Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
File: 5faAa3oFHnu7fWmI4n12Q2natwg.mft (raw, json)
Hash identifier: YCxKHsJuicZ9nb0Z7Swnawf9BH5XGGEPvTypdFutgb8=
Subject key identifier: 6C:63:99:BF:2B:52:E5:3C:2D:A9:BD:12:9B:03:C4:71:84:CA:51:5D
Authority key identifier: E5:F6:80:6B:7A:05:1E:7B:BB:7D:69:88:E2:7D:76:43:69:DA:B7:08
Certificate issuer: /CN=e5f6806b7a051e7bbb7d6988e27d764369dab708
Certificate serial: 01A151766F75874A41038C1CC818841AC67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
Manifest number: 0128
Signing time: Mon 19 Oct 2026 00:01:18 +0000
Manifest this update: Mon 19 Oct 2026 00:01:18 +0000
Manifest next update: Tue 20 Oct 2026 00:01:18 +0000
Files and hashes: 1: 5faAa3oFHnu7fWmI4n12Q2natwg.crl (hash: HNyszduu5CtzZEhDrZfXejzSYXuIaIoFa6TnXwUNKGs=)
2: EGmqqxW5ZYbNCgCt2Vq_Q58zgsI.roa (hash: ySnS4b15lR12wDURMnuDTotPGmQ1ihETTA194Gje264=)
3: MLis4Ykeq134DtJNXq9CJl9fboI.roa (hash: eUp4Hgfo5Ah//leDvRhzGDMVb52xFarJLqKnvTIe10E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:6f:75:87:4a:41:03:8c:1c:c8:18:84:1a:c6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6806b7a051e7bbb7d6988e27d764369dab708
Validity
Not Before: Oct 19 00:01:18 2026 GMT
Not After : Oct 20 00:01:18 2026 GMT
Subject: CN=6c6399bf2b52e53c2da9bd129b03c47184ca515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:bf:65:33:ef:76:31:7d:50:5c:f4:7c:c8:
8e:6e:f8:cb:ef:db:a1:f9:42:df:f1:d7:39:59:88:
0c:9d:f2:19:98:61:fb:3a:27:b8:50:87:8e:b6:c6:
dd:fc:8d:5a:16:f7:94:92:24:22:03:96:e9:99:20:
2e:76:ca:57:55:06:e9:9d:56:72:e0:c3:fb:11:a6:
c7:8b:cf:e7:e4:5b:30:37:cb:c6:2d:c2:9a:e6:74:
40:1b:f0:b5:06:9c:c8:55:3d:7f:98:48:1d:15:f0:
5d:7a:e8:2f:46:09:06:02:65:e6:11:26:db:bd:90:
cd:92:16:79:9c:05:62:a7:7a:f7:84:9e:03:80:8d:
c5:ec:3d:dd:a5:2a:15:d8:e4:f4:1f:83:f2:8b:74:
b7:a3:b7:a7:1c:8c:5d:72:7a:bc:1f:09:58:ea:5e:
b9:fc:96:12:2a:3e:2c:4d:42:95:48:e5:69:01:8a:
77:a5:81:77:de:0e:46:d1:63:0b:5a:4e:28:9b:f2:
ef:80:e2:06:8a:d1:ac:76:36:f4:30:f3:95:84:5b:
ec:e0:14:9c:4c:89:66:09:82:02:bf:95:e3:9c:1a:
ae:ec:cd:0e:69:88:55:08:2f:67:01:ea:ad:66:49:
1c:c5:33:f8:3e:9c:53:1e:c7:ce:0f:1d:d4:6b:b8:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:63:99:BF:2B:52:E5:3C:2D:A9:BD:12:9B:03:C4:71:84:CA:51:5D
X509v3 Authority Key Identifier:
keyid:E5:F6:80:6B:7A:05:1E:7B:BB:7D:69:88:E2:7D:76:43:69:DA:B7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2d:5f:b7:c1:b0:e9:1a:c6:9e:80:c3:07:d3:7f:4d:b0:de:
37:8e:b2:b4:40:fc:8b:c9:de:15:7d:bc:cb:8d:2c:b4:0f:28:
4a:24:fc:95:e0:6c:cc:6f:9e:6f:34:e3:32:e6:b3:5a:6d:52:
78:81:6c:4c:14:8a:a5:90:f3:14:6a:3a:0c:14:19:0d:5c:45:
b1:35:86:76:18:46:4b:d7:6c:ee:6e:c7:8c:e2:36:fc:dc:d9:
d3:b2:01:a3:52:d0:b2:43:61:7b:43:57:d1:e2:d1:8c:80:f2:
19:44:91:42:f8:7d:cd:a1:da:ec:1b:4f:ad:4f:92:0f:24:61:
96:63:b2:3a:28:c0:f7:b3:33:64:7d:e4:8d:55:c7:7c:8c:2b:
71:c5:15:79:e0:14:d9:e8:22:90:01:c1:ec:88:79:26:5f:9b:
12:b8:b4:80:68:92:1c:d9:49:42:c7:3a:9f:65:e6:93:fb:5b:
c1:f2:b9:e6:15:e1:df:ca:e4:92:d6:13:8b:c9:78:dc:bc:dd:
32:d6:45:e9:87:2e:05:57:40:52:4f:e8:6a:6d:a5:6e:73:fb:
ba:05:9e:f2:3f:60:68:b8:18:73:a7:84:96:71:20:9e:fe:4d:
c5:9d:f4:2b:87:a8:6d:98:65:31:f5:68:35:f1:2c:38:a2:e4:
6d:b1:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:55 2026 by rpki-client