Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: Msbqk+0NVWxmFUCpau5D1XclCPcWLmP5cq0ZKhEKfwg=
Subject key identifier: 5C:F5:A8:85:AB:94:66:11:31:44:E5:58:CE:0B:00:0E:01:FD:59:12
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 01A0016FB150E189DC895C061FF2AEF375B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 160D
Signing time: Fri 14 Aug 2026 18:01:32 +0000
Manifest this update: Fri 14 Aug 2026 18:01:32 +0000
Manifest next update: Sat 15 Aug 2026 18:01:32 +0000
Files and hashes: 1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
2: FX4SeiAfVk1oJ3ZX0t___kVvznw.roa (hash: sXBIiV4q77E68XFfHYdEfXRYe3LlOJvfM3L5/gohbgE=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: nM8BsnYHUVrlzQiA6vi+ZiirHxV9UiqhF9CsExwhLK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:b1:50:e1:89:dc:89:5c:06:1f:f2:ae:f3:75:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Aug 14 18:01:32 2026 GMT
Not After : Aug 15 18:01:32 2026 GMT
Subject: CN=5cf5a885ab9466113144e558ce0b000e01fd5912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:80:ad:89:4d:67:41:f4:1e:17:05:fa:21:
0f:45:7f:9e:0d:36:6a:9b:26:d8:86:bf:39:ff:16:
9b:0b:f4:5f:88:92:b9:8c:38:57:8b:23:98:15:e5:
ce:5c:0d:71:f9:84:7f:b2:20:87:bd:9a:37:b6:a5:
b9:bd:02:8d:59:35:71:b8:0e:1b:d5:3d:58:61:d3:
91:99:cb:7b:28:c5:39:07:64:57:89:0b:d9:17:a1:
09:50:62:f2:68:ca:93:4f:06:b6:d6:31:ed:17:0b:
0f:b3:27:1e:09:c6:58:c4:0c:d3:11:45:5d:52:35:
26:9e:c5:e8:58:7b:34:71:56:99:5b:07:a3:c0:23:
33:50:0b:76:c6:6d:6d:db:82:16:37:0e:ce:38:38:
e9:fb:1b:83:19:98:5e:19:11:d5:e0:12:a5:d6:e6:
6d:90:d1:e9:e8:24:09:87:45:92:a7:c3:ab:92:ac:
ba:cb:25:1f:53:be:56:70:97:31:d6:e4:eb:c1:fd:
74:99:68:3a:6d:0b:b9:13:e2:48:23:61:d1:79:10:
7d:ed:6e:e0:58:bc:e9:6c:ca:d0:06:82:c1:93:1b:
07:e6:f6:d9:f1:12:a1:4c:f3:95:32:5b:e5:8d:19:
48:95:91:6f:bf:e6:7c:bf:a2:2a:33:62:68:65:7e:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:A8:85:AB:94:66:11:31:44:E5:58:CE:0B:00:0E:01:FD:59:12
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d1:39:f5:0a:c3:a1:61:c7:23:ef:b8:90:93:9b:ee:a6:2b:
36:a6:35:26:56:8a:df:79:fa:11:8b:38:f8:0e:4e:42:1f:be:
d5:6e:be:ef:20:65:d7:5e:34:8b:3f:55:11:7f:4a:0b:da:85:
40:d0:e0:a3:a7:b6:1c:f2:45:6e:7e:42:38:4e:5a:96:b4:92:
d5:1f:99:a0:3c:7f:c8:f6:93:a5:f9:82:94:29:1a:73:d1:5e:
dd:ec:0d:98:f6:da:a3:00:05:3a:89:11:9d:b6:8d:0d:95:65:
e6:a3:df:2b:ce:69:69:26:4e:7b:62:12:19:51:7a:10:a2:00:
f4:10:1d:17:97:85:2a:c5:0b:41:54:94:91:2e:d8:83:12:87:
f4:98:26:af:0a:58:73:b4:b7:b6:a3:be:21:ba:1b:8c:eb:9b:
7d:8a:6d:d2:95:22:2f:96:87:7e:f2:e6:49:6f:9a:26:78:7f:
aa:7a:7a:79:d3:63:59:0a:0b:1b:b4:2d:cd:48:a1:64:80:76:
1b:66:bf:7e:be:df:94:4e:20:55:e1:cc:f8:9d:1d:fc:99:f1:
69:01:d6:42:40:00:e6:6f:7f:27:9e:77:5e:1d:e4:99:04:bb:
18:53:5a:bf:f9:f0:12:2c:29:dc:91:d9:41:4f:21:a9:e4:05:
86:ac:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:10 2026 by rpki-client