Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: 3fdtp8sYGdmqJ0uQijy3/kGUGVqIXCMKSK7JpndDpQQ=
Subject key identifier: 5D:D3:4D:0A:C6:37:97:AE:A6:9F:9C:0A:48:A9:BA:3D:31:0E:6A:F1
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01A17D05B7E4C3D90EB1859D8558ED80292F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 11:01:29 +0000
Manifest this update: Tue 27 Oct 2026 11:01:29 +0000
Manifest next update: Wed 28 Oct 2026 11:01:29 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: hlWxIOboocx47bxSqBa4faVI67/E9jnN9IuMKl8EDWE=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:b7:e4:c3:d9:0e:b1:85:9d:85:58:ed:80:29:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Oct 27 11:01:29 2026 GMT
Not After : Oct 28 11:01:29 2026 GMT
Subject: CN=5dd34d0ac63797aea69f9c0a48a9ba3d310e6af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:a4:be:03:4f:90:90:9a:9a:f3:7c:e4:f7:
1e:d6:ff:78:4a:33:de:93:51:ae:f0:0e:c2:9f:cf:
57:0e:64:3a:a6:0d:b8:8a:b3:b0:6c:40:5f:06:ec:
60:11:19:62:c1:db:cc:76:f6:e2:9c:7b:8b:78:ef:
5e:9c:e9:0b:16:40:cb:44:57:d1:70:a7:70:7e:e3:
1a:ff:1f:33:e2:64:5d:6a:cb:76:17:79:1f:f8:54:
e7:5b:69:c4:9d:13:0f:16:99:7e:23:37:bb:5e:68:
17:8d:f4:df:d9:26:eb:62:c3:c1:6b:43:45:40:c0:
d5:24:84:a1:33:e4:6f:cc:1f:38:3a:67:d8:cc:cb:
d7:3e:41:a6:9f:1f:ea:14:3a:58:3b:ed:e6:7a:2a:
fe:4f:d7:04:84:a7:78:3c:73:3f:9a:3a:78:df:69:
c6:cb:3c:d4:55:67:63:bf:cf:0f:9a:a7:db:f4:52:
3e:a1:37:11:dd:ff:62:f9:c2:64:ff:1c:fa:de:3f:
2e:94:9d:1b:eb:0f:61:5a:f1:9c:42:d0:4c:ee:c3:
70:91:98:49:31:37:1e:91:68:d9:3d:69:5a:51:14:
e9:8f:28:58:53:83:e6:0c:10:a8:d5:93:d2:da:e8:
b2:f6:e2:90:94:17:b6:f2:fa:ef:10:0e:bd:34:2b:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:4D:0A:C6:37:97:AE:A6:9F:9C:0A:48:A9:BA:3D:31:0E:6A:F1
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d9:ee:7d:67:a4:34:13:f3:ab:02:75:5c:e5:9a:99:f3:1f:
69:03:38:6e:82:a6:55:28:06:52:0c:ad:30:49:6e:28:5e:8e:
0d:14:af:a8:28:11:41:0b:f2:79:67:d3:9d:49:6e:b5:54:2a:
eb:62:04:8a:d3:5b:01:9d:20:11:f2:f4:89:be:f3:57:53:ae:
03:58:52:b2:a3:6a:89:8a:e6:80:ee:27:d0:47:88:10:60:df:
a8:76:89:15:58:bb:92:be:bb:14:aa:1c:a6:80:a2:65:b2:ba:
00:31:d6:9d:02:45:1b:a3:e8:e5:64:8e:3b:d8:7a:3f:91:77:
bd:1b:63:0e:7b:1d:0f:a1:4a:ec:22:61:1a:3e:ac:db:54:32:
cd:32:8b:4c:ff:03:0d:7a:0b:e6:ce:5b:a9:a2:c2:3f:b4:77:
4f:ab:05:67:37:3c:ba:f7:37:48:e6:54:5c:4a:1a:22:1c:43:
86:ef:5a:4f:3a:5e:40:0d:6e:6e:ec:00:4b:85:30:ea:4d:3a:
b1:75:94:40:b0:5b:7f:38:e3:90:46:59:8d:32:ab:c9:60:24:
e7:f9:5f:70:97:88:06:7c:e1:24:0b:32:d6:df:37:99:b1:ca:
eb:db:90:52:4b:53:36:3b:e9:2e:e9:62:c1:57:cd:79:b4:14:
c9:48:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:23 2026 by rpki-client