Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
File: s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json)
Hash identifier: enHkfZEEDBzgtdRVokH7WXuMXIg5r8l2TugLoNd/0i4=
Subject key identifier: 92:6C:BB:C0:1F:14:A1:ED:5C:19:40:18:F9:5D:A5:AD:5C:D8:9A:6E
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Certificate issuer: /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial: 01A06DCC09157E78F927641D593A89BD440F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
Manifest number: 025C
Signing time: Fri 04 Sep 2026 19:01:23 +0000
Manifest this update: Fri 04 Sep 2026 19:01:23 +0000
Manifest next update: Sat 05 Sep 2026 19:01:23 +0000
Files and hashes: 1: ptxNY_ik7GTtx3Nvsz1IktW_2ug.asa (hash: zaORMCc6le7BfLENyKhZEMkSVb/nKVxd6bCWLklbXHA=)
2: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: K1SEKptA00cZNoMOAGEOMOT7AEaCDEwY77cne7MSLFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:09:15:7e:78:f9:27:64:1d:59:3a:89:bd:44:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Validity
Not Before: Sep 4 19:01:23 2026 GMT
Not After : Sep 5 19:01:23 2026 GMT
Subject: CN=926cbbc01f14a1ed5c194018f95da5ad5cd89a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:da:ba:a2:eb:14:e9:ec:a2:6f:d9:19:21:
dd:ac:55:7b:c6:3c:5b:39:e4:91:c4:46:1e:8b:a5:
bc:ad:63:07:67:96:23:87:a7:ae:67:24:d4:f7:7b:
7f:87:3f:32:5b:c2:5a:96:e7:de:d1:c9:43:1f:e9:
d9:cf:9d:27:79:78:ad:a7:99:01:94:fe:56:d3:29:
3f:8a:22:8c:85:ee:fc:d8:2c:41:ad:9c:b2:7a:83:
51:bc:1d:0d:c6:1e:10:05:4a:e6:8b:8d:a2:f8:73:
ce:64:cb:3e:9e:4e:f9:2b:57:76:98:3c:35:f0:71:
83:16:c4:2c:6a:ea:8a:01:8c:ec:34:2c:dc:c8:9a:
65:2d:ff:59:a7:3d:23:f6:31:0e:3d:f2:da:50:38:
23:29:8b:02:78:61:3c:33:69:63:af:32:9c:dd:58:
0f:6f:63:ec:02:ba:1d:56:6f:2f:9d:f8:a4:2f:65:
e5:a7:93:f0:0c:46:8c:02:70:dc:51:6f:63:40:16:
f6:0e:ff:bf:57:d1:d4:04:7e:96:1a:40:ee:7a:3c:
b5:db:fd:c7:da:8a:7e:a6:fb:31:29:37:a9:32:0c:
9c:ec:ac:be:c4:0f:42:97:82:42:fd:fd:0d:3c:d7:
ea:9f:fb:c6:16:b6:de:62:03:fa:25:f1:62:e7:4c:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6C:BB:C0:1F:14:A1:ED:5C:19:40:18:F9:5D:A5:AD:5C:D8:9A:6E
X509v3 Authority Key Identifier:
keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:01:91:22:7d:70:d4:60:f8:ab:67:6c:dc:14:74:24:2e:bd:
02:15:cf:0d:b7:67:e7:56:38:b2:cc:80:d3:b8:5a:10:1e:ec:
72:55:d6:0d:19:97:41:ee:79:da:1f:1a:f8:a1:da:df:72:b9:
8e:f6:32:d3:73:06:5b:57:9c:2b:43:82:91:89:61:2e:3a:bd:
ec:f4:9e:aa:3c:42:9b:09:6c:a2:a2:7a:2e:d8:31:68:4f:88:
6f:7d:66:a1:cb:ef:b1:d5:82:bd:11:db:6f:57:ea:20:7e:f1:
19:65:5e:c7:70:f5:62:69:2d:0b:d3:85:e6:43:1d:a1:90:e6:
65:bb:21:f7:fe:55:a6:25:6e:ad:99:5b:38:ec:ce:50:f7:b1:
50:3f:0d:35:61:b6:a1:52:8f:c5:49:53:5c:5f:14:a6:ed:57:
14:5b:90:c0:96:b6:a4:fd:18:cc:ac:45:db:6f:5c:88:e3:98:
dd:b7:89:84:11:f8:d9:87:c3:95:2f:39:42:4b:ea:66:8f:be:
56:87:f6:ac:2e:a6:00:40:70:ee:03:10:63:9d:61:f8:45:0e:
b0:cc:a6:55:21:80:52:87:09:ab:ca:09:3f:0c:ca:42:2d:58:
3f:84:d8:71:dc:ac:9e:5a:da:69:0d:af:49:da:94:7e:5d:5d:
1e:e4:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:43 2026 by rpki-client