Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: AFnGNwYXuylTlQODw+GKW30hebYLDUQ7ac21wuV99l0=
Subject key identifier: 45:2C:98:76:A0:43:C4:36:27:53:93:CD:36:F3:E9:5B:3C:8F:5E:FA
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 01A17E18548743BEE4D3202B03C113EE1AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 07A9
Signing time: Tue 27 Oct 2026 16:01:25 +0000
Manifest this update: Tue 27 Oct 2026 16:01:25 +0000
Manifest next update: Wed 28 Oct 2026 16:01:25 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: PO04IhQC/zw3zJU1wOCazuPSyuG6DHLA1TFosN9bo5w=)
2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:54:87:43:be:e4:d3:20:2b:03:c1:13:ee:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Oct 27 16:01:25 2026 GMT
Not After : Oct 28 16:01:25 2026 GMT
Subject: CN=452c9876a043c436275393cd36f3e95b3c8f5efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:c5:43:6d:da:0d:f5:ba:b6:5c:49:ca:d0:
f3:66:db:42:4d:c1:2d:df:22:31:88:7f:74:65:56:
00:c8:c8:7c:09:1d:c6:02:4e:cb:cd:4b:0f:43:ca:
4d:0a:56:01:6d:ab:28:b9:d2:6e:a4:8a:47:c8:f4:
20:fc:16:fd:ee:be:69:7b:67:2d:b8:8f:e8:7a:b6:
4c:53:a2:5e:65:ff:ec:9f:be:f8:c1:ad:ff:25:19:
7a:bb:2e:5b:66:49:8a:fe:20:28:d3:2d:d7:75:9a:
23:3f:67:89:26:b4:bb:e3:b8:9c:59:c9:a7:f5:18:
00:19:32:76:83:42:0a:59:3f:e8:f9:22:4c:77:ea:
bd:48:f2:f1:07:1e:fe:82:93:ab:aa:9a:cb:ba:70:
6b:cd:51:32:7f:b2:85:3f:a5:15:a8:8a:ad:84:29:
e5:aa:7c:11:84:2a:8f:df:d8:97:05:53:e1:da:89:
a0:ea:75:c5:00:29:f0:ee:35:93:d7:3e:99:12:67:
cb:05:f4:22:50:3c:c1:26:63:1d:11:72:87:10:2c:
9c:3d:af:9a:ec:d8:09:0c:23:2e:56:6c:67:09:49:
c8:17:e4:ae:03:ae:b0:42:c2:e2:f6:3e:ba:36:c7:
ab:05:df:6f:ab:64:0c:b2:d4:73:e6:05:26:1f:b1:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:98:76:A0:43:C4:36:27:53:93:CD:36:F3:E9:5B:3C:8F:5E:FA
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fd:34:a1:e0:f9:5d:f1:ad:f0:21:d2:aa:03:2d:ca:72:87:
88:55:6f:00:a2:1d:17:a2:5b:4d:8f:8a:55:41:1e:a8:87:81:
56:a0:7b:2a:83:6b:38:4a:1d:f2:71:56:50:cf:ce:6f:3c:dc:
9b:f9:a7:6f:57:83:9c:92:60:50:7a:3d:c5:44:23:0a:0b:47:
19:7e:53:7e:b7:e0:69:df:d7:cf:a2:ae:71:36:4f:15:f4:86:
3d:04:87:dd:ef:fb:b0:20:3e:56:6c:c3:66:6d:bd:1d:6f:71:
3d:fc:79:7b:4e:1c:74:f3:61:4b:06:b8:b6:04:5c:50:14:b7:
b6:08:52:ef:89:19:3a:3c:26:6a:ef:02:7b:df:9b:92:63:7f:
12:33:ba:55:02:e8:e5:50:6a:67:92:ad:19:03:59:9a:96:49:
4d:f0:5c:ec:cb:2f:cf:cf:7e:4f:ff:87:0d:3a:16:cf:9d:d2:
5e:f3:3f:8e:64:9d:64:a7:71:ef:62:1d:b1:7c:94:d1:8c:9d:
fd:fb:a2:12:e2:16:7a:04:f2:f6:33:42:df:ce:79:18:fe:64:
72:2e:b1:77:28:68:15:6c:45:cc:4b:9b:64:80:d3:95:f6:07:
7f:16:06:f1:44:f6:0d:9f:a1:e0:e8:1f:fb:36:46:c4:74:a8:
09:6f:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:49:38 2026 by rpki-client