Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: hpxNS46EdWSKTRQ1Tpx7ixxMRIAbT7Ct+30susp/0rI=
Subject key identifier: 2D:2E:24:60:30:4B:D3:BE:77:AE:88:A7:DA:E6:9B:8F:79:AF:E7:A2
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 01A18419EAF197C05971702D7A12BA54C27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 057D
Signing time: Wed 28 Oct 2026 20:00:53 +0000
Manifest this update: Wed 28 Oct 2026 20:00:53 +0000
Manifest next update: Thu 29 Oct 2026 20:00:53 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: dqzjc1oAIGvsNzzvDUrAF22woEUkJ9c73C1ShYui6VA=)
2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:19:ea:f1:97:c0:59:71:70:2d:7a:12:ba:54:c2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Oct 28 20:00:53 2026 GMT
Not After : Oct 29 20:00:53 2026 GMT
Subject: CN=2d2e2460304bd3be77ae88a7dae69b8f79afe7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:67:06:69:e7:e9:96:2b:98:e0:02:39:df:
7f:97:21:50:cc:75:77:4d:32:7b:a7:21:d4:24:0d:
f4:1e:0c:9c:43:90:cd:f5:88:a4:a6:fe:90:b0:ab:
c4:23:12:d0:3a:f7:66:23:97:22:70:fd:10:e3:c0:
06:bf:cc:8a:fa:6e:1e:99:37:4c:3a:0f:d9:f3:23:
22:a7:ab:6e:8c:39:60:86:d1:f5:08:b8:70:52:ad:
14:9e:09:fe:cb:18:3d:b8:e2:b9:da:ae:99:23:3d:
81:3a:5e:f5:4f:47:a7:6c:ee:dd:f6:28:2a:e2:c7:
8f:16:fe:6d:f9:41:36:70:fa:cd:f8:f5:a5:b1:94:
d4:4c:a7:a3:f4:9b:22:ef:57:93:5b:97:a5:e6:15:
00:38:86:bf:77:1e:62:5f:06:07:2c:4d:2e:5f:2b:
59:6d:f5:58:b2:b7:e5:a4:7d:d0:96:7e:39:5e:8b:
de:1b:67:53:3a:88:86:1d:4c:b6:c5:52:b5:fc:af:
4f:99:9c:58:76:82:4b:99:8d:de:e8:b9:f4:bf:92:
cc:af:cd:f8:43:9f:a7:45:fc:43:06:d9:15:73:31:
33:9b:81:3f:8e:22:ac:de:84:4d:40:33:aa:f9:4e:
0d:df:b7:70:12:28:f8:7b:cb:6b:da:10:e4:59:7f:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:24:60:30:4B:D3:BE:77:AE:88:A7:DA:E6:9B:8F:79:AF:E7:A2
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:b4:4f:ea:f2:ad:40:55:8c:23:a5:f7:c4:b1:cd:66:51:
65:75:1a:55:ce:e3:9d:45:84:f7:ea:bc:4d:af:12:fc:86:9b:
65:bd:9f:ca:a6:f0:f3:7c:ae:cf:3f:2a:6e:45:8f:c9:8c:c4:
87:c1:5e:3c:9d:bc:c1:5d:ef:93:ee:0d:92:d5:b2:ca:9c:a1:
c6:ce:86:88:e0:0c:67:3c:8c:85:7e:fe:30:e7:74:1e:fe:fd:
c2:25:11:32:21:44:3b:3b:8e:3f:0b:b2:c9:64:53:7d:a0:ef:
5f:07:a7:43:42:dd:9f:e9:ac:7c:f2:5a:47:3f:26:03:80:63:
29:fa:42:95:46:dc:f3:16:cc:9c:f4:c2:e4:3b:15:5a:67:7f:
80:7e:d8:15:97:ea:17:c5:81:fa:10:a8:0b:fb:62:50:3b:22:
8e:b9:24:83:97:d6:9f:8b:a2:73:b3:0f:83:d2:52:13:96:0c:
36:ee:4d:1d:d8:f6:c5:2b:a5:91:4a:b0:49:91:9e:f9:f2:c8:
de:7d:d9:44:9e:3b:e4:88:33:ff:22:b6:ad:a4:29:d0:df:eb:
66:20:75:0f:33:a7:93:0a:13:f9:33:27:54:e4:62:48:5b:03:
6c:c3:b4:15:ce:b2:2e:75:21:b8:0b:5f:74:f7:b5:b7:bd:cc:
94:60:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:38 2026 by rpki-client