Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: XZ+0zmDVfK0nqq7pnWgb4ioidZYBZX8L/3QRdpp818M=
Subject key identifier: A1:77:60:0B:D1:C3:C2:44:ED:FA:84:62:69:97:79:A9:F4:49:2F:5F
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 01A0B5099FE974D603D9764D0B1C2ED86DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 1A5D
Signing time: Fri 18 Sep 2026 15:01:41 +0000
Manifest this update: Fri 18 Sep 2026 15:01:41 +0000
Manifest next update: Sat 19 Sep 2026 15:01:41 +0000
Files and hashes: 1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: bKozVXSOGVFkpB/MzfERkDAle8V8uKnH0mVMj0Xo8Uo=)
2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:9f:e9:74:d6:03:d9:76:4d:0b:1c:2e:d8:6d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Sep 18 15:01:41 2026 GMT
Not After : Sep 19 15:01:41 2026 GMT
Subject: CN=a177600bd1c3c244edfa8462699779a9f4492f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:c4:77:64:df:08:47:ce:bb:36:cf:eb:c1:
43:6f:ad:81:f9:91:b0:cc:11:69:a9:e6:51:0d:3b:
ab:dc:62:db:a4:0f:1c:3b:93:9f:72:cc:88:8c:f4:
95:0b:bf:be:33:a1:cf:ed:be:c4:9c:64:28:25:4b:
31:26:c4:72:b3:9e:ad:44:e9:8f:97:8a:fe:06:c1:
38:50:07:75:b3:b3:de:92:3d:34:fe:35:4f:e1:92:
c7:cd:3c:61:4b:47:88:78:54:4e:20:24:b3:ec:bd:
d9:95:17:68:59:8d:d8:c0:e1:e8:9f:96:6c:47:92:
96:a2:34:dc:8d:e7:78:72:f3:1b:e3:ea:05:20:42:
62:ba:4d:fb:33:dd:19:5c:9d:bb:89:26:c4:d5:5d:
7d:3a:2f:58:d6:87:a7:72:90:7d:2b:f0:27:d1:2d:
e7:d9:d1:55:7b:41:d9:3d:ab:8a:2a:46:aa:18:44:
e6:77:9c:55:e5:20:78:09:57:ce:a6:8d:4b:9a:3a:
98:f8:0a:39:d9:7c:0e:77:39:b6:64:65:f2:40:f7:
69:c9:4b:65:34:bb:15:21:7b:dc:7f:b6:16:e0:61:
7c:92:e9:69:81:2e:8c:22:91:71:85:fa:15:18:c5:
3f:3f:1b:f5:c7:b4:2d:dd:41:d0:9d:fb:93:cb:2b:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:60:0B:D1:C3:C2:44:ED:FA:84:62:69:97:79:A9:F4:49:2F:5F
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:15:23:c1:0e:4f:84:a4:97:81:9f:da:9d:bc:d4:ae:aa:
3a:32:d8:34:c7:c9:68:1f:7e:5e:1d:9d:16:1c:f8:9a:49:e7:
ca:83:1e:ad:eb:3c:2e:33:d4:8d:4e:98:c2:37:53:5f:eb:00:
71:00:f2:4d:d8:2a:dd:72:62:2c:82:cc:91:d1:f8:d8:3e:9e:
8c:09:50:e6:db:70:a0:89:fb:d5:0d:ed:84:4c:90:d9:d3:ce:
32:43:43:cd:d7:76:6f:59:6e:95:fa:c5:bd:d4:96:f5:9a:e0:
9f:e9:45:8a:fb:d2:8d:48:8e:7c:1d:f8:0f:1b:01:c5:9c:f3:
75:96:d0:77:49:ec:61:40:1f:3d:3b:fc:bf:b0:cb:00:f5:33:
ad:a8:37:3c:4e:d3:b8:66:f2:85:25:bb:16:9d:59:26:62:e3:
22:03:68:73:b0:54:9e:45:9a:6c:28:c4:9b:74:42:43:24:44:
cf:62:61:f3:7f:2c:1c:b9:1f:81:4e:da:a1:c9:52:1c:69:ef:
88:31:6e:f1:1d:1d:fc:0d:c8:cd:6c:4c:1f:bb:f5:1f:f0:3c:
ec:c6:b5:a5:fd:fd:36:b6:1b:4b:a9:4b:f7:61:15:e1:d6:bd:
b6:3e:05:14:f3:6c:6b:93:d5:3e:9b:e8:42:1e:a9:17:9b:29:
78:3d:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:40 2026 by rpki-client