:98:44:
e8:4b:08:23:9f:7a:de:4e:df:4b:dc:47:5f:2e:8d:
44:e6:38:e7:c1:a0:c2:1c:33:ef:fb:d4:40:fa:d4:
c2:06:21:c9:04:f2:2b:b1:fd:70:95:e7:71:c2:b9:
a0:57:0b:f6:f4:60:5e:c6:8c:b8:6c:c4:7b:14:17:
a5:2a:5b:55:dd:56:1f:8c:b8:fe:85:bb:3a:f0:36:
21:95:eb:fc:13:49:1e:62:b4:6c:87:ae:20:62:d6:
4b:98:4a:9d:42:87:ac:f2:f9:bc:a2:ca:4a:dd:69:
5c:80:da:76:18:44:72:6c:60:16:d2:b9:6e:78:41:
8e:3e:0f:77:28:49:f2:76:7a:05:c9:6c:07:5e:9e:
d8:9b:0b:3c:38:ac:50:4d:b8:78:03:70:8e:8e:59:
46:c6:24:56:cd:00:04:2c:16:cc:33:2b:55:94:15:
89:19:90:cb:fa:9c:1e:6d:d7:87:01:6d:50:4d:66:
17:d6:cc:0f:f3:2f:d7:af:d4:38:6b:bd:ad:e3:e5:
ad:d7:06:95:53:c7:eb:b5:e6:4e:7a:bd:79:c2:23:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CC:87:67:17:04:70:B7:A0:E3:A8:5A:88:DE:DD:1C:4A:A1:3E:DD
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:a0:42:3f:1e:b7:9a:74:be:fb:63:4c:17:e0:7f:ab:cf:
e1:47:a8:89:6f:ad:6b:a1:f9:9c:ba:6b:67:9d:bd:4e:d0:9b:
40:3b:1a:2a:bc:da:2c:d6:d8:59:9f:7c:d6:7f:95:61:86:e1:
83:aa:89:23:3a:ef:96:90:f4:ab:3c:55:92:52:bb:30:66:7c:
d8:ff:0e:75:b5:c7:1b:8e:02:db:60:1e:ad:c7:73:dc:e7:41:
aa:f2:e9:94:11:bd:c0:0e:e7:30:3c:45:82:1e:42:90:26:8a:
5f:65:fa:c0:df:80:d4:25:fa:5f:09:11:e0:39:f6:9b:7c:06:
5a:9e:76:13:99:7a:e4:fb:e2:bf:f0:d8:27:ad:40:c2:6c:31:
a9:33:8a:83:a9:b8:fb:e6:55:a6:67:b6:f7:81:69:0a:2d:4d:
03:27:80:ea:e6:79:c6:99:c5:2e:b4:bb:81:38:a5:30:25:f2:
a1:3c:34:8f:42:b2:db:98:95:b5:0f:de:a3:47:c3:76:42:43:
19:e8:bd:18:e8:63:ef:8e:98:e2:1a:4a:d0:88:31:6f:4b:ee:
fa:de:5d:2d:88:ac:72:b4:c3:82:23:d1:e6:a6:5f:d2:58:26:
fd:50:4e:53:f5:01:85:8e:50:bf:d7:80:0e:ee:b4:70:a1:39:
be:1b:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:02:35 2026 by rpki-client