Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json)
Hash identifier: g4OCc8zB9E1f6PPrkLQXwiY/eqLEHNDri5pOkU85jvw=
Subject key identifier: 10:FF:1E:76:C0:0B:F7:D5:84:CD:32:94:52:E6:52:77:1C:85:40:7E
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 01A12B4455FFE2D3E467578E8A59076ECD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
Manifest number: 02E9
Signing time: Sun 11 Oct 2026 14:01:01 +0000
Manifest this update: Sun 11 Oct 2026 14:01:01 +0000
Manifest next update: Mon 12 Oct 2026 14:01:01 +0000
Files and hashes: 1: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: kCQypBKhvAKA2tjz2lYXBNfOGvSr3AXfp9B1DD4C1Dw=)
2: Cdg-XL0zdHAzVrXI1UKniF1NxrU.asa (hash: oCxXm5PJ/tcVHgZif1qOHjXdRM54N8FVZ24RsEa01xM=)
3: ayeAuK6AHwJljOw6TVN3S1sed2E.roa (hash: iOPQ2GWcRYReaL6j28AmLWw1MVXLLjYyFBov2MAEJCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:55:ff:e2:d3:e4:67:57:8e:8a:59:07:6e:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: Oct 11 14:01:01 2026 GMT
Not After : Oct 12 14:01:01 2026 GMT
Subject: CN=10ff1e76c00bf7d584cd329452e652771c85407e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:fe:d1:34:26:e2:24:c7:f7:24:8b:0e:19:
13:3e:63:38:84:25:1b:57:dd:c0:24:e6:13:da:64:
35:3f:05:be:ad:bb:5a:a6:6d:0f:f7:2a:c5:87:12:
4c:60:45:67:05:83:9f:13:e7:52:be:ef:36:e8:d9:
f2:58:74:f0:ba:d6:79:43:70:d0:82:73:e4:6c:7a:
3d:a4:e8:2d:dd:8e:37:df:ed:89:27:60:0f:2c:04:
a3:db:07:e4:54:71:2b:7a:34:5a:8a:44:f4:1f:96:
43:59:30:2c:4f:05:19:d5:30:f2:82:e1:4f:51:5b:
5e:5c:3f:5d:f7:ec:3e:96:07:c0:a4:cd:0e:37:e7:
a7:9d:0a:e6:ab:fe:1e:39:bd:24:16:64:c1:e1:e5:
cd:3c:0f:b4:fd:58:e0:b4:05:b0:e5:e8:12:eb:01:
19:4e:67:7b:6f:79:20:59:64:a0:08:c5:0c:a8:90:
4e:fa:b5:27:5e:c9:28:e3:92:40:04:47:95:d4:e6:
58:e4:5b:c5:d6:39:82:c5:f6:b0:aa:dc:8b:d0:9f:
61:28:df:88:dc:d4:b4:56:b7:84:34:f6:9c:96:11:
1e:c4:30:48:a6:0a:b9:df:81:e8:02:7a:57:af:cc:
5d:66:21:37:e9:36:2d:b2:bf:bb:02:38:82:29:b8:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FF:1E:76:C0:0B:F7:D5:84:CD:32:94:52:E6:52:77:1C:85:40:7E
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5b:a1:15:21:0d:15:4e:12:4c:78:ed:d9:2a:2f:8a:d8:0a:
5a:86:64:3c:76:5f:05:c1:5f:73:c5:c8:ad:8e:56:76:87:0f:
e1:49:76:e3:88:0f:fd:c8:18:82:d4:a6:63:64:16:7f:48:65:
87:08:9f:c8:69:7c:43:ac:b7:fd:b9:0a:5a:bb:4a:45:3a:bd:
f5:09:15:0a:97:2c:95:46:53:16:95:76:86:fe:de:74:f8:dc:
8b:28:ef:48:93:14:d8:40:4e:32:f2:d8:d8:75:be:6b:35:f2:
05:d4:0b:1c:36:4b:35:ae:eb:ea:d8:a3:93:f3:ed:cd:a5:66:
49:4b:2d:c8:7a:b8:4e:1b:c9:4f:f3:10:9f:d6:0f:c1:13:59:
f6:47:53:13:69:23:e8:00:e4:a0:02:4b:2e:5e:96:86:f8:01:
49:43:3e:04:99:c0:bd:1b:25:fa:67:b2:b0:ed:0f:8a:16:ff:
5c:f3:45:72:67:b7:de:f2:16:1e:65:dd:05:07:63:6d:13:48:
89:e6:ba:f5:94:0f:38:84:0d:f0:5d:30:1b:58:e6:dd:54:d4:
aa:57:84:f3:da:e8:85:93:65:32:64:98:14:85:e8:de:ab:7b:
de:87:a0:b6:94:5a:c5:72:a6:54:1b:e5:6a:3e:31:0c:38:36:
99:b9:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:17:57 2026 by rpki-client