Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
File: 5D_0Mpxm5bDVELjy6viwfn1ce0A.mft (raw, json)
Hash identifier: btDa0Kr3beHOM8B4ij/OTrGCjYHuIBnpBb9Jk+/Un4Q=
Subject key identifier: A1:0B:B5:20:33:8C:13:D4:E2:C2:35:9E:01:B8:F9:20:B9:B6:FD:89
Authority key identifier: E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
Certificate issuer: /CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Certificate serial: 01A08E6A42231CF245408B9A3047AB188BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
Manifest number: C3
Signing time: Fri 11 Sep 2026 03:02:03 +0000
Manifest this update: Fri 11 Sep 2026 03:02:03 +0000
Manifest next update: Sat 12 Sep 2026 03:02:03 +0000
Files and hashes: 1: 5D_0Mpxm5bDVELjy6viwfn1ce0A.crl (hash: MBSpGYlsVJjJPXNSmfiUmTBHOO/ONHT/GyIYn6yB2xY=)
2: vMzqrHDtZQseD1IfDrA-iShDNwk.roa (hash: cIZbKSavouxTcPZPOTmND0k51VrW5LYVlRN+D9j5W+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:6a:42:23:1c:f2:45:40:8b:9a:30:47:ab:18:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Validity
Not Before: Sep 11 03:02:03 2026 GMT
Not After : Sep 12 03:02:03 2026 GMT
Subject: CN=a10bb520338c13d4e2c2359e01b8f920b9b6fd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:80:e3:3f:75:96:e1:7d:ba:23:15:05:55:
7d:d3:6a:68:17:20:f7:84:ff:38:c8:eb:47:3a:e9:
dc:69:25:eb:4a:a6:57:81:e9:bd:f0:8c:51:ff:c9:
d5:ca:24:82:25:3e:19:18:4a:1d:c6:18:1e:b6:3c:
3f:25:8b:1a:a8:1f:a3:69:b8:4c:dd:fc:e3:48:38:
83:f2:1b:c1:45:91:71:45:65:81:1f:5b:68:dd:60:
1a:75:e0:1f:7c:61:a4:bb:84:91:36:c2:2c:85:e9:
41:1d:ce:d8:36:4d:3c:c5:0f:ad:21:ab:28:a4:e9:
c8:ee:fd:ad:34:08:95:13:e1:1f:21:26:66:10:64:
86:03:c2:66:4e:66:83:32:13:e8:6c:e6:d1:cf:a9:
38:17:64:2c:f8:20:48:b4:24:01:d5:57:2d:2e:1d:
40:a9:bd:e3:87:98:90:72:4d:ce:ff:43:02:e6:70:
d2:f6:1d:24:8a:c9:09:e3:69:9e:95:31:1d:35:32:
50:8d:7a:d8:48:c7:11:3f:66:32:15:f6:05:f6:ff:
eb:b1:64:69:71:90:d1:bf:0d:2c:44:e9:1f:08:c6:
1a:8b:69:68:98:2a:83:f6:b6:bb:89:fb:d3:fc:1b:
c4:ce:7f:15:00:40:e8:59:63:3d:ab:83:74:d2:2b:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:B5:20:33:8C:13:D4:E2:C2:35:9E:01:B8:F9:20:B9:B6:FD:89
X509v3 Authority Key Identifier:
keyid:E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:37:97:eb:32:7b:4f:2f:d8:cd:ea:c7:48:cf:a6:be:50:e4:
79:c4:81:4e:99:53:fe:bb:4c:19:68:72:cc:8f:6a:19:be:cf:
a7:28:5a:a1:59:81:fb:f0:a8:42:e2:21:c0:dc:43:f6:6f:95:
4b:59:bb:d5:e7:35:8d:f2:26:5e:d1:fe:36:26:09:98:e0:3c:
6b:01:d0:14:5b:1e:e0:aa:21:0d:83:93:fe:39:ba:da:c8:88:
03:73:a9:f6:51:27:b4:96:65:c3:e5:5b:67:11:db:76:64:54:
ee:4a:a2:25:a7:11:08:ef:cc:f3:ca:09:a9:ad:67:fd:0b:fd:
d8:42:6b:37:e8:da:a0:7a:a8:e9:4a:8c:dd:a1:cc:69:e9:aa:
13:40:cb:0a:c8:63:f9:38:9d:0f:4f:34:56:98:77:f3:58:29:
eb:04:49:4a:ae:83:05:9a:8d:53:84:b3:b0:2e:1b:48:23:4c:
d3:68:76:90:b8:39:b2:89:95:8e:fb:d8:9b:6a:03:2c:5d:2d:
7f:bb:5d:6d:eb:80:6d:1e:f1:08:29:d5:8c:f0:d4:be:a7:2c:
e0:99:7f:9d:b6:7f:37:0f:d8:f0:fa:6e:ee:ae:c7:49:89:35:
f6:2d:03:d0:52:43:f0:b0:11:3a:78:a7:bc:32:cd:51:ce:99:
5c:12:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:41 2026 by rpki-client