Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: 5nOwotpNJGOLwR7lDm/Zxjhrlfjcd9BsvlfUopQtSH0=
Subject key identifier: 87:FF:BF:79:CD:64:D8:10:98:EA:C8:D2:17:5F:EB:C7:B0:4F:2E:43
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 01A001702997DBEB3968CF113A0F89A9354C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:02:02 +0000
Manifest this update: Fri 14 Aug 2026 18:02:02 +0000
Manifest next update: Sat 15 Aug 2026 18:02:02 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: lvfEYewrPy7zSxCYKrwEliNuOha2IH5J1vxIpBvupWo=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:29:97:db:eb:39:68:cf:11:3a:0f:89:a9:35:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Aug 14 18:02:02 2026 GMT
Not After : Aug 15 18:02:02 2026 GMT
Subject: CN=87ffbf79cd64d81098eac8d2175febc7b04f2e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:20:a9:04:7f:a6:d5:27:fa:12:4a:72:8c:
72:2a:d8:d7:ab:cf:a1:f3:82:72:4b:d4:c6:74:73:
63:2f:fc:3b:34:46:f5:b0:61:ac:e2:db:43:e8:d8:
31:ed:78:46:17:d5:ae:cc:5e:39:dc:b3:07:cd:43:
48:cc:90:c2:6e:05:cf:e0:8b:c1:9c:a6:df:9c:23:
0a:36:48:08:cf:76:21:ab:68:f5:45:2c:80:4f:89:
f5:c0:91:fb:04:bb:91:87:88:2d:75:fb:64:84:7d:
a6:08:43:00:7a:17:64:c2:39:f9:4b:76:f9:69:20:
1d:c6:f3:19:1e:fd:b9:16:86:94:4c:ed:6f:65:01:
b4:31:31:b5:a7:bc:8c:b2:a9:13:1a:d9:f7:ed:74:
52:0b:45:ee:a6:3a:76:ca:56:94:c1:99:20:21:44:
61:d4:80:5b:66:01:4e:27:d3:1a:6e:ee:46:20:e4:
53:4e:f6:bb:d8:c3:75:12:5e:82:eb:39:3f:8a:69:
06:c1:38:4d:64:84:e8:ae:2d:48:3d:65:da:52:e5:
dc:f6:15:e5:ec:f6:77:ea:a6:84:bb:1e:58:1e:b4:
62:fb:1b:5d:e0:ac:a3:e1:4b:b2:ee:f1:e2:0a:f3:
99:68:35:1b:0c:db:ab:f7:cc:0e:6a:f6:24:7c:33:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FF:BF:79:CD:64:D8:10:98:EA:C8:D2:17:5F:EB:C7:B0:4F:2E:43
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:63:c6:e6:95:49:89:db:3a:74:6a:74:4c:d8:60:14:38:a2:
de:4a:f0:23:3d:db:d4:3c:15:c8:d3:9f:fc:31:71:40:14:de:
be:7b:7b:d3:a7:d2:66:07:b7:00:f3:cc:2e:41:8d:b4:ff:0e:
48:b0:30:25:c5:68:fd:40:34:63:db:54:be:5b:dc:d7:21:0b:
ae:d4:d0:9d:d3:f7:64:b7:20:37:76:f6:2c:6a:62:58:d3:d4:
b1:c1:55:ba:3a:14:50:94:de:18:9e:52:a7:7d:a6:d7:6d:33:
8d:b6:7b:40:06:c4:ba:39:66:1d:1d:96:77:bc:02:74:8d:66:
95:53:90:90:91:2e:ea:1c:fe:61:31:fe:47:ba:ac:c9:75:76:
1a:91:83:b0:e9:4b:da:2c:34:00:1d:f5:44:b6:81:20:84:34:
34:7a:a3:0d:cb:3f:6a:5d:72:1a:37:1e:74:20:76:fd:ec:96:
4f:ae:2a:24:cf:34:a8:ba:c1:93:03:a9:8c:9e:73:6b:b5:93:
7a:f2:75:d2:42:28:83:56:bc:3e:0b:69:cc:aa:dc:3c:3d:50:
50:68:48:a2:09:a3:41:84:14:d0:27:56:91:c1:f5:01:7e:17:
16:30:e1:11:37:13:15:08:68:84:ac:a0:96:e0:0d:2c:c0:19:
0a:6f:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:19 2026 by rpki-client