
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
File: 5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json)
Hash identifier: yg2U0CoMt9IwQvna2p2BSwglIxrMMQ6Zn2dsdh20xiM=
Subject key identifier: 9A:2B:C9:B8:27:59:8D:56:EE:3A:2E:B7:17:32:DB:1A:CC:C3:54:04
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial: 01A0E7E3EB17FC2A1F2ADBEA5E5E9F6D38B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
Manifest number: 0312
Signing time: Mon 28 Sep 2026 12:01:08 +0000
Manifest this update: Mon 28 Sep 2026 12:01:08 +0000
Manifest next update: Tue 29 Sep 2026 12:01:08 +0000
Files and hashes: 1: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: C6Ma4Ea3iBi33oeTyC1+BxA/+40pkeR/C0wUIAhDThw=)
2: WfbgqzFvbp8TCWxSG_sNKuLnLRk.roa (hash: jfHBs52kM4vMm6kxJTz0eoaLnYZ9f8a9vM4u4mqutm0=)
3: aB79fGj4vXTZE5XL5eriNSFisHA.asa (hash: 1qM7sm32yNwlqaxmCx8pUKuLeMMUaDuzmS9PF1Xa8zE=)
4: bABKElQpuUR5qvAEktEyWURQ4XE.roa (hash: xB7baZkS+NXVYrZMh8EL0mNmqqM8iQ6l8pfIwSwvFAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:eb:17:fc:2a:1f:2a:db:ea:5e:5e:9f:6d:38:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
Validity
Not Before: Sep 28 12:01:08 2026 GMT
Not After : Sep 29 12:01:08 2026 GMT
Subject: CN=9a2bc9b827598d56ee3a2eb71732db1accc35404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:86:c1:f2:6c:cc:04:6b:36:f1:cc:03:eb:
be:b2:9b:3e:22:d9:87:ab:1b:11:a8:31:ab:4c:43:
95:e0:53:f7:27:5a:73:7f:fc:07:a3:02:64:43:c4:
ef:e0:20:29:d3:0d:f3:ef:5a:ef:2a:bb:09:28:fc:
c2:b2:9b:bd:b0:ff:8b:5a:75:d5:46:86:76:f0:8c:
65:0d:af:e1:10:ce:7d:5b:74:ac:41:32:b3:be:a6:
8d:51:36:82:27:77:61:8b:82:60:bf:d4:18:64:af:
f3:fa:8e:5d:ef:a1:bd:0a:db:b1:96:26:e4:10:48:
05:6a:90:bd:a9:8c:82:89:47:b7:79:22:70:f2:87:
7b:43:f0:06:31:44:92:fd:1f:90:d1:ac:f6:1a:d5:
2d:6e:a0:07:0c:74:f9:07:ec:60:21:eb:68:3e:3c:
b7:f4:47:64:03:f0:3d:37:ea:8a:78:d7:1e:cf:2c:
c4:71:21:a7:a6:1b:b4:12:78:87:e2:46:fb:74:eb:
6b:55:42:49:d3:bb:c5:2c:41:a3:f3:2a:2b:1c:49:
f3:23:66:3a:9f:13:1a:c6:e5:08:f2:79:c8:f8:bc:
ce:84:f8:70:7c:f5:a8:95:8f:f9:ce:05:b8:38:95:
c9:a1:c3:b4:63:83:a7:12:f8:f9:b0:ce:06:59:a7:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:C9:B8:27:59:8D:56:EE:3A:2E:B7:17:32:DB:1A:CC:C3:54:04
X509v3 Authority Key Identifier:
keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:de:25:13:71:75:98:09:c5:e4:48:36:e2:a5:b0:d4:d9:a1:
07:56:6b:c6:bf:7c:d1:c8:27:5f:ea:7e:8d:1f:44:06:ea:10:
de:11:2a:ec:50:72:7a:fd:f2:55:c8:51:2f:3e:57:50:67:85:
af:50:98:91:66:76:1c:2e:00:66:9d:0d:0b:8a:48:7c:ab:f3:
51:38:f3:04:13:67:22:56:cf:e8:e0:93:c8:90:d5:61:a1:1c:
99:85:93:ff:de:f1:8a:a0:b5:ba:97:c2:a5:7a:95:3d:70:50:
62:b4:f6:47:ad:84:06:7c:fc:71:a4:62:b4:1e:d7:33:9d:4b:
14:4d:44:ce:06:6d:b4:03:99:4c:ce:ad:79:21:8d:44:35:4c:
62:87:db:ae:64:6f:b6:9b:57:bf:be:b1:44:c5:13:62:71:92:
1d:c4:5c:c4:1a:b7:52:c1:d2:40:2c:53:86:89:9a:2d:6f:cf:
fe:92:de:d8:d5:91:00:9d:b1:59:60:a3:a1:9d:04:b6:31:af:
3a:ad:41:d2:b4:77:2f:96:d7:ac:cb:b2:6a:c6:8e:af:ab:3a:
ca:1a:98:25:f7:e1:e0:fe:9f:9f:de:a7:5d:c7:98:0b:f1:68:
19:68:cd:a9:10:fb:cf:19:d6:ff:f8:15:e2:1a:c1:78:bd:db:
b9:cf:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:47 2026 by rpki-client