
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier: R9rE21iyjio645+/vwuso4GND0EzSq3OSbNJ/V/95Q8=
Subject key identifier: DE:A8:22:4A:C8:9C:7B:78:8C:4C:84:13:B8:23:6B:8F:00:E6:80:65
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial: 01A1A52505955257ABA9CD4D87E7ED73D68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number: 11D4
Signing time: Wed 04 Nov 2026 06:00:29 +0000
Manifest this update: Wed 04 Nov 2026 06:00:29 +0000
Manifest next update: Thu 05 Nov 2026 06:00:29 +0000
Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: oEAE5lcrhIATTBqmLAEbBxufHd/Pb7EiH85KgtF5KMI=)
2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:25:05:95:52:57:ab:a9:cd:4d:87:e7:ed:73:d6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Validity
Not Before: Nov 4 06:00:29 2026 GMT
Not After : Nov 5 06:00:29 2026 GMT
Subject: CN=dea8224ac89c7b788c4c8413b8236b8f00e68065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:88:f8:5a:38:a8:9f:78:93:91:a3:af:89:f6:
61:d7:ce:56:37:11:5e:8b:1f:51:80:39:1a:8e:69:
60:8f:94:a2:6c:86:c0:b2:a5:fc:b0:ed:56:f4:be:
5d:f5:48:00:6a:24:70:c1:11:79:79:14:b0:b3:f9:
50:ec:56:3b:f9:30:78:3c:95:38:a4:34:7d:3f:61:
4b:97:cd:37:e6:55:6e:63:7a:7d:26:0b:1d:4b:b3:
0d:5c:30:b6:40:7b:3d:4c:4c:f2:0c:17:bc:22:b8:
56:1c:27:29:26:eb:52:f1:a7:a9:73:24:04:80:da:
ae:e3:0d:65:1e:0f:d7:a2:e0:06:f3:3a:ca:22:13:
f9:9e:20:59:bd:7d:be:19:85:4d:ae:4a:77:db:d6:
16:43:43:6d:f5:0d:a1:68:68:a2:f1:a6:22:f5:39:
b9:26:67:89:f6:4d:39:f3:29:07:bf:59:b7:77:96:
4d:7c:a5:d3:01:2b:c8:a1:a5:b2:2d:26:62:86:5e:
f8:9f:31:c0:45:0d:dd:e1:da:c5:26:36:30:3a:3f:
06:24:c9:91:4c:d7:3d:70:0f:c3:3f:4e:bd:d5:f8:
e5:93:a0:86:b6:34:84:ab:0c:63:ed:b7:d1:4d:68:
8c:2b:37:c2:da:dd:ea:a1:41:5b:73:8e:65:b7:52:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A8:22:4A:C8:9C:7B:78:8C:4C:84:13:B8:23:6B:8F:00:E6:80:65
X509v3 Authority Key Identifier:
keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:14:e8:5a:37:fa:0f:9f:5b:a1:e7:cd:3f:99:5a:30:34:2d:
ee:85:bf:09:cb:17:36:13:c8:19:fb:c5:0e:29:40:c7:fa:58:
48:d6:99:bc:07:c0:b0:3e:8a:be:f9:b0:d4:1f:bf:03:c7:9e:
08:39:52:9a:a0:6f:a9:e8:c0:37:06:a8:36:a1:12:ab:45:bc:
26:e7:99:02:ce:96:97:4a:1b:02:da:06:e8:f2:ee:92:ae:07:
8d:46:ca:14:ca:cd:e3:20:ef:6c:f3:7a:22:f3:9d:8c:45:b8:
39:af:0e:f5:50:b7:f0:7c:3f:e8:39:02:16:7e:59:5f:1f:0f:
69:f6:6a:27:8e:67:33:3f:0b:41:55:13:83:03:a5:66:7e:46:
70:62:5d:4e:36:7c:02:76:a1:b7:8e:bb:a6:aa:18:52:c4:09:
92:e3:06:ba:d4:35:34:8a:fb:89:81:ec:65:55:de:77:b3:e2:
bc:64:e9:73:5b:be:93:b5:67:b8:2e:fb:40:bd:5f:b7:bd:26:
3c:14:7e:24:16:ca:d2:b9:fb:5f:2e:cb:70:db:60:73:18:6c:
82:76:74:e3:d1:b8:a9:70:f7:14:c3:59:9e:6c:19:c7:f7:86:
a9:f2:a2:3c:66:57:aa:cc:27:19:9d:d2:9d:02:c8:79:fc:88:
bc:19:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 10:19:44 2026 by rpki-client