Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: vntSpccIGQD/9w7az4iCugTG8OmlKagzbDcRIFgOUKI=
Subject key identifier: 0F:A8:2B:8D:25:27:2D:A9:93:04:C8:FD:B1:7A:EF:FB:FD:0D:9F:5C
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 01A14E752903AE9E4EECC73F29D553DB004E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1AAC
Signing time: Sun 18 Oct 2026 10:01:03 +0000
Manifest this update: Sun 18 Oct 2026 10:01:03 +0000
Manifest next update: Mon 19 Oct 2026 10:01:03 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: V0FIQOPXGvW35yz4ppyAPDIKDIfXH3Cn6zruqza/bSI=)
2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:75:29:03:ae:9e:4e:ec:c7:3f:29:d5:53:db:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Oct 18 10:01:03 2026 GMT
Not After : Oct 19 10:01:03 2026 GMT
Subject: CN=0fa82b8d25272da99304c8fdb17aeffbfd0d9f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ea:3f:6f:b4:23:a2:66:d9:0a:2e:f1:f4:b9:
51:4b:90:56:ee:a5:0a:36:e9:83:0e:b7:72:70:29:
12:75:ac:72:cb:08:d1:35:07:e7:a8:9c:a4:39:38:
53:9d:38:91:6f:30:e8:eb:0b:c6:17:68:ac:ee:14:
ab:92:d2:b1:e0:5b:50:4d:d5:c9:fb:26:ee:e5:22:
50:82:d7:4f:b7:9b:6a:63:ea:e5:eb:e0:c1:ba:93:
c1:74:be:5d:5e:e2:37:a5:36:f7:cd:ad:5f:8e:5e:
f5:16:2e:3c:53:6c:62:f6:31:3e:42:76:30:4f:ff:
48:22:7a:e2:d5:03:aa:b1:af:89:52:3d:fc:e6:3b:
64:7b:3c:dc:36:a8:4d:b4:ab:eb:30:b3:5e:66:be:
12:2f:8e:3c:62:c2:52:30:4c:47:26:66:1e:05:44:
08:72:13:db:73:6c:57:82:1b:45:52:28:92:c9:c3:
fa:e8:16:ba:ef:9f:fc:b7:3d:39:c0:c1:ae:ca:78:
c1:3d:32:c6:12:65:63:44:d8:8a:ec:60:d7:bf:a6:
bc:b1:06:ec:13:23:32:d7:65:75:98:80:e1:9e:33:
fa:fd:68:64:23:b5:40:49:cb:02:ea:f1:56:8a:6e:
62:71:1b:4d:84:58:36:81:22:7a:70:52:02:46:fd:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:2B:8D:25:27:2D:A9:93:04:C8:FD:B1:7A:EF:FB:FD:0D:9F:5C
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:da:e9:2f:d0:be:92:83:8e:64:2a:c8:59:ac:e0:09:d0:
a7:c3:4d:79:14:64:19:cb:d6:c9:a8:29:4b:0a:9e:7d:2b:48:
8d:d1:ab:7e:4e:57:07:f0:55:5a:c7:87:fc:54:e5:c6:30:d1:
4c:7d:ac:bc:63:90:ca:fa:95:86:00:1d:22:3a:8b:4c:bf:af:
ba:b5:ce:c9:a2:0a:2e:5e:f2:2f:c5:13:1c:b1:a0:0c:d2:c8:
a4:7d:ef:7a:da:ce:49:1f:c0:93:77:6d:e0:fc:a8:50:a2:8e:
d1:0f:2f:7b:ca:76:c8:bd:f3:32:83:36:3d:bd:e8:d0:2b:17:
f7:b1:cb:d7:7d:f6:0c:85:02:93:55:ee:7f:a3:70:83:26:07:
ee:eb:d4:d0:57:e9:04:c8:df:4f:4f:b7:8d:49:fb:4b:cc:34:
50:c9:6f:8f:97:75:b1:23:c6:3b:03:b6:b4:98:fe:ff:1a:1a:
99:4a:f9:f4:6f:be:3d:a3:fc:d8:90:e4:fb:75:97:b9:dc:46:
1d:3f:68:de:1d:19:a5:81:c6:21:b7:8e:17:f9:b2:bd:3d:d5:
d2:fe:15:aa:0d:bf:da:e7:a9:d6:5e:ac:95:47:fa:f6:5e:58:
75:52:d3:51:a9:7c:67:85:f1:d6:b2:fc:f4:58:cf:ca:00:3d:
59:6a:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:51:01 2026 by rpki-client