
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File: 5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier: g0gEMCagVOobinxRqXyuYGQD6Bdn2wPdbvfSqqTpHK8=
Subject key identifier: 61:57:68:92:41:C9:4C:A7:2A:7E:AE:17:31:BF:6E:C0:83:7B:9E:8F
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer: /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial: 01A147600EBCC93DCC4AF3D3D2E5A2B5589F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number: 1AA6
Signing time: Sat 17 Oct 2026 01:00:39 +0000
Manifest this update: Sat 17 Oct 2026 01:00:39 +0000
Manifest next update: Sun 18 Oct 2026 01:00:39 +0000
Files and hashes: 1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: ruXU62dpwj9MSXVL0qWwtoGWDju3DFTYWhcXXppPnZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:0e:bc:c9:3d:cc:4a:f3:d3:d2:e5:a2:b5:58:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Validity
Not Before: Oct 17 01:00:39 2026 GMT
Not After : Oct 18 01:00:39 2026 GMT
Subject: CN=6157689241c94ca72a7eae1731bf6ec0837b9e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:1c:b4:54:8c:fb:eb:2f:a5:f5:d2:f7:75:
92:1e:7c:1c:4a:74:8e:5f:23:c0:6f:a6:5e:ca:bf:
1b:30:5c:8e:b2:0a:d4:81:95:c5:2a:57:ac:ab:3f:
cd:82:d0:e2:3c:ff:94:e1:aa:d0:84:8b:d1:7a:9a:
d2:34:4c:b8:3c:ed:09:30:5c:4b:c6:6f:27:25:a7:
d7:c6:a4:6d:43:fd:e4:c5:b9:00:ab:4b:49:8f:4c:
e5:07:4c:f2:dc:47:bf:27:72:36:3a:18:1c:9c:5e:
a0:f8:69:b3:e9:16:ea:27:7a:dd:47:20:ca:1d:00:
26:4e:44:81:0e:1f:c3:23:a3:39:95:0a:ec:e7:0a:
c9:f0:00:9a:ca:e6:4c:56:12:3b:4c:07:bc:67:10:
b6:6b:99:a6:f4:01:ab:45:a0:82:c6:ed:2e:bb:62:
d3:8a:2c:74:e9:9f:ac:70:76:cd:89:9e:e2:d4:13:
17:6b:9b:03:fb:60:9c:31:31:13:1b:c2:98:dd:2a:
0c:37:ae:ab:07:18:95:45:f9:af:54:e7:75:2d:39:
25:fa:2d:2f:29:48:0a:85:e7:ce:d0:be:cc:1d:7a:
4a:f2:52:2c:50:8b:9d:74:98:78:bb:a5:f8:f4:30:
95:8b:ce:00:c0:23:51:38:03:ae:8a:76:74:92:0c:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:57:68:92:41:C9:4C:A7:2A:7E:AE:17:31:BF:6E:C0:83:7B:9E:8F
X509v3 Authority Key Identifier:
keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bf:c1:d9:ee:f6:dd:2f:85:1b:d1:45:12:6f:84:c7:16:79:
a6:af:85:b0:14:61:1e:28:ac:0b:13:03:71:1b:90:3f:49:04:
a7:bf:3d:b2:26:13:f0:73:ae:14:db:25:15:fc:ad:02:f3:e9:
b7:bd:ec:b9:92:87:0a:0c:1d:46:4a:55:e0:5c:66:cc:a8:80:
42:49:4e:2a:1f:a8:1e:ca:70:ff:d6:8e:36:d7:73:93:ba:87:
ba:3e:ec:fd:18:9c:d3:0e:9d:f4:eb:cd:8d:7e:d6:c6:94:7e:
da:39:d7:9a:2e:56:f9:b6:88:aa:7d:bb:0a:d3:6a:57:f9:6a:
13:06:1a:10:2d:82:0d:f4:c7:90:33:01:45:62:5a:74:5e:54:
60:18:a5:ab:ac:84:26:50:24:37:b3:40:ff:19:6b:6c:b3:f6:
78:a0:f3:95:29:8b:70:01:76:8f:95:82:3a:02:5a:9d:20:37:
c0:65:48:4c:ec:2a:a0:76:05:6e:0b:4b:5c:53:38:5e:45:e8:
ca:f4:a0:47:df:91:90:0f:04:07:cd:d1:68:ad:66:bb:9c:15:
3e:77:ea:5b:bf:15:fb:85:20:74:3d:a1:70:40:5c:fc:cd:bb:
44:6c:d9:65:3a:90:24:7e:0c:8b:e0:28:96:5a:87:db:d6:c4:
3a:42:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:04 2026 by rpki-client