Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: AAi3b4kT3tLNkFDgwDRG/GcwGkhmafW1YvvtiTw6Fh0=
Subject key identifier: 15:6B:BC:A8:90:E0:D8:41:DC:42:6C:87:6A:77:9C:48:CD:4B:91:AF
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 01A13AEDCE0FF4322B4EA758371A1D2224E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 10FA
Signing time: Wed 14 Oct 2026 15:00:25 +0000
Manifest this update: Wed 14 Oct 2026 15:00:25 +0000
Manifest next update: Thu 15 Oct 2026 15:00:25 +0000
Files and hashes: 1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: KYEr1fSwgqYfK1/HadGb3Ozam+C4vgbiaXXYLoetL50=)
2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ed:ce:0f:f4:32:2b:4e:a7:58:37:1a:1d:22:24:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Oct 14 15:00:25 2026 GMT
Not After : Oct 15 15:00:25 2026 GMT
Subject: CN=156bbca890e0d841dc426c876a779c48cd4b91af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:c4:ad:82:0b:30:20:fc:8f:2f:a6:7e:8b:
87:3f:4a:a1:80:58:7f:af:a6:76:13:ca:90:4a:f1:
6e:22:be:ec:ee:4a:b7:29:9e:44:74:cb:71:42:09:
4a:7f:17:77:56:7c:46:8d:be:8a:2a:00:d7:22:4e:
95:16:d7:8c:b7:f5:49:88:c1:e2:de:b0:d3:51:07:
c3:d1:78:83:70:ef:87:92:2f:97:1f:01:0c:63:12:
4f:f5:e6:05:59:3d:38:1a:80:2d:1b:17:30:c8:34:
3f:88:f7:d1:8c:fa:0d:88:50:5d:52:3c:d5:b0:2b:
6b:64:2a:fd:25:9e:5c:e5:92:4e:cd:b9:c0:ad:f3:
78:fe:64:ff:f4:cf:59:6d:71:bf:ec:9a:e2:02:1f:
59:a6:ad:aa:c6:a7:2f:a2:5f:b3:bd:4c:4e:07:6f:
f6:71:53:18:83:61:cf:d5:1a:56:91:80:4a:dd:42:
2d:9f:ca:00:a2:f8:9a:bb:6e:a8:49:dd:f8:13:82:
84:72:10:b5:d2:4d:57:cb:55:52:61:24:4e:82:3d:
ba:2c:b8:2b:c1:29:88:ab:5d:b2:32:f9:af:42:bd:
d2:67:5e:3d:b5:98:de:2c:21:70:34:96:b8:8b:6e:
98:0d:9f:20:0c:cc:82:04:b9:82:f6:bb:ec:e2:80:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:BC:A8:90:E0:D8:41:DC:42:6C:87:6A:77:9C:48:CD:4B:91:AF
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b4:dc:ae:aa:fc:e0:ee:2b:41:41:4e:42:65:c9:da:53:25:
e5:f1:2d:4f:e3:fc:88:56:bd:6d:91:15:49:1c:16:8e:55:23:
a4:7b:16:18:9c:65:c0:d7:14:26:88:18:0c:ea:df:f6:d7:ef:
00:3c:96:c5:b3:02:26:95:ed:0a:5f:10:dd:98:e6:58:ba:18:
d1:e9:b6:b9:cb:2c:a1:0f:a8:14:50:54:17:de:28:99:1d:31:
68:51:17:17:95:bb:64:2f:d2:6d:f3:36:ea:da:7e:d8:f2:f6:
23:9c:3f:43:98:a5:dd:95:32:23:70:b3:47:2d:c5:3a:ab:2e:
43:26:c2:01:c1:58:e7:0b:d8:41:36:82:8d:3e:0d:91:91:06:
2a:57:40:d2:5b:ba:db:6e:71:ba:16:1a:62:89:b6:6a:e6:d6:
ef:41:b2:5c:6d:dd:99:27:07:d4:d8:8b:1e:17:fe:82:b4:78:
95:2c:3a:c8:0a:cb:0f:e3:3d:c6:3f:62:e5:dc:27:cf:7c:c6:
11:16:11:e6:13:7e:10:c1:30:19:65:13:ec:c6:19:f9:81:7b:
c9:8e:28:84:56:cf:e5:34:e0:de:88:ab:fc:40:56:a2:31:f6:
15:5b:ff:67:77:f5:81:d3:03:13:db:33:09:46:7a:39:ce:7c:
92:b8:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:19:56 2026 by rpki-client