Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: RFjWBU/LpHKJJutvEC+5QVFyB11i1+dHC5WDwdkW/b8=
Subject key identifier: EC:54:E6:A1:45:C7:EE:D8:F5:D2:0B:F7:7C:1B:13:1B:70:E3:71:20
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 01A117BCDC3C8C4F3B0A9D409DB7967A9CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 1A91
Signing time: Wed 07 Oct 2026 19:00:15 +0000
Manifest this update: Wed 07 Oct 2026 19:00:15 +0000
Manifest next update: Thu 08 Oct 2026 19:00:15 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: hNJUSOXY3CUeqUcvXOqtiD0A+J6WDS4f8MAB1xe1eQY=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bc:dc:3c:8c:4f:3b:0a:9d:40:9d:b7:96:7a:9c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Oct 7 19:00:15 2026 GMT
Not After : Oct 8 19:00:15 2026 GMT
Subject: CN=ec54e6a145c7eed8f5d20bf77c1b131b70e37120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:25:b3:c6:9d:c1:1a:d6:38:b9:f1:62:7f:
62:94:ee:b0:0e:90:89:66:37:73:03:d8:fa:c0:97:
06:81:4f:69:68:70:b0:c6:ad:a4:dd:7a:07:03:aa:
c5:a9:80:21:d0:fe:11:35:a7:64:e7:b4:76:4a:0d:
dc:1f:b4:88:44:b5:f6:44:d5:aa:da:da:40:53:30:
eb:b7:49:33:fd:3d:53:bf:9c:08:9c:d7:93:7c:a5:
15:8e:c7:5b:14:c7:36:5b:24:21:b5:25:72:18:95:
48:17:11:18:7c:a4:cc:f5:f9:1a:60:39:4d:67:c5:
04:fe:41:3c:f2:52:86:79:91:3f:0c:1f:2f:c1:cb:
3b:13:94:6d:71:29:27:15:80:98:3d:38:84:63:a5:
4f:2a:ef:6c:37:c9:d6:6d:8e:be:d3:de:b3:fd:06:
29:44:8f:00:67:be:f6:a9:1b:46:f7:c3:12:ad:0e:
2f:56:75:8c:8f:22:1e:63:7c:35:6a:8e:23:e2:e6:
5c:98:83:ce:85:1a:d9:3d:03:a7:fc:36:28:e5:a0:
d7:3d:a5:a1:50:da:d0:12:dd:8d:9d:79:2d:f7:eb:
59:b2:f4:9e:54:c9:62:9e:06:23:d2:97:b8:6e:ee:
3c:14:b8:b7:7e:6c:e3:0d:fd:e0:d7:54:4f:1f:c0:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:54:E6:A1:45:C7:EE:D8:F5:D2:0B:F7:7C:1B:13:1B:70:E3:71:20
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:23:b2:58:58:12:57:2e:88:57:6a:94:41:37:7f:3a:66:bf:
f8:47:b1:15:9a:9e:98:57:41:82:42:86:43:82:67:70:99:b6:
91:63:3d:8d:f9:67:8e:17:9a:97:f5:5a:ad:48:a5:8d:2e:5a:
c9:cd:78:33:95:de:e5:27:de:d6:ab:3b:e8:52:47:c8:da:2f:
d4:01:ca:a1:e3:07:9e:e9:d0:3b:ae:fc:0c:09:1b:17:2f:4e:
c9:4e:59:b8:f7:72:62:46:39:f8:26:c4:4f:67:2a:05:04:6a:
bb:2b:3c:75:c4:1a:1b:90:df:b5:86:9e:a9:6a:fe:59:3f:9d:
7b:06:94:03:cf:e9:d1:ac:2f:9f:1b:58:6d:79:c9:fd:6f:63:
36:97:fc:e2:c3:65:74:8c:e6:17:4f:30:44:6a:84:73:25:56:
bc:9b:e7:95:53:13:91:bc:46:e6:d0:20:bc:28:03:aa:a2:38:
fd:6e:de:d4:a9:2b:75:7d:ba:80:dd:e9:b8:dc:69:32:44:e9:
13:98:d7:44:5a:bb:69:3b:ff:ea:ff:3d:ba:1c:8e:de:05:b6:
8d:de:67:7b:ac:87:47:d9:39:b5:64:7d:4c:85:06:c3:65:7d:
90:df:28:42:49:59:0e:0e:47:6e:3d:63:b2:ac:a4:e8:39:c5:
b9:12:8c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:03:05 2026 by rpki-client