Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: bQkv9tEsm0PdUfy5EwNq4PG90OTnjfNPQ2R/y0T270M=
Subject key identifier: 47:2E:71:1E:EB:A4:AF:B9:07:9C:A1:71:51:C1:03:9D:09:65:8D:A1
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 01A1415E71AF02064C0DF38C5F4FD7BD4F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0F17
Signing time: Thu 15 Oct 2026 21:01:10 +0000
Manifest this update: Thu 15 Oct 2026 21:01:10 +0000
Manifest next update: Fri 16 Oct 2026 21:01:10 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: jxcxunYNhjdU0EvQWfYWZSBzS3CCB9vPO4gdjwwGMi8=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:5e:71:af:02:06:4c:0d:f3:8c:5f:4f:d7:bd:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Oct 15 21:01:10 2026 GMT
Not After : Oct 16 21:01:10 2026 GMT
Subject: CN=472e711eeba4afb9079ca17151c1039d09658da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:c0:20:06:42:0b:15:42:a9:0b:4a:0f:27:
c0:90:64:0b:e4:a3:c4:61:23:af:ce:cd:a7:99:6c:
45:cf:50:48:b0:06:91:4d:57:8d:38:01:0c:59:10:
50:af:3c:de:00:87:ba:cb:c1:51:61:bf:5b:ad:2c:
e9:75:2c:b2:8d:7e:a1:48:6c:7f:c6:2b:c1:06:ba:
20:75:c1:1e:a7:84:de:d1:f6:86:99:a1:43:56:c1:
7f:e4:75:9e:92:a1:f8:9d:64:90:50:0b:0f:18:db:
d0:c0:05:ef:67:c5:a5:1a:0b:c6:50:28:fc:35:16:
f6:83:16:94:48:07:86:47:f7:a2:17:c1:50:01:d4:
e3:3b:bf:35:3b:7e:68:34:26:fc:f3:dd:60:90:d5:
48:58:44:48:56:6e:b9:89:20:1d:15:93:d7:13:d8:
1e:92:b1:6d:24:94:1a:1e:a0:38:eb:f4:d5:b6:48:
6e:e2:45:fd:20:48:61:bc:75:1a:54:6e:9c:f6:56:
e4:ab:04:93:ef:bb:c9:51:7d:30:e6:07:7a:02:d6:
fd:78:43:26:d2:79:56:15:9c:51:54:ee:d3:52:d2:
4c:62:ac:63:d2:30:32:82:6b:d4:14:45:76:ca:30:
e9:b7:ed:46:04:73:74:d9:de:bb:62:57:f0:26:80:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:71:1E:EB:A4:AF:B9:07:9C:A1:71:51:C1:03:9D:09:65:8D:A1
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:29:d3:f5:69:a8:50:7c:55:34:a2:07:2c:8e:97:b3:91:
14:cd:f7:02:14:0f:6b:65:e3:fb:96:27:e1:12:10:49:b7:81:
39:54:97:a1:0e:3c:e2:56:55:ed:b1:e8:26:88:70:ff:93:8b:
39:cf:b1:cd:a0:12:2d:d7:86:3c:9a:33:21:3b:6e:23:35:39:
5f:a6:c3:e9:b8:55:f8:8d:66:c4:64:cf:a5:d9:0e:fb:c4:83:
bb:c7:c7:db:46:f9:b4:aa:c0:14:bb:bc:48:ba:27:c3:d5:94:
e8:dc:fc:28:fa:59:85:42:9e:bf:1d:62:91:5e:a9:23:4c:50:
0c:7f:e5:6f:13:d7:79:5f:07:62:19:3b:e1:0e:db:82:33:56:
6b:8d:60:67:a8:08:e2:52:ed:d6:02:09:39:98:35:b5:a9:8d:
a7:f2:26:7f:d2:14:5a:36:1e:f3:4c:71:1a:9a:5d:ba:79:fd:
44:71:71:0c:5d:16:fc:f6:86:17:94:0f:86:59:b4:88:46:f7:
e5:f3:23:c7:85:83:1a:5d:d1:4b:49:68:e5:e7:f5:e3:ab:85:
89:93:03:eb:e6:3f:a4:c8:3f:58:27:40:28:95:89:f9:4d:f8:
29:de:66:de:aa:74:dc:30:92:17:35:ff:40:fe:a2:ad:3b:b0:
73:75:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:10:11 2026 by rpki-client