Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier: 1LLkDmo28x30jUlVXfHBUQJrBIrcKUh8UoO50yRaKpo=
Subject key identifier: 44:61:76:FB:35:14:9B:92:01:4B:DD:92:19:42:79:57:F8:63:6F:EC
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01A114F3E45FC5B21025597709291500CE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number: 1744
Signing time: Wed 07 Oct 2026 06:01:30 +0000
Manifest this update: Wed 07 Oct 2026 06:01:30 +0000
Manifest next update: Thu 08 Oct 2026 06:01:30 +0000
Files and hashes: 1: 1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa (hash: r4s/pYFFvl0PuU1Pc1ZEalLcMszU2nIBrtcNDifNzEc=)
2: 59Qy54NWnnaF0UonsrF_AIsT2AM.roa (hash: fe8mUsn7ORXLXCy47FezO3nIOf1E6XAt4wFRWRU6mf0=)
3: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: OLdX7xmR4Tb5E0UObBzWf+7shS0VBcNJmIRwDGL6tRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:f3:e4:5f:c5:b2:10:25:59:77:09:29:15:00:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Oct 7 06:01:30 2026 GMT
Not After : Oct 8 06:01:30 2026 GMT
Subject: CN=446176fb35149b92014bdd9219427957f8636fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:6e:fb:48:6f:e3:e2:1f:8f:6a:55:68:46:
e3:8a:77:54:97:2b:f7:a3:20:04:a4:bd:a2:db:30:
ab:d5:cb:43:c6:cc:04:8e:94:04:fc:50:ad:a2:8a:
dc:af:c1:7c:f2:87:9d:c4:7f:bd:2d:9c:e6:c1:54:
d4:dd:ca:16:56:95:ec:c2:62:c0:eb:95:5a:9e:70:
7b:45:f5:11:52:10:f1:50:74:7a:85:3d:55:d8:4c:
97:32:df:fb:51:6a:5b:50:6b:f7:e2:3f:76:ef:3d:
b7:98:31:d4:4f:4f:25:92:cc:24:70:18:e1:e3:88:
ef:1a:62:c2:4a:a7:e7:9f:cb:93:b2:32:e6:50:83:
34:43:30:50:ef:5b:d2:5c:a8:41:d6:b5:fa:f8:3a:
30:63:11:94:c7:f0:86:5c:6b:7d:46:ce:d7:bb:ec:
e9:f8:e1:19:08:de:5a:40:15:12:a9:20:19:3a:86:
33:e5:eb:aa:b7:08:3c:1c:cc:e9:39:64:d9:58:a8:
9c:e0:01:cd:92:95:12:c6:0f:12:71:a7:76:2c:f7:
e0:82:58:71:32:73:70:d7:98:6e:a4:e1:22:6e:3a:
64:96:76:f7:4e:a1:36:e9:ad:de:fd:a6:73:53:1a:
9b:aa:87:8c:1c:1a:3f:aa:f5:34:a3:17:12:73:d9:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:61:76:FB:35:14:9B:92:01:4B:DD:92:19:42:79:57:F8:63:6F:EC
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bc:6c:49:f8:86:cc:39:de:9c:31:62:58:68:be:24:0a:71:
da:35:14:54:f1:72:01:e0:76:b4:40:96:36:a0:0a:09:7f:32:
c8:56:9c:f0:50:99:28:85:b4:68:3a:cd:50:08:44:aa:c7:f6:
f7:1b:53:a1:a3:04:f7:9d:cc:85:0b:91:aa:aa:2d:a8:44:a0:
ee:f7:6a:48:0d:77:67:79:f0:55:ee:b1:a7:92:74:08:4c:24:
6c:4b:8b:d5:1d:db:55:ef:77:45:1f:6f:eb:32:16:97:b5:14:
7d:2f:7b:7c:ac:70:f6:a4:bb:00:ff:aa:db:2b:79:76:85:66:
2e:a3:64:c3:b3:f7:ef:46:0e:38:42:39:d2:ed:f3:35:aa:d2:
d6:89:45:46:97:69:51:5f:47:30:5b:38:de:e2:3e:f1:47:30:
12:bf:7f:31:b5:50:48:83:85:30:82:b4:0c:ac:5b:12:54:af:
a8:73:72:db:21:4f:b2:5f:9f:c5:de:9a:e8:47:f2:76:1e:a7:
51:84:9e:48:a6:5e:67:82:29:b9:e1:f7:cb:71:f2:ae:d8:bd:
d6:5b:92:ca:37:c2:f6:fe:f2:84:f5:b6:2e:32:f2:5a:60:8c:
56:40:05:e3:71:2a:0d:f1:27:79:18:b5:8f:58:dd:96:e6:21:
dc:90:9d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEU8+RfxbIQJVl3CSkVAM5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw
YTFhNjYwHhcNMjYxMDA3MDYwMTMwWhcNMjYxMDA4MDYwMTMwWjAzMTEwLwYDVQQD
Eyg0NDYxNzZmYjM1MTQ5YjkyMDE0YmRkOTIxOTQyNzk1N2Y4NjM2ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBpu+0hv4+Ifj2pVaEbjindUlyv3
oyAEpL2i2zCr1ctDxswEjpQE/FCtoorcr8F88oedxH+9LZzmwVTU3coWVpXswmLA
65VannB7RfURUhDxUHR6hT1V2EyXMt/7UWpbUGv34j927z23mDHUT08lkswkcBjh
44jvGmLCSqfnn8uTsjLmUIM0QzBQ71vSXKhB1rX6+DowYxGUx/CGXGt9Rs7Xu+zp
+OEZCN5aQBUSqSAZOoYz5euqtwg8HMzpOWTZWKic4AHNkpUSxg8Scad2LPfgglhx
MnNw15hupOEibjpklnb3TqE26a3e/aZzUxqbqoeMHBo/qvU0oxcSc9ngTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERhdvs1FJuSAUvdkhlCeVf4Y2/sMB8GA1UdIwQY
MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct
ZGU5YjJmOGY3ZTI5LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5
LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLxsSfiG
zDnenDFiWGi+JApx2jUUVPFyAeB2tECWNqAKCX8yyFac8FCZKIW0aDrNUAhEqsf2
9xtToaME953MhQuRqqotqESg7vdqSA13Z3nwVe6xp5J0CEwkbEuL1R3bVe93RR9v
6zIWl7UUfS97fKxw9qS7AP+q2yt5doVmLqNkw7P370YOOEI50u3zNarS1olFRpdp
UV9HMFs43uI+8UcwEr9/MbVQSIOFMIK0DKxbElSvqHNy2yFPsl+fxd6a6Efydh6n
UYSeSKZeZ4IpueH3y3Hyrti91luSyjfC9v7yhPW2LjLyWmCMVkAF43EqDfEneRi1
j1jdluYh3JCdAg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:17:41 2026 by rpki-client