Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: L8XUWRUOV65vXeERUbEvn9oejy6tjMMbBv9oEl0H8V0=
Subject key identifier: 41:48:45:13:1D:23:A9:7A:D8:BD:A1:16:CD:42:8D:B6:DF:48:17:A4
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 01A13ECB51DB0DE318C721D0715C7F9BB003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 09:01:14 +0000
Manifest this update: Thu 15 Oct 2026 09:01:14 +0000
Manifest next update: Fri 16 Oct 2026 09:01:14 +0000
Files and hashes: 1: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: p+3hFjrqbhQeVA3dHwxLWhRWGxwQoVGlA+Puu/nILeA=)
2: Ir27xg9dLc2jCmst038CD7aSTUE.roa (hash: oSA2uezGmOSkDFovORRhwQlbzwF4ltfNZW/lvc676ZY=)
3: WDTYJfU4GmC_Z6SmZBDA6liuL48.roa (hash: FJHas3EZqiie/GgKCvyAh7bXL6nc+V2NXzO+Cw5KyLA=)
4: pwYTinLuDu67XvmsuR-F4t51_KA.roa (hash: eNI+YaNU/hzM1s49lx5C1dDOoIT3b4beF5vq3z+7/TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:51:db:0d:e3:18:c7:21:d0:71:5c:7f:9b:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Oct 15 09:01:14 2026 GMT
Not After : Oct 16 09:01:14 2026 GMT
Subject: CN=414845131d23a97ad8bda116cd428db6df4817a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:9e:de:fd:1e:3e:a8:d6:46:e6:0e:d5:65:
90:51:37:0a:ee:ae:71:8c:c8:5e:dc:ab:cd:08:fe:
66:54:57:54:15:99:75:80:c8:20:49:b5:04:fc:cb:
3c:38:11:b8:bd:f5:02:42:44:7e:0d:26:da:f5:07:
10:41:80:aa:3c:a1:ad:c5:d2:e7:01:bb:e7:18:b9:
50:52:2c:a1:b8:60:9b:80:ef:25:10:68:5e:22:c7:
8c:a0:25:66:59:3f:0e:ed:0b:4c:f0:15:f8:46:b7:
c5:58:d5:f1:50:19:dd:48:69:b4:09:a7:7f:ef:b2:
16:51:15:7f:c9:37:60:a8:67:fe:c5:fc:55:b3:d7:
62:a5:0b:d0:08:04:40:50:54:42:da:58:eb:01:ca:
6b:77:ff:0f:b8:03:7f:f3:40:02:e4:91:a8:b1:b4:
51:2a:28:48:bc:24:79:26:27:f6:ac:6e:03:3f:c1:
32:04:84:4d:4e:3a:92:0e:9a:ec:8d:48:cd:d4:89:
1f:ba:38:43:e1:10:c2:46:e4:f4:ea:f8:63:30:a3:
42:9a:7b:d3:a6:20:8f:69:e5:d9:26:74:5e:a4:d2:
e3:fe:6a:e7:bb:8d:0d:e0:6b:f0:6f:eb:7f:68:79:
89:af:c8:27:87:e4:03:c6:9b:5d:98:76:ef:79:f2:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:45:13:1D:23:A9:7A:D8:BD:A1:16:CD:42:8D:B6:DF:48:17:A4
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:79:70:52:a3:47:55:75:81:1b:a4:84:a3:5d:3c:f1:75:
4f:85:74:49:77:02:c3:2c:b1:4a:d0:6b:82:2e:88:a6:f8:e5:
88:4f:9d:94:25:79:d9:81:53:e5:d9:d3:7d:8b:d7:42:24:93:
8a:7d:24:be:ae:52:01:87:3f:26:9d:21:07:4b:91:21:2c:0a:
f1:38:e9:53:d0:79:d1:22:33:d4:5c:56:5f:5f:79:cd:7a:13:
a4:0a:af:8e:5c:f4:e7:03:d0:a1:f6:b9:8d:9c:6a:f7:70:84:
19:89:41:53:c0:ac:ef:72:f3:76:a4:5f:e3:21:3f:d6:90:23:
26:a2:64:cb:35:64:2e:db:6f:a2:82:42:48:df:63:23:82:e3:
10:c8:4c:87:3d:08:25:59:b3:ae:94:f1:f2:a3:a0:77:9b:c6:
1c:f5:57:06:63:ff:3e:17:36:ba:9c:a2:b0:e3:8d:ad:1c:52:
9a:fc:07:05:75:c1:6e:4f:f5:b6:eb:a6:e2:c0:5a:cc:dd:22:
91:43:5f:e2:7d:cf:b8:b3:68:5b:88:96:87:59:21:67:a7:11:
f5:2d:ff:5c:f3:12:6d:01:38:2b:7f:da:d2:2d:6d:2a:e9:f7:
65:53:b8:4d:45:13:02:49:e6:41:d6:cd:f1:92:6a:e1:26:a8:
ea:12:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:20:54 2026 by rpki-client