Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: qVCP/EdW5rgFuOxdrVf+AXFrotwNnejQG2uAts4fpRQ=
Subject key identifier: 7C:9D:3B:4D:AF:69:8A:1C:4E:F7:C0:25:1C:5F:A0:3D:5E:18:32:E9
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 01A0009304088B84A13171016F83C8406466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 11B3
Signing time: Fri 14 Aug 2026 14:00:29 +0000
Manifest this update: Fri 14 Aug 2026 14:00:29 +0000
Manifest next update: Sat 15 Aug 2026 14:00:29 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: aRwP/61icNZ8lBjVqUeET1Ublh1ajoqT57UDHbVDZJk=)
2: vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa (hash: R/EtSB73ZGWrRnb/Gf2BJqZ0RYrtTKAiO9HiXzdMKyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:04:08:8b:84:a1:31:71:01:6f:83:c8:40:64:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Aug 14 14:00:29 2026 GMT
Not After : Aug 15 14:00:29 2026 GMT
Subject: CN=7c9d3b4daf698a1c4ef7c0251c5fa03d5e1832e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fa:c8:3c:fc:1c:9b:0b:b0:8f:b3:61:2f:32:
30:36:63:9a:61:79:0b:3c:25:04:62:c1:9f:66:c8:
ee:f2:8e:4c:40:67:08:44:02:f8:d2:d2:0b:78:fb:
25:27:98:23:3b:82:20:13:8a:11:44:cc:73:f8:fb:
2e:b6:34:48:07:23:00:fa:e1:15:34:fb:d7:4e:67:
04:7e:b3:a2:ce:70:f7:98:bd:99:e4:dd:43:2d:80:
78:e0:5d:a3:e3:43:22:6e:2b:6b:b1:35:df:af:15:
15:24:7f:49:21:e8:bb:dd:56:c5:36:de:43:1c:8d:
f3:21:e2:ea:14:dd:ee:c1:38:de:de:6d:c9:93:29:
46:7a:6a:d5:6b:ee:1d:68:63:ef:70:8a:60:36:27:
06:92:73:74:4f:22:f6:4d:97:82:39:57:82:e2:74:
28:4c:8c:f7:56:fa:ed:ec:d9:f3:98:1a:0f:07:3a:
0b:0c:b8:0e:05:5c:02:42:46:fd:8a:43:15:f8:85:
82:a8:79:31:09:65:0e:13:d4:20:3e:fd:61:b3:f8:
62:4c:53:12:c0:ba:6b:d1:5e:58:12:70:fc:93:cc:
a3:70:16:ed:40:e5:a8:be:45:a2:1c:70:4f:90:c3:
07:11:85:12:81:ff:a9:73:fb:ee:f0:c5:83:50:6c:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9D:3B:4D:AF:69:8A:1C:4E:F7:C0:25:1C:5F:A0:3D:5E:18:32:E9
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:48:dc:89:f2:db:ef:6d:8f:ff:7b:97:1a:bf:77:0a:1c:ea:
86:86:4d:5c:fc:9c:66:dc:fd:a4:be:91:4b:d2:ad:19:5e:d5:
70:f7:0f:7f:ba:83:cc:ba:66:31:e9:89:ef:30:f3:0e:e3:02:
ee:3e:1f:05:7f:40:4c:a7:96:ac:1c:23:c4:40:16:1b:9d:46:
90:74:2b:fe:0f:79:ae:62:d5:76:54:97:aa:93:6c:8f:ba:5c:
36:ac:3a:65:53:95:9b:61:1b:66:f2:80:a8:2f:fa:e3:2b:ab:
c4:09:53:eb:d3:ef:20:c1:94:a2:2c:14:70:2f:8c:5b:9f:03:
70:e0:c8:5a:15:8e:b3:0d:a6:84:d6:6d:da:63:5d:52:c9:ce:
95:ff:eb:91:15:a9:76:42:8d:22:fa:80:96:25:26:38:6c:2f:
f1:25:83:c1:7d:80:a9:43:6b:3f:2e:1b:4c:1b:1f:6e:a9:20:
8d:67:87:63:18:d5:18:db:10:25:53:90:7e:62:ae:2c:66:55:
d6:f0:7b:28:5c:58:4f:47:71:a3:93:a8:c3:b6:4e:e1:b1:c8:
34:98:9f:af:ec:ad:57:51:4d:5e:db:1a:df:97:b9:28:d5:a8:
e7:8b:de:25:5a:52:d4:5d:86:5f:04:6e:b5:e1:33:44:6a:75:
f1:43:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:28 2026 by rpki-client