
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: H6o5icBUdNxwjI0vl2dRUdb1bxzAb4dKkQyCve/lMX4=
Subject key identifier: 59:74:FE:DC:1A:46:C7:48:9D:C4:29:83:90:09:29:37:20:6B:39:CF
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 01A13DB8904528A391DE4E209D4022E7335C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 0888
Signing time: Thu 15 Oct 2026 04:01:08 +0000
Manifest this update: Thu 15 Oct 2026 04:01:08 +0000
Manifest next update: Fri 16 Oct 2026 04:01:08 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: ymFf6p6EfjV0UZCNzS9wK51SUO3QXr6DsOhOqcFFlkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:90:45:28:a3:91:de:4e:20:9d:40:22:e7:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Oct 15 04:01:08 2026 GMT
Not After : Oct 16 04:01:08 2026 GMT
Subject: CN=5974fedc1a46c7489dc4298390092937206b39cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:01:ce:ea:b0:69:fd:9c:27:c5:65:8e:22:
02:59:05:db:61:5b:9d:8f:fc:3e:3d:ca:da:39:03:
d2:11:51:35:84:66:df:74:66:13:53:10:15:60:9e:
69:fe:fc:4b:cf:80:11:db:14:59:16:e2:71:b2:6c:
90:a2:2d:78:d1:a8:b2:04:cb:bb:b3:c8:1d:12:12:
13:b8:56:31:8d:7a:fd:a4:c7:21:ae:d2:44:c3:74:
33:53:fe:24:43:da:5f:3e:4d:79:61:ec:47:fa:9d:
08:93:63:00:52:4b:c7:36:81:51:71:ab:1c:af:9a:
23:cd:eb:31:f0:d2:5c:57:aa:7c:ef:82:9b:9d:dd:
44:9a:0a:4d:d4:55:08:64:19:0d:d0:60:a3:6c:02:
3c:92:4b:c5:74:3a:fa:e3:aa:6f:9a:12:00:c9:fc:
b8:d0:4e:06:f5:3c:78:ee:b9:ef:67:ca:12:a3:af:
3d:b9:17:b0:cd:9a:53:4d:83:d2:dc:97:7e:fd:73:
8f:87:c8:3c:c4:e7:97:31:a5:1e:1b:fb:b9:ed:97:
04:62:d4:7e:ee:ac:24:ca:56:72:c2:f1:ee:46:8f:
c8:87:2d:ea:cf:eb:30:74:e7:8d:88:ea:5f:f9:75:
cc:c2:d3:52:73:a7:b8:67:a8:76:e7:b9:f5:a2:af:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:FE:DC:1A:46:C7:48:9D:C4:29:83:90:09:29:37:20:6B:39:CF
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:55:6b:b0:f3:e5:4f:cc:51:c8:36:3d:15:91:d9:b9:30:56:
a1:1d:b7:a5:e7:84:d8:1f:1c:cc:fd:b3:ab:e4:51:fc:b7:02:
59:4d:d8:ef:3e:a5:02:1e:cc:1a:a9:41:04:14:53:87:24:e0:
7b:e3:24:01:9c:7a:33:d0:2c:58:30:ac:d2:f8:8f:d3:77:54:
10:f1:97:c8:2a:6e:9e:df:23:8a:78:0e:f5:2f:47:4c:30:a7:
72:5e:ca:aa:13:bd:e6:7a:8b:83:e2:0e:1d:69:c7:86:27:83:
fd:c3:97:31:98:e1:90:e4:cc:a9:96:9a:7d:34:68:78:1b:fc:
35:32:46:fd:4a:23:d1:e8:5e:1c:54:7c:f2:7c:69:bf:e8:ef:
5e:78:36:f7:09:af:04:ec:fe:cf:20:e7:3e:3e:aa:10:b9:fd:
a9:78:56:c5:63:df:d7:2f:06:5b:81:39:8c:b8:b1:10:01:7f:
d1:f0:41:bc:08:5c:54:b2:19:60:7d:91:33:1d:24:0c:c0:12:
ea:13:ef:d6:81:fd:d8:f8:99:5f:2f:7a:ab:30:c6:e5:22:1d:
76:cf:81:ed:4f:1d:40:b3:76:81:31:36:8b:d8:e0:78:bf:68:
97:dd:75:97:8b:0f:39:57:8e:ab:4a:ba:21:d9:ef:ef:98:ea:
75:c9:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:08 2026 by rpki-client