Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: jk9VcsJpuViZZDeuWt3WNHIPduHNyfZt9ZGs8mbWS/M=
Subject key identifier: 3D:78:8C:4D:6E:2C:39:FC:2B:38:7E:F6:15:24:81:49:D5:C6:17:F1
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 01A13DB84651DFA541D6D923BD479FADA0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 04:00:49 +0000
Manifest this update: Thu 15 Oct 2026 04:00:49 +0000
Manifest next update: Fri 16 Oct 2026 04:00:49 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: MUsoLJPOEdx6TQLGUMXffHCTRXm3Jpex0mVUbrl0ZTE=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:46:51:df:a5:41:d6:d9:23:bd:47:9f:ad:a0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Oct 15 04:00:49 2026 GMT
Not After : Oct 16 04:00:49 2026 GMT
Subject: CN=3d788c4d6e2c39fc2b387ef615248149d5c617f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:b6:a7:83:f8:78:57:3b:8b:5f:7e:55:10:
f7:99:cd:72:de:18:54:95:c2:a6:13:85:b7:8a:8c:
90:50:ad:cf:d5:df:94:01:d2:95:da:f6:3d:73:ad:
33:64:ba:b9:5f:01:22:4e:b3:96:6c:fb:50:b8:58:
5f:17:cd:18:75:19:24:fd:c0:52:69:7a:6e:dc:77:
18:72:eb:bf:b3:b0:9d:10:0b:72:eb:5b:26:78:0b:
2b:cc:9d:d0:8b:1c:c6:a2:f7:63:15:f9:38:73:a6:
7b:a6:9c:21:88:21:db:6d:17:48:6a:9f:c1:98:57:
fc:9a:f6:70:e9:9d:e7:73:08:e3:34:30:76:05:a6:
87:5d:8d:54:ff:4e:93:67:bf:f9:06:2d:e3:ba:32:
0c:6c:25:d1:a6:37:22:ac:83:7e:58:81:e8:dd:0d:
ae:d2:55:d7:a5:14:8f:6c:30:a5:a7:c8:6a:b8:e4:
53:b4:d2:3c:7b:11:ad:2a:f1:8f:9b:59:8d:d1:4e:
86:36:07:45:9f:35:ed:08:8b:ff:90:51:63:af:cb:
ad:b6:0a:29:07:89:cd:41:32:4a:b0:6b:4b:6b:7d:
6d:11:56:50:a8:c7:ba:bf:f3:f0:c3:ce:72:b1:cf:
aa:15:46:9d:74:48:9e:ec:cd:ee:86:44:47:b6:33:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:8C:4D:6E:2C:39:FC:2B:38:7E:F6:15:24:81:49:D5:C6:17:F1
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:f0:83:c7:7c:a4:e0:7c:c8:19:fc:e3:b4:f2:0d:36:ca:2e:
69:31:80:35:52:33:23:77:1d:ea:dd:23:7e:e9:04:dd:57:6f:
36:17:c3:d5:b9:aa:c3:e5:74:9b:70:2b:98:9e:f9:ae:08:1c:
7c:28:dd:23:a8:06:45:6e:20:c1:97:7b:27:49:82:ad:0d:6f:
61:60:8e:04:1f:68:49:89:2c:2c:fa:9b:bf:93:4c:5b:2d:0a:
ea:7c:62:14:ba:58:9d:ca:d8:1c:38:77:64:0d:83:e7:61:da:
5d:bb:ad:cd:6e:9b:ba:58:0f:dc:5f:5d:1a:4d:c1:a7:6e:ab:
28:d1:98:a5:f6:e5:a1:39:f8:c5:67:ab:88:81:20:6f:c1:ad:
e7:24:13:3f:58:85:3a:bc:3a:7a:33:e2:ad:02:c2:c1:8c:d4:
9a:59:03:c1:0d:e0:53:8c:b1:66:96:98:8e:e1:23:18:e0:55:
ff:77:4d:4d:53:8c:96:75:e9:77:97:ba:36:53:87:e5:97:0c:
f9:e0:8c:c6:ec:1b:b7:2c:4f:97:5a:ff:5a:c3:3b:c4:d5:0f:
e5:c4:6b:d2:c9:0e:d3:8e:b6:4e:bc:9c:4c:b6:60:e0:be:f2:
43:89:fc:81:6a:e4:36:d2:de:07:bb:a3:ab:83:b6:ed:f6:45:
24:97:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:48 2026 by rpki-client