Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: XHLrA3qi21h5kJxG8/YW3eiqHtReFkLUdlzLU1eTDDA=
Subject key identifier: 3E:4C:40:CC:02:77:71:BE:7F:1F:D1:4C:A2:64:6B:6A:F2:DF:F0:4E
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 01A0C66B06897A440FEE3E2575325F841B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0AF2
Signing time: Tue 22 Sep 2026 00:01:37 +0000
Manifest this update: Tue 22 Sep 2026 00:01:37 +0000
Manifest next update: Wed 23 Sep 2026 00:01:37 +0000
Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: oiXryGOYijvCJno/ih/fPo9C9nTBsw8kGAVUjB24hzw=)
2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:06:89:7a:44:0f:ee:3e:25:75:32:5f:84:1b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Sep 22 00:01:37 2026 GMT
Not After : Sep 23 00:01:37 2026 GMT
Subject: CN=3e4c40cc027771be7f1fd14ca2646b6af2dff04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:32:11:5d:f2:de:25:e9:8e:15:a7:43:1a:
41:83:95:37:5f:34:9b:32:cc:13:97:58:33:c6:7d:
27:8d:5e:75:ab:44:6f:cc:73:9a:fd:0c:5c:bb:74:
48:44:2b:c3:3f:b0:5c:2c:d4:dc:a8:5e:36:fa:b4:
dc:cb:45:13:4c:c4:80:ce:64:c8:78:c5:0b:9a:93:
0a:a6:b0:d2:66:f8:70:74:af:ae:84:13:06:b6:aa:
6e:72:8c:bd:30:ac:ed:36:e4:02:bc:d1:8b:72:00:
32:b6:e8:18:c8:50:c3:19:03:75:ba:09:34:cf:9b:
cf:60:ca:85:53:8e:3d:4d:fb:2f:01:89:66:6f:30:
bd:80:e7:f5:72:94:49:ff:75:70:12:b7:03:c7:fa:
d0:09:cb:0e:d7:d0:6f:36:13:25:b4:21:03:b5:7e:
1f:e6:95:a0:36:0b:5e:22:91:d6:6d:85:2e:cd:c9:
1d:3c:71:75:6e:7c:f5:ab:e4:3a:32:10:2f:bf:82:
48:2a:f6:2d:56:c8:18:d9:1d:0f:8d:33:7e:f0:71:
ec:40:4a:db:64:18:2d:56:94:d2:7f:69:bf:3e:de:
53:a9:d6:ad:68:fb:a2:f8:6f:9d:17:b0:a9:90:4d:
e9:80:fb:52:4a:34:53:71:57:ee:9a:13:31:f1:60:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:40:CC:02:77:71:BE:7F:1F:D1:4C:A2:64:6B:6A:F2:DF:F0:4E
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a0:11:ff:36:0e:cf:4a:92:23:1d:b2:41:45:74:6a:43:ce:
3d:84:e0:5e:53:bc:f6:1f:3f:bd:60:c1:27:91:f4:1f:73:e5:
4b:41:e3:c9:ed:48:18:42:f1:f2:08:c2:c5:d6:a0:6b:c8:38:
6e:44:d5:47:bb:23:d1:ef:c2:76:53:a7:44:67:c5:3d:23:80:
f6:24:ac:fa:6a:5c:6d:e1:6a:5b:83:e5:3f:d0:9a:af:59:f0:
7b:63:6c:f5:e6:b1:73:6a:01:7e:00:2f:d0:f8:97:eb:02:7b:
24:3d:58:94:17:b3:78:5d:9a:87:05:95:37:87:fc:ec:68:f1:
58:0b:50:a7:24:1b:99:b5:7c:4f:17:15:da:22:99:c3:2a:dc:
d3:e9:e7:a5:72:fe:7b:30:01:d9:4d:3e:75:64:cd:8f:bb:73:
c2:18:58:e6:2a:3b:e2:09:e4:dd:8a:44:a7:68:6e:ea:85:26:
fa:40:90:cb:ec:36:ec:50:a0:50:76:b6:d6:90:95:c0:46:1f:
9f:1f:25:74:62:e4:8e:ec:3b:d3:e1:c8:0a:6f:5f:9f:b2:a9:
b9:95:4a:5a:98:8f:7c:2e:85:41:1f:cc:97:82:83:29:30:90:
16:c1:5f:64:96:b4:2d:d5:3d:95:20:52:d1:c0:5a:c1:eb:c5:
0b:80:4c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:55:09 2026 by rpki-client