Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File: 5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier: 8UzA7hLudO/wpN/LpHmlxf1ULcuaLaa8caoEEubOFDs=
Subject key identifier: 0B:D4:3E:09:C4:80:46:49:E7:29:22:FD:C8:70:D9:8C:D5:E8:22:A7
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial: 01A1889BA0759E8F72B21DDACAF81F8341B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number: 0477
Signing time: Thu 29 Oct 2026 17:01:02 +0000
Manifest this update: Thu 29 Oct 2026 17:01:02 +0000
Manifest next update: Fri 30 Oct 2026 17:01:02 +0000
Files and hashes: 1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: tEoxFXMNah8XamsuSWwY42/bhRbGrdifQzCATRRh7Ck=)
2: C2kt_D4OC_bCATP96J0Lcecrh_Q.roa (hash: /GUtwL0d0bHUSEUzfz0h1Hs+05AAyT7TJrjMS7ynWWY=)
3: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:a0:75:9e:8f:72:b2:1d:da:ca:f8:1f:83:41:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Validity
Not Before: Oct 29 17:01:02 2026 GMT
Not After : Oct 30 17:01:02 2026 GMT
Subject: CN=0bd43e09c4804649e72922fdc870d98cd5e822a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:a2:78:b2:00:d0:05:59:fa:29:18:17:5b:
d9:ac:3a:76:7d:a0:4f:bf:1a:36:b0:76:39:9d:cb:
dc:13:da:3b:5e:e8:25:e9:72:39:89:d1:af:cb:41:
7a:72:61:63:2c:37:f9:13:b3:b8:40:29:eb:00:60:
51:8e:36:89:70:93:f5:aa:2a:b1:e0:1f:4e:95:b2:
22:66:1b:50:ce:f5:13:5b:ae:ce:0a:25:a4:5c:b6:
4f:76:7e:4d:94:2c:a0:e7:7f:2f:ff:d1:c2:2a:42:
a6:0f:91:34:94:fc:f4:a7:72:9b:f2:dd:58:78:3e:
6a:96:b2:ae:42:7f:98:58:1a:5a:18:0c:af:53:2d:
46:b1:82:f3:69:ca:57:8e:96:4d:0d:37:bd:9f:5f:
a9:94:6d:db:75:81:7d:46:6b:84:db:17:5c:97:8e:
b4:b5:7a:1e:1a:05:6e:1e:b8:4a:ea:2f:65:f2:b2:
b7:1f:32:e9:e0:74:58:9d:10:f9:ab:9a:2b:50:ea:
5a:fc:46:59:c1:55:83:0a:62:b9:9a:2b:9c:51:60:
01:f7:7e:17:75:3f:37:2e:76:18:6b:09:f2:f8:9f:
aa:3f:b5:e1:b8:7d:29:aa:9e:11:8f:49:89:f0:89:
9f:11:5b:7d:17:40:b4:2d:b5:30:02:31:d4:1d:49:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D4:3E:09:C4:80:46:49:E7:29:22:FD:C8:70:D9:8C:D5:E8:22:A7
X509v3 Authority Key Identifier:
keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:b6:52:f1:f2:4f:1f:65:03:0e:35:d9:95:aa:09:14:8a:0a:
1d:f7:8c:28:5b:4e:68:46:69:15:12:af:d2:77:c3:c4:22:4e:
8f:2a:ad:f8:e2:b1:a1:26:f0:03:16:d1:4b:f8:2b:37:75:f3:
48:d4:a3:40:22:ae:61:1d:1c:6e:55:2e:ad:65:67:a9:cd:c1:
74:01:a0:32:83:cd:f9:2b:9d:2d:1c:0e:32:ff:e3:09:81:18:
1a:b3:cf:fd:37:2f:77:c1:80:ef:09:39:e0:39:92:73:0a:3f:
47:99:12:cc:fe:c0:43:3d:7b:a5:0f:10:86:f8:10:28:95:5e:
a7:40:2a:f6:de:d7:ab:e7:d1:0b:6a:7f:a2:21:66:16:27:8e:
ea:9c:cc:6c:fb:06:fc:9f:84:0f:48:72:a4:8e:2b:44:0f:1f:
a5:1f:c0:29:d1:3a:38:5b:34:0d:43:dc:b1:bb:b1:95:cb:be:
a8:ff:b2:b0:dc:2f:c9:51:67:47:12:40:0a:3f:ec:1a:b0:cd:
62:65:5d:10:bc:5c:a7:00:73:8a:d7:b9:50:e6:cc:18:33:15:
e5:39:d2:7e:ad:bc:e1:17:d1:63:ee:cc:9f:e1:d8:30:56:3c:
80:88:31:20:bb:a6:70:89:36:d2:a8:84:42:b8:62:72:47:b3:
aa:c7:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:29:40 2026 by rpki-client