Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: m0WfZQw2f/E0P78BM0TI8Hh4FBbC/lRVybQWkskDXgI=
Subject key identifier: D0:34:CD:23:1E:42:B9:72:DB:B5:89:5C:F1:76:9A:2D:99:F8:97:83
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 01A13CA5CD8E8CBD6CCF83145D5FB5E54891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1AA4
Signing time: Wed 14 Oct 2026 23:01:01 +0000
Manifest this update: Wed 14 Oct 2026 23:01:01 +0000
Manifest next update: Thu 15 Oct 2026 23:01:01 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: PtivkKxMxi1/NusVzj+k6S262DoOrzrqJ14pEDKv0d0=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: Failed, certificate revoked on Thu 15 Oct 2026 08:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:cd:8e:8c:bd:6c:cf:83:14:5d:5f:b5:e5:48:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Oct 14 23:01:01 2026 GMT
Not After : Oct 15 23:01:01 2026 GMT
Subject: CN=d034cd231e42b972dbb5895cf1769a2d99f89783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:e2:3c:1d:07:be:5d:e2:10:67:77:4c:c9:
77:ef:f3:2f:ef:91:76:3c:56:d0:63:ec:01:25:f1:
ea:da:20:1b:59:09:93:f3:2c:4f:3f:1b:88:2a:1a:
73:44:d7:16:33:8f:cb:5e:82:5a:8f:fb:26:cd:23:
e1:66:b7:01:b2:f0:82:bb:08:d1:ea:17:0d:e7:d3:
9f:14:84:73:78:ae:e1:9e:fb:e3:16:ec:bf:89:46:
00:cb:a3:d4:1c:7c:f9:30:93:e6:bf:a7:f1:ca:fb:
06:44:df:b8:9a:9b:44:bf:14:a3:ac:fe:2b:75:d6:
6e:ca:fc:ec:a7:7e:f0:c4:b1:6a:8e:a2:f7:62:bc:
d1:1c:1b:ef:55:11:32:86:45:50:45:fe:26:5d:bc:
f2:86:83:83:da:85:8b:e0:cf:0e:bb:ba:03:dc:13:
fe:bb:7c:4f:d9:28:b9:94:c1:0c:db:dd:3f:96:c2:
e9:a6:db:86:47:12:74:9a:dc:2e:c0:be:62:6e:c6:
52:b8:a5:62:53:2a:db:e6:13:eb:b3:e0:7b:20:0a:
1b:c2:e8:20:66:19:8b:70:6c:eb:22:52:a8:04:f0:
be:83:77:87:4e:6e:cb:a7:3a:b3:fe:e7:d3:2c:0f:
5d:e3:a1:f7:2e:9d:0b:73:fe:53:f8:e3:87:8a:48:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:34:CD:23:1E:42:B9:72:DB:B5:89:5C:F1:76:9A:2D:99:F8:97:83
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:56:95:45:c3:cc:75:42:bb:77:c4:a8:3a:4b:cb:eb:e9:09:
6b:16:57:71:54:66:2f:c9:9c:01:aa:ee:54:67:27:0e:ec:b1:
b7:e1:02:67:06:b9:79:c0:56:f1:d5:3e:b0:8d:28:23:c3:eb:
a5:d6:2e:41:9a:74:79:03:3b:4d:de:9f:c9:ed:a3:cc:55:88:
5c:0b:c1:e8:db:cb:52:73:06:a7:fe:31:94:61:bb:78:66:67:
33:17:28:f2:a4:9a:61:32:32:4b:48:25:b9:66:d9:13:20:4b:
e5:16:f4:8d:84:0f:85:d0:9e:c3:62:01:c1:bc:36:a5:7a:33:
bf:74:86:22:d9:95:1d:c0:28:7b:51:6c:12:92:f4:a7:96:6e:
7d:5a:02:15:6a:b4:3d:dd:49:71:1c:77:29:b8:c3:5f:9c:4f:
0d:66:23:81:95:55:d4:02:d9:6d:af:49:f2:40:13:2a:00:94:
84:6b:31:01:0d:3d:0b:5e:5a:c6:a7:e3:a0:90:f8:f1:f0:de:
73:d2:99:92:e3:bf:95:d9:d8:6e:ac:9b:66:77:b5:d2:46:57:
2c:c4:53:98:40:1d:d8:85:9b:13:98:5f:c1:0d:d9:50:48:83:
d1:e9:f3:c6:a6:ad:5e:86:5c:57:14:83:43:1c:69:98:2b:72:
67:5d:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:21 2026 by rpki-client