Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier: PSiGHLRv+GN5hOL5fYTXwXNAfsWzzhdOy0ki4RNdvCs=
Subject key identifier: 63:BC:53:7D:B6:D9:F2:93:36:49:24:78:EA:E0:24:58:82:67:82:50
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01A10B4AE0F454B5F8C5229073661BF8F380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number: 173F
Signing time: Mon 05 Oct 2026 09:00:18 +0000
Manifest this update: Mon 05 Oct 2026 09:00:18 +0000
Manifest next update: Tue 06 Oct 2026 09:00:18 +0000
Files and hashes: 1: 1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa (hash: r4s/pYFFvl0PuU1Pc1ZEalLcMszU2nIBrtcNDifNzEc=)
2: 59Qy54NWnnaF0UonsrF_AIsT2AM.roa (hash: fe8mUsn7ORXLXCy47FezO3nIOf1E6XAt4wFRWRU6mf0=)
3: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: K7qESM3CdEO4zJVD7pLTZGg8qj1DiFtWg1u/pnUKAVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4a:e0:f4:54:b5:f8:c5:22:90:73:66:1b:f8:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Oct 5 09:00:18 2026 GMT
Not After : Oct 6 09:00:18 2026 GMT
Subject: CN=63bc537db6d9f29336492478eae0245882678250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:c0:a5:95:cf:7a:17:fe:ca:43:5e:b1:bb:
f8:66:11:51:10:07:da:4c:e8:6a:58:a8:ab:43:5a:
c9:56:bd:f6:70:0f:a5:96:81:41:c9:6e:4e:c1:e6:
bf:a9:61:aa:70:c7:d4:fa:51:19:53:71:81:d7:9e:
3f:4d:19:8a:5c:0d:b7:11:de:b5:0e:f5:c9:4b:a8:
cf:72:c3:d2:96:6a:4b:44:9d:b5:84:f1:2a:8f:5f:
c7:bf:8b:da:8c:84:c0:23:55:0d:d2:19:d3:25:9a:
f1:be:c7:55:fa:20:e3:f9:3d:ed:10:29:3a:b7:52:
78:08:45:14:1b:57:04:c0:90:6f:2a:18:f7:3e:aa:
c1:76:58:f7:65:86:23:ce:b9:39:83:e6:3b:6b:61:
8b:f3:b6:38:e6:a4:a8:33:d6:55:77:4a:e8:9a:c3:
8d:3b:23:d3:0e:ee:a4:db:7c:ce:13:8f:5e:1a:52:
73:7a:e2:70:af:e2:48:a2:e4:0d:47:40:e7:f4:45:
5a:67:ee:0f:5b:6b:62:02:dd:2c:e9:cf:44:f5:13:
60:d3:6f:bf:3d:91:4c:de:24:bd:a5:ba:09:c6:b6:
0e:15:b2:32:48:df:ee:93:17:d2:ed:9b:22:6e:32:
8b:23:65:e2:e0:a8:c7:34:e0:2f:18:ce:71:d4:06:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BC:53:7D:B6:D9:F2:93:36:49:24:78:EA:E0:24:58:82:67:82:50
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9b:7a:ff:65:24:49:e4:c8:85:c2:ea:3e:38:cf:bb:04:e5:
47:3f:eb:59:1c:1a:ba:d0:c0:44:a5:9d:3a:b1:ac:62:ba:e8:
11:37:56:a7:7e:5a:a7:02:29:0f:24:de:5f:f8:e0:12:56:69:
48:04:15:fc:70:71:62:84:06:ef:86:d2:4a:52:e8:9e:85:27:
43:ac:6d:ec:f8:35:b7:38:3a:1c:56:68:dd:ab:5d:b9:9d:af:
ce:50:3b:a5:17:ef:8c:d2:3a:f4:5f:ad:8e:1a:b4:fd:b8:57:
cb:7d:70:c5:2b:a0:52:c0:0e:69:1b:1c:1b:59:ed:04:54:f0:
a9:c7:89:d6:e9:0c:46:06:c2:f0:17:4a:91:e9:78:7f:44:e4:
16:f2:d3:15:b8:91:58:86:fd:d3:f3:d4:b0:99:71:47:75:85:
92:cf:27:86:a1:e3:96:6d:0d:37:52:d3:e9:01:a2:73:b7:dd:
8c:d4:45:6e:fb:a9:93:19:6e:03:41:95:9f:9b:52:8d:ec:0c:
84:a9:a6:3e:90:86:52:77:37:4e:2c:06:e9:2c:90:28:21:20:
da:e9:61:74:f9:72:8d:cd:15:cb:be:79:25:8a:8d:71:4c:59:
5c:08:3a:97:5c:4b:77:15:23:2f:81:09:c1:7c:57:75:f6:18:
ee:d0:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:07:40 2026 by rpki-client