Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File: 5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier: stTPlkiPl42OEFeAkf3HI4HsOMkpOm6QEjC436+8PR4=
Subject key identifier: C1:4D:0C:C0:A8:B5:23:47:EE:37:A7:65:50:26:60:D4:E7:C1:6D:BB
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer: /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial: 01A13CDCCB312658E07770CB968E8CE6E502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number: 17CD
Signing time: Thu 15 Oct 2026 00:01:05 +0000
Manifest this update: Thu 15 Oct 2026 00:01:05 +0000
Manifest next update: Fri 16 Oct 2026 00:01:05 +0000
Files and hashes: 1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: +DP6Rr8qU1SGssOntgTtcXoTd1TRrDgjX+zYd3h5sMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:cb:31:26:58:e0:77:70:cb:96:8e:8c:e6:e5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Validity
Not Before: Oct 15 00:01:05 2026 GMT
Not After : Oct 16 00:01:05 2026 GMT
Subject: CN=c14d0cc0a8b52347ee37a765502660d4e7c16dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:5a:3e:41:aa:92:c1:52:3e:e7:18:7f:f6:
bf:51:1d:f9:aa:06:1e:5c:1a:d6:9d:d1:f0:4f:49:
7e:93:f5:6e:86:15:22:1f:c3:f3:5a:e3:3b:5a:58:
f0:12:03:eb:0e:50:ce:fa:5e:55:15:e2:db:26:dc:
1c:a5:7d:21:8b:ed:59:9d:bb:bc:7d:5b:7d:5d:3d:
ca:b6:38:48:8d:e5:d6:63:7a:0e:34:c6:9a:14:59:
2d:4d:f0:f2:d7:d3:4d:3a:af:17:07:91:f1:0b:2d:
aa:56:b0:fc:e8:ab:3e:d4:33:26:17:a1:2c:bc:e4:
3b:66:64:81:63:a6:40:b5:34:93:21:48:89:18:0e:
f8:27:4b:6c:e6:b1:c4:38:6f:cf:a1:d0:f9:f9:01:
53:c7:bf:77:34:f1:16:66:26:3c:44:bc:e1:2e:e6:
a2:a3:43:ab:c0:5d:45:d9:ee:08:ab:0c:88:24:6a:
09:11:8c:fa:d0:c7:e7:09:90:18:06:3d:6f:53:50:
7c:e3:14:2a:73:48:a7:bd:1a:89:f2:67:12:f9:89:
28:81:56:42:42:0e:b3:08:3c:91:fa:55:d3:d8:f9:
61:0d:8a:09:5a:e4:76:5c:7d:21:e5:bc:0d:30:48:
d1:7c:82:2d:1b:6e:9e:1d:5b:d9:85:3f:ff:10:33:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:0C:C0:A8:B5:23:47:EE:37:A7:65:50:26:60:D4:E7:C1:6D:BB
X509v3 Authority Key Identifier:
keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:79:e6:f2:cf:62:ac:71:5b:44:96:f3:92:72:f6:ef:85:66:
a3:6f:18:4a:6c:69:9a:08:61:37:6f:32:52:36:7d:7b:3f:32:
99:fa:00:d9:04:15:dd:8c:f5:a8:81:a4:91:2d:f0:bf:2a:c1:
9f:e0:d7:28:8f:8f:09:a0:40:c2:ab:f5:f8:f9:d3:f6:93:08:
05:3e:87:78:19:e5:1a:c0:e6:9f:1c:dc:3d:ed:6e:fd:d2:32:
06:e3:cf:07:08:9d:b6:d0:69:fc:f6:8a:5a:23:41:be:35:00:
3e:dc:3b:2b:86:8f:af:58:e0:d1:94:73:fc:a3:db:55:69:35:
61:0a:1a:0b:60:45:b9:90:ba:2e:55:54:d3:b1:25:b0:56:74:
df:04:d5:82:15:61:76:d9:62:fd:6d:32:a0:96:30:ee:32:bd:
4d:09:a7:33:6a:3d:5f:f7:26:fe:80:c9:bc:3a:c1:4e:66:65:
4d:8f:48:7c:3f:e5:01:0f:10:0e:49:d9:59:32:51:e0:fe:52:
85:2f:53:4e:50:d5:70:90:f8:34:de:97:09:e2:ee:48:08:e4:
bb:a0:e9:e3:8d:d9:b6:fd:c8:62:98:c4:0b:2d:94:71:d7:98:
be:0c:cf:26:d6:7b:cf:0c:6d:94:62:fe:f9:7b:e4:15:6c:eb:
af:07:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:59 2026 by rpki-client