Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: GgiBXiSe779O82bq7QyOpBUpmpdlkSDjByGWC9/04BE=
Subject key identifier: 5A:49:2E:71:E5:86:D3:F5:D1:31:F1:73:8B:79:34:12:F0:71:53:F1
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 01A001A64B20C4FF482C308B348BAF8342B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 071E
Signing time: Fri 14 Aug 2026 19:01:10 +0000
Manifest this update: Fri 14 Aug 2026 19:01:10 +0000
Manifest next update: Sat 15 Aug 2026 19:01:10 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: Gu0YNtDmIA7Vz3Tmgf8oiko3eqAlvWVkWRTN/ZSZIGM=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:4b:20:c4:ff:48:2c:30:8b:34:8b:af:83:42:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Aug 14 19:01:10 2026 GMT
Not After : Aug 15 19:01:10 2026 GMT
Subject: CN=5a492e71e586d3f5d131f1738b793412f07153f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:36:ef:e3:50:68:5d:a0:27:ae:95:af:72:
b5:e1:75:ae:4a:f1:dc:62:22:89:12:42:35:27:e0:
e1:83:b7:05:db:c6:a8:61:d8:45:cf:1a:fc:47:7b:
73:fa:a2:11:5f:9d:57:45:7d:b1:54:60:e3:ad:89:
1d:ae:6f:d1:9d:28:b7:47:53:8b:52:ea:01:ca:3c:
4f:23:16:e2:a9:8e:a0:a0:43:05:e9:84:54:16:7c:
84:7f:3b:4a:80:1e:3c:8c:59:9a:13:da:b9:8e:f7:
64:78:99:e0:96:6b:c9:32:6f:57:78:e5:52:bd:7d:
4c:2b:f6:f7:20:d6:23:21:50:11:dd:4b:62:d0:b5:
7b:4e:e8:58:48:e9:5c:be:0c:f6:49:95:ca:ef:36:
7c:5e:a4:d9:9c:1a:48:9d:9b:14:5b:01:fd:b0:10:
0a:7b:ed:ff:39:ed:fd:d3:9d:f5:00:19:f2:18:85:
bf:c0:5d:9b:97:30:90:47:57:65:da:6d:49:91:bb:
ec:c5:de:eb:2a:40:06:e1:30:c9:1c:27:9b:52:0f:
43:57:3c:40:f7:61:3c:53:7d:7b:8e:2a:37:e7:f7:
30:83:0c:39:b3:8a:4a:ac:b6:91:55:52:09:aa:ee:
92:bb:ef:5b:5b:8b:ae:64:27:ab:cc:94:48:9e:01:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:49:2E:71:E5:86:D3:F5:D1:31:F1:73:8B:79:34:12:F0:71:53:F1
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6d:a9:32:ff:68:61:e6:a5:11:7b:29:91:47:cb:da:db:2c:
e1:6f:cd:f4:52:22:91:45:6f:44:1e:dd:13:4e:24:bd:10:53:
76:88:ac:1d:a4:e6:41:a5:0f:1a:f1:3a:55:65:18:9e:18:92:
14:0e:ac:64:03:d1:e6:e1:ae:22:b2:9c:26:67:10:95:0e:79:
84:3c:05:fe:f4:74:d8:30:86:37:a2:05:d2:ea:fa:eb:30:c1:
7a:7a:8c:f2:42:d5:65:6d:70:ad:53:fc:f4:7b:1d:50:43:53:
d7:59:bc:2e:34:34:e3:85:d4:40:5c:c9:1a:90:cd:24:8f:6e:
d2:77:80:7e:99:2b:5d:20:4b:2b:d9:2a:1b:51:02:9e:ac:01:
4d:c0:ce:bd:85:65:7d:51:6b:f5:52:c1:b8:40:44:9f:1c:41:
78:10:ea:4c:9b:75:82:b2:bd:06:3f:0f:8c:9d:45:76:27:03:
20:70:cf:04:85:ef:2f:c4:80:a2:48:7e:5e:1a:27:17:b3:34:
f5:6e:ef:94:de:70:3a:8c:a8:41:2d:c2:af:3d:0e:3c:a8:84:
e2:8d:6e:1e:fd:5d:96:fd:06:d4:72:d6:d6:5d:3d:8a:8d:e2:
47:02:c5:9d:9f:a3:ab:02:c8:e2:5c:f6:ba:33:97:d7:44:b1:
ed:fe:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:10 2026 by rpki-client