
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: DGro5QUCkCIOtsZqe7uIQ5lMtR5Vh9wxmLWGwzc5S2E=
Subject key identifier: 34:F4:73:F1:01:B1:37:5C:3B:18:08:BA:B4:D4:04:D7:88:1E:B4:F0
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 01A08AFA0A01C46DAE83FEA5ADE6A28274AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 04FC
Signing time: Thu 10 Sep 2026 11:00:37 +0000
Manifest this update: Thu 10 Sep 2026 11:00:37 +0000
Manifest next update: Fri 11 Sep 2026 11:00:37 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: tYc/WDb906rfnX+gEogMA9JpE26otPfok+VWGuj4KpQ=)
2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:0a:01:c4:6d:ae:83:fe:a5:ad:e6:a2:82:74:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Sep 10 11:00:37 2026 GMT
Not After : Sep 11 11:00:37 2026 GMT
Subject: CN=34f473f101b1375c3b1808bab4d404d7881eb4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:79:73:5c:6d:71:33:f4:90:9d:c5:aa:11:
40:bf:f7:62:bf:61:6b:0e:39:74:39:28:d4:64:66:
aa:d9:2f:27:7b:60:3a:66:eb:b7:f5:77:04:45:9a:
a3:8b:a2:bd:e7:9f:99:10:f9:b5:ca:d3:4b:09:c1:
de:56:4d:5c:25:9a:70:0e:2d:58:f9:76:c8:c6:7c:
61:f3:02:fb:5e:15:3f:ee:0f:38:f3:f2:ea:e5:22:
e3:89:37:15:5d:61:c1:47:91:34:af:f4:c0:a3:9b:
60:fa:05:f0:44:ba:ed:90:d0:55:cd:5b:e1:16:ae:
ee:fb:dc:38:f6:66:88:54:ae:be:bb:c1:13:32:9b:
06:a0:28:c8:d1:58:b8:f4:98:05:45:24:f6:47:be:
95:75:95:61:1e:9a:b5:3b:43:9d:f5:94:a6:52:32:
6b:ff:f6:4c:22:ef:34:9d:1d:74:02:7f:53:a3:ca:
58:7b:b0:83:66:a5:08:e8:f7:df:f1:47:74:45:13:
4c:12:67:43:fd:3e:33:03:ee:03:31:14:a7:0f:cf:
12:b3:ee:cb:2f:95:1d:b4:40:ec:77:73:80:95:dd:
bc:22:62:95:df:87:0e:70:a4:5f:8b:25:4c:2d:f2:
21:f1:c9:da:bb:10:ec:8a:7c:a0:c0:47:79:b4:41:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:73:F1:01:B1:37:5C:3B:18:08:BA:B4:D4:04:D7:88:1E:B4:F0
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:92:95:3a:5a:93:eb:07:a3:43:8b:d1:ee:32:97:d2:38:4e:
59:79:f8:25:34:20:30:45:c4:21:f9:fd:3a:56:09:a1:1b:6e:
e8:7c:f6:c9:3b:b1:57:d8:63:a4:91:64:16:e6:23:84:f1:c7:
f8:e4:24:10:11:c5:4a:ce:3b:e8:3f:36:bb:31:03:b4:73:7c:
0e:5a:08:f1:a7:61:ac:fb:62:97:cb:fc:84:e7:5e:ca:f0:84:
89:93:0b:f2:ad:34:6a:c1:38:ce:00:55:0a:8a:6b:af:0e:42:
7c:8f:9c:7f:5c:bb:7b:f3:6d:7c:d1:f8:ab:b1:40:ce:c5:98:
4a:ca:8c:34:c4:38:12:e7:4f:24:1c:e4:da:a6:a0:b4:83:b4:
56:7a:07:24:7b:b9:7f:b8:00:e7:7f:8a:ac:53:be:23:00:6d:
e4:19:4a:7a:d0:13:46:05:aa:2a:55:31:0e:0b:eb:bb:b1:58:
e5:22:01:1d:c6:18:7e:b1:5a:fe:2d:31:70:d2:59:90:d4:8a:
a6:82:79:3a:47:18:44:5a:11:08:31:6e:f2:00:a6:2e:e7:9e:
fe:2b:93:8a:4c:1a:7a:0b:ab:cf:6c:82:d5:43:7b:25:27:f2:
9e:64:11:ec:5b:b7:9f:09:41:81:12:1c:d3:1f:26:f4:45:97:
61:6c:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:29 2026 by rpki-client