Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: LmbZWKZMEQL78O8AuVeWhQdDsz7/kB8vwFD/1R0NDio=
Subject key identifier: 20:94:EC:AA:D6:6D:16:79:5A:D0:9E:EB:96:B5:BB:F9:15:04:B9:95
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 01A1826259518394673B8859A2919B7D19DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: 0578
Signing time: Wed 28 Oct 2026 12:00:45 +0000
Manifest this update: Wed 28 Oct 2026 12:00:45 +0000
Manifest next update: Thu 29 Oct 2026 12:00:45 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: oStLabSApVinXBN8n3b2Q3Q6Uj6URCnI5We5U9ORJtc=)
2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:59:51:83:94:67:3b:88:59:a2:91:9b:7d:19:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: Oct 28 12:00:45 2026 GMT
Not After : Oct 29 12:00:45 2026 GMT
Subject: CN=2094ecaad66d16795ad09eeb96b5bbf91504b995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:9c:04:7e:f8:79:76:85:ad:fa:2c:68:b6:
b9:d5:85:86:de:44:77:0a:52:31:c2:07:82:84:21:
e0:2d:49:95:51:d0:8b:d6:a4:dd:17:a0:79:21:c1:
aa:14:b2:ad:03:25:a4:7b:c8:87:c4:dc:e9:08:e7:
18:48:69:f6:df:bc:97:03:5a:2a:27:c3:fd:d9:23:
e7:9c:a4:9e:ce:8f:46:41:ed:07:e8:17:cf:68:de:
60:a3:91:dc:e3:8a:30:6a:25:07:ba:be:99:04:b3:
f9:c3:57:0d:e9:f7:36:46:21:44:b7:14:89:79:d8:
89:1b:80:a8:33:f1:8c:2a:cb:7b:78:a5:47:af:ef:
e1:aa:88:2e:6d:cc:ff:72:5d:03:3e:ee:f3:85:87:
22:68:a3:f4:82:42:d0:73:0c:5a:09:71:4a:06:09:
af:e7:43:2a:8d:8c:ea:46:c2:89:27:62:2a:7a:d2:
ce:98:65:21:09:f0:72:8c:a0:0a:a5:d4:65:44:b5:
29:dd:69:77:ab:46:42:90:d7:e0:76:4f:1b:f8:70:
d6:c9:46:32:a0:0b:f2:6c:9f:1e:34:ee:d6:26:95:
69:38:eb:68:7a:58:e7:c5:e8:f6:a0:17:da:ba:6b:
d6:6a:8e:e1:51:64:6e:38:40:2e:b8:9a:d9:71:79:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:94:EC:AA:D6:6D:16:79:5A:D0:9E:EB:96:B5:BB:F9:15:04:B9:95
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d5:65:02:09:ff:31:a3:00:d3:db:e6:6f:0f:f9:ee:82:c9:
e6:7a:dc:a3:f9:d0:26:54:87:e7:e5:33:a1:6e:7e:19:5d:86:
9e:73:05:26:56:80:25:22:b2:35:76:9c:e0:58:d7:a7:79:5c:
0e:f7:fd:af:cf:9f:41:36:15:f4:f5:1b:fc:91:46:e5:5e:56:
1b:9c:0a:c3:73:bc:4e:8f:ba:bf:c8:c8:ba:0b:2f:19:a5:65:
82:87:47:5f:2e:1f:d2:8d:91:0f:78:c8:1b:d0:af:7f:81:90:
d3:c2:3b:14:1e:06:be:58:c0:1b:77:70:cc:25:f1:40:2e:04:
da:fb:b6:77:82:79:2b:46:bb:22:b1:f6:fc:4f:13:44:1a:ea:
fd:a2:89:0e:23:d3:67:53:d2:b5:db:0d:82:ba:9f:7f:d7:99:
35:7b:58:e2:2b:aa:f8:99:78:fa:a8:3c:f3:ed:9f:2d:c0:f6:
d1:18:41:01:d5:85:58:d7:5b:15:89:52:a3:b7:4e:dc:da:f7:
60:c9:60:e1:aa:3f:08:77:20:ea:0a:9f:75:f6:f5:e1:62:19:
83:26:f1:45:e7:a7:a0:6f:97:c6:cb:2e:db:78:68:42:96:f9:
e9:6a:f5:08:04:fa:44:6f:60:77:48:94:da:0e:63:b7:c4:b5:
8b:d1:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:34 2026 by rpki-client