Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
File: R0d5yAIJX230sqrPXc3F0z3X3m0.mft (raw, json)
Hash identifier: C0iIza4Hw58kuoIFur2nNxglLr0/ewo8e1q5Ao9kWXM=
Subject key identifier: C7:8B:53:9D:69:DC:25:7B:4A:D4:DF:C7:54:66:C8:31:89:3F:71:B9
Authority key identifier: 47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
Certificate issuer: /CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Certificate serial: 01A118CFC45AA23421ABA2AB3401F9C24ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
Manifest number: D5
Signing time: Thu 08 Oct 2026 00:00:31 +0000
Manifest this update: Thu 08 Oct 2026 00:00:31 +0000
Manifest next update: Fri 09 Oct 2026 00:00:31 +0000
Files and hashes: 1: 8f2pZ-X2y_ewfA8UsP_aiBqv6-Y.roa (hash: jKbJJlR/1E8zbPr4O7EmtXI2miGTVc5tDs0R04lVjsg=)
2: GVMQ2GhaEdTKaWEvEP46NaINJpE.roa (hash: DuVK+9fHLleTlcN4pfvABl9Ywn2SnErQI65gsGkiRnQ=)
3: R0d5yAIJX230sqrPXc3F0z3X3m0.crl (hash: 9TmAHiTTaDwSQNzjCPk5Z/5JMGwSprlcyX4o+Fx3/ss=)
4: UOevWPpBrse5WT2caWjU9GZEo-g.roa (hash: 0LSPg8ENwaB9oJ0jBUlwQU/hrSIv4vEXTwXy9LETBpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:cf:c4:5a:a2:34:21:ab:a2:ab:34:01:f9:c2:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Validity
Not Before: Oct 8 00:00:31 2026 GMT
Not After : Oct 9 00:00:31 2026 GMT
Subject: CN=c78b539d69dc257b4ad4dfc75466c831893f71b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:b7:fb:9d:b8:c6:38:52:3c:33:e1:5f:f4:
ef:fe:0a:53:0f:9b:da:06:5e:8b:9c:37:93:ae:79:
8e:ba:0c:d8:f0:47:3e:9d:46:31:59:f6:5b:6f:84:
08:10:7c:81:a6:c2:be:e2:50:03:56:46:58:0b:78:
01:6e:c4:ec:b6:97:8d:8a:fd:7f:c6:e1:56:83:1d:
9a:74:75:c9:2d:48:9a:e4:da:71:fa:26:46:7c:04:
e1:65:37:71:2f:40:1b:f3:63:d0:1a:1a:0b:a9:01:
cf:63:d6:ad:cc:c7:d9:06:59:18:d8:fe:37:b6:94:
30:0a:5b:b3:92:49:a1:a8:57:cd:1d:83:e4:a2:77:
ae:10:e6:a1:52:a9:d3:1c:9d:ec:0b:90:03:bd:bf:
c0:78:c1:23:0e:9f:76:87:6a:b1:5f:30:5e:bc:f9:
12:8f:b4:03:09:6c:64:70:e8:39:2d:ae:8b:17:3a:
c6:63:e6:42:43:d2:c2:1d:d6:15:07:cd:54:ab:e0:
26:b6:22:00:5b:b7:50:87:e1:3b:b0:93:fa:6b:1a:
a6:07:88:36:13:82:0e:96:71:f8:de:59:e9:35:92:
77:3c:03:c4:a9:73:ac:5a:4e:12:af:db:bf:0b:42:
51:b4:f2:27:98:40:2e:84:bc:df:9f:0c:e9:b0:10:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8B:53:9D:69:DC:25:7B:4A:D4:DF:C7:54:66:C8:31:89:3F:71:B9
X509v3 Authority Key Identifier:
keyid:47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:59:c7:18:03:00:d3:9b:63:34:64:c4:80:19:f0:5a:6d:f9:
9e:7f:6a:37:be:92:57:75:48:56:e8:00:40:38:c3:a7:ac:a3:
2b:3c:cf:96:6f:31:f5:60:d7:bf:e0:c2:7b:a1:24:10:51:a2:
1f:93:7d:95:dd:ce:e6:e5:ed:55:f3:2f:10:c5:76:0d:af:ac:
e8:8e:e0:9c:a3:5c:d5:ad:c5:b8:08:aa:22:9e:0e:b0:fa:75:
a5:2b:7a:9b:68:21:51:e4:14:35:1d:d1:99:4f:13:80:fe:ae:
1c:4a:6d:f8:3f:59:56:ad:ff:55:ca:cd:81:41:f5:88:9a:74:
6e:13:38:b1:b4:0f:fc:e1:d0:69:14:2a:91:28:df:cf:31:a8:
c9:92:0e:07:a2:bc:8f:24:f8:7c:0f:40:e8:a7:47:24:67:24:
ca:64:2b:ca:80:95:7b:72:72:4a:55:84:8e:d8:87:1b:73:4e:
11:0b:ac:11:bb:49:be:63:e3:55:a5:41:1d:36:be:f4:d1:37:
72:5b:7f:c0:be:1e:61:95:8d:fe:d4:53:0f:57:42:77:8a:30:
ba:1e:44:8b:45:04:82:d5:f3:9e:08:51:ab:3b:99:8f:01:33:
e0:1e:37:e6:40:f5:1c:17:d5:66:f9:4f:45:ad:a7:c1:fa:68:
9e:eb:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:27:56 2026 by rpki-client