
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: 3FCnY0aaRbFfaQhGywJqbmaRVwM3uazDWAJEM+XmQUc=
Subject key identifier: C3:A7:0F:E6:5F:26:19:A4:F1:72:E5:3C:20:06:0E:85:CC:1D:EC:75
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 01A13ECB5DD035CA7A95523C20869FC68A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 10AC
Signing time: Thu 15 Oct 2026 09:01:17 +0000
Manifest this update: Thu 15 Oct 2026 09:01:17 +0000
Manifest next update: Fri 16 Oct 2026 09:01:17 +0000
Files and hashes: 1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: CPo+G2QnpY9D9CqG4xxg9sYwmwNJv986hEJPp93iPgA=)
2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:5d:d0:35:ca:7a:95:52:3c:20:86:9f:c6:8a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Oct 15 09:01:17 2026 GMT
Not After : Oct 16 09:01:17 2026 GMT
Subject: CN=c3a70fe65f2619a4f172e53c20060e85cc1dec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:df:a2:c6:87:33:30:01:34:db:3c:47:29:
9f:e0:c2:83:61:ac:20:4e:36:50:6e:84:fd:fc:c1:
d8:87:b0:bc:a1:a5:47:cc:3b:ff:16:b0:7e:d1:74:
1e:f1:8c:63:a0:77:94:7d:23:0c:5e:72:6f:bf:59:
49:af:1c:a2:ff:26:c2:fd:fc:60:af:5a:9c:7a:95:
ec:22:d9:b8:53:be:ab:b1:ba:db:9f:fb:49:9c:b2:
53:bb:0e:b1:ab:8a:31:a4:e1:4c:e4:00:da:5c:7a:
41:5c:43:20:25:c2:a5:af:47:69:b2:15:1d:20:90:
b5:72:9a:a3:e2:e1:18:f2:0c:ac:3a:37:ad:9c:59:
27:4a:6b:0d:de:25:f5:ac:4a:fb:f3:3c:ad:39:1f:
9f:47:e9:b1:3e:c1:c6:9b:12:0f:50:3f:b1:d0:0f:
43:2a:5e:33:9b:56:cc:9b:dc:69:e2:25:dc:8b:40:
6f:b3:8b:fd:0c:20:c6:f1:a4:b0:fb:56:3b:50:f7:
3f:bc:0f:52:e4:33:82:e0:46:b4:38:16:5b:cb:ee:
92:d5:1b:a5:5b:bd:de:42:2b:b8:0b:78:34:ee:97:
6e:c8:03:95:a6:c7:2e:19:0e:24:0d:b3:85:df:a4:
a1:96:43:bd:a9:b1:1b:83:da:d6:ed:7b:6c:50:58:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:0F:E6:5F:26:19:A4:F1:72:E5:3C:20:06:0E:85:CC:1D:EC:75
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:99:e9:07:25:1a:01:52:bc:ac:aa:92:14:98:0d:cf:f7:4e:
3e:5d:a4:0d:9e:e9:8a:32:04:5b:71:22:3f:61:1f:e0:7e:9b:
7e:11:2a:e4:b9:3e:78:0d:53:55:55:d1:55:13:45:ab:84:7c:
7c:31:6f:82:a5:aa:7f:e0:96:74:ff:95:e9:f8:82:aa:d1:85:
da:9b:a1:98:37:a5:ff:98:d4:fc:e7:10:9e:8d:89:81:ac:3c:
5c:b5:56:01:e3:cb:02:ea:7c:6e:ec:6f:97:e0:01:b9:73:d6:
0e:98:b9:e8:af:c7:4e:2e:82:0a:1d:96:6e:32:9a:27:fd:bf:
e6:25:cf:38:ce:16:20:fa:1e:25:53:3c:0b:81:37:21:16:d1:
5c:9b:81:ed:b3:e3:f8:ce:25:5b:54:60:67:95:38:2a:e0:9b:
83:bf:d8:7d:2e:6f:d7:8b:db:52:68:13:2d:25:3b:de:f3:7a:
0c:9a:d7:f5:da:5e:46:73:5d:b8:4d:fa:c7:e9:aa:4a:b9:a6:
a1:24:6b:8a:be:97:14:2c:e8:2f:a9:24:f4:c5:57:ec:29:74:
37:2a:93:25:4f:77:93:0f:41:70:ec:91:a0:fa:f3:a4:24:9d:
d4:81:ae:2e:a9:f0:cd:9e:0d:09:35:a8:b8:76:85:6a:0a:ac:
3b:d3:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:25:35 2026 by rpki-client