Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File: 5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier: wcpCyVySwY40odKwaQdToXHinrxSqn2agG2QcWazJBQ=
Subject key identifier: 32:3A:52:31:D3:0E:A4:4C:82:C8:33:A6:32:A3:E4:E2:40:0A:F6:2E
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer: /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial: 01A13E949B1CE914EAF075B3787E140D97F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number: 13A5
Signing time: Thu 15 Oct 2026 08:01:28 +0000
Manifest this update: Thu 15 Oct 2026 08:01:28 +0000
Manifest next update: Fri 16 Oct 2026 08:01:28 +0000
Files and hashes: 1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: 3EuVOsnifodgiol5yxvEZe0l2/gEueMkATzFc687xYs=)
2: HCkHGxOIl0AvSluH6FDwE5YOqmY.roa (hash: ZodFEdt/PdT+m5KjweAMGEU2ve/bYXAovApfHVhI2mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:9b:1c:e9:14:ea:f0:75:b3:78:7e:14:0d:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
Validity
Not Before: Oct 15 08:01:28 2026 GMT
Not After : Oct 16 08:01:28 2026 GMT
Subject: CN=323a5231d30ea44c82c833a632a3e4e2400af62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:e9:b5:53:8c:ec:b5:16:3d:e8:d3:81:0a:
c2:12:a4:0c:31:ae:02:bd:b3:43:67:f7:84:35:85:
21:92:02:62:54:61:df:b6:91:f8:ba:fa:49:f5:32:
28:fd:88:cf:d8:8e:3f:b3:30:6f:b4:c9:48:d3:d6:
c5:8c:8c:7d:b0:0c:e0:90:6b:c6:bd:51:d9:f4:db:
00:f0:f0:3c:89:1f:27:3b:8b:d9:e9:77:39:40:33:
1e:09:e1:20:72:6f:46:e4:ee:93:f0:ec:b6:b2:50:
a8:27:d7:b2:f3:a5:61:b4:14:e3:03:4a:81:ba:01:
1c:c5:59:c1:2f:ae:a6:e6:04:26:94:34:39:4e:a4:
ff:43:35:e3:f4:ed:a4:fc:60:c4:61:29:0e:04:e3:
86:f3:86:62:01:c4:86:a9:c6:33:da:02:dd:c4:a4:
e7:65:a2:7d:bd:7f:d2:38:e3:4b:ca:88:4d:12:b7:
4c:f6:a1:a2:23:27:73:6c:3e:40:1d:d5:b9:ca:29:
97:c4:fe:e7:a6:cd:e6:d6:cf:34:3d:cd:e3:c2:73:
0f:36:51:b5:53:ff:f5:58:8a:e6:51:2e:75:4e:0c:
4a:05:28:8d:f4:92:9f:0a:b3:a0:99:e2:70:44:bc:
a7:b8:8f:30:0c:89:c7:3b:77:95:a3:c8:16:ef:d7:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:52:31:D3:0E:A4:4C:82:C8:33:A6:32:A3:E4:E2:40:0A:F6:2E
X509v3 Authority Key Identifier:
keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2e:8a:0b:eb:db:40:9c:8c:fa:8f:cb:af:b2:1b:34:19:84:
8d:7e:42:8c:0e:1b:ec:e1:09:87:2e:b9:f1:67:fb:7e:0c:c5:
40:de:04:03:9f:84:a5:3a:7c:1d:a8:97:7a:98:f9:fb:34:7a:
21:92:cc:99:35:04:c9:d5:c8:fc:45:e2:8f:28:37:20:43:2e:
67:01:c1:17:28:0e:23:1a:3e:98:2d:92:9a:bd:54:35:2e:32:
20:6d:3a:6e:6b:de:d8:4a:11:8e:4f:c0:15:ba:50:df:17:67:
50:62:62:ec:e7:b8:25:1c:a8:ab:90:f4:44:22:b2:2a:32:57:
fa:03:b4:85:b2:88:e7:d0:76:1c:f3:27:e2:02:d5:47:a2:cc:
e8:c9:d2:93:44:31:a9:34:47:63:ac:ae:4f:67:c1:b1:77:de:
09:4b:cb:ff:9c:0d:91:c0:56:7e:63:12:e4:97:1d:d4:a6:ca:
82:d9:24:bb:6b:8c:11:a4:df:28:28:04:c3:f1:e8:af:f1:60:
69:14:5a:87:63:f6:51:f1:28:46:8f:c1:ae:37:cf:b0:ce:e8:
ce:1b:48:d2:2d:b8:7d:88:19:fe:cf:db:c1:2d:5b:54:89:15:
df:63:c5:55:9f:17:b0:eb:56:1a:5c:0e:92:3c:bc:de:6d:65:
24:4d:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:38 2026 by rpki-client