Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
File: 5YknkmnMNjptouYK7T8ahQMQFp8.mft (raw, json)
Hash identifier: eqtkPfKlHAAs/DPX9U9x4NxyJGHib5wtu6Zo3/gOCts=
Subject key identifier: 15:62:C1:60:24:A3:F0:65:1C:FD:02:84:85:64:DE:D4:11:09:25:38
Authority key identifier: E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
Certificate issuer: /CN=e589279269cc363a6da2e60aed3f1a850310169f
Certificate serial: 01A0D8DF6D73BAEADAC8C24A94B5206F6407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
Manifest number: 01C1
Signing time: Fri 25 Sep 2026 14:01:56 +0000
Manifest this update: Fri 25 Sep 2026 14:01:56 +0000
Manifest next update: Sat 26 Sep 2026 14:01:56 +0000
Files and hashes: 1: 5YknkmnMNjptouYK7T8ahQMQFp8.crl (hash: WqWCYPyugy9KbHfdDyupfnOIpdQyjgvyG5AP2rI4t5M=)
2: JvuP52u49nS5V6IMZISRawwAmk0.roa (hash: gX2rm16o1te3H0IUA5THl3W4lAqtMPAhLGlk7BuJ2hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:6d:73:ba:ea:da:c8:c2:4a:94:b5:20:6f:64:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e589279269cc363a6da2e60aed3f1a850310169f
Validity
Not Before: Sep 25 14:01:56 2026 GMT
Not After : Sep 26 14:01:56 2026 GMT
Subject: CN=1562c16024a3f0651cfd02848564ded411092538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:cb:aa:b1:e3:dc:b0:2c:fd:66:d7:06:6f:
c9:b5:de:c6:f2:2e:27:7d:94:ae:78:4f:ed:c4:e2:
67:21:a9:3b:ad:75:ab:1b:f3:a8:b5:1f:f7:bd:71:
91:a3:4b:84:42:46:88:2b:e8:ce:7c:c8:e9:d6:6e:
61:f5:ff:c8:36:fc:cb:7a:81:b0:aa:a4:ff:85:f9:
db:dc:93:82:6a:ab:b3:f2:0e:0f:4e:c9:ca:39:0d:
26:d9:ef:89:7c:89:35:bf:37:15:22:e9:4f:5c:02:
ff:fb:d3:ee:4a:e9:c4:a8:96:d8:23:03:ce:c5:2c:
a6:40:4d:bb:97:c6:90:20:36:bd:35:df:cb:0a:5f:
6c:43:5b:b6:34:ae:79:6e:42:6a:37:f0:db:78:a2:
88:25:7b:18:3f:de:f7:1b:e9:8e:ab:63:6f:1d:b2:
f7:96:07:2b:25:81:88:67:a5:ce:d0:96:fb:19:f4:
f1:6f:3f:ad:17:89:28:61:8e:ef:90:1b:bf:6b:c0:
a6:af:1b:60:ec:68:7e:8f:64:ba:6d:e0:a4:5c:7b:
32:fb:94:96:0d:52:6d:cf:5a:4a:e3:e0:cc:57:62:
6b:08:e2:ef:2e:26:9f:91:09:ba:6d:8c:6f:96:00:
d2:34:e1:32:90:76:07:10:82:29:49:2b:f8:43:f3:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:C1:60:24:A3:F0:65:1C:FD:02:84:85:64:DE:D4:11:09:25:38
X509v3 Authority Key Identifier:
keyid:E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:6a:f3:0b:de:70:62:2b:d8:ee:85:dc:0b:9a:8c:ec:c7:
74:29:d4:fa:2a:f2:45:0c:41:23:81:56:4a:19:1b:11:14:b0:
ff:6b:39:23:3d:c6:1f:86:76:a9:58:41:c6:fd:10:16:9f:01:
b0:41:7c:86:c3:db:08:aa:a8:05:00:5e:44:f2:ff:f3:25:20:
a6:3e:70:e0:f4:3b:64:5d:3c:2b:2e:ea:b8:71:d2:87:09:98:
46:20:36:a6:eb:6d:0c:27:34:6c:2c:da:79:b7:95:97:59:29:
6f:89:b2:40:25:a3:aa:5f:46:b0:b2:05:8f:a1:67:af:87:d5:
c1:86:d1:cb:3d:3d:7d:45:8b:c5:e5:58:a2:8c:da:51:f2:e3:
e8:78:e4:c5:64:ff:9d:91:55:c5:a4:c2:dd:dc:47:ad:ce:7b:
f8:94:d6:d6:d7:94:f6:9f:db:b3:50:bb:ad:08:1b:63:54:9a:
95:90:3c:41:f9:c4:0d:c5:fc:ef:a0:05:34:75:e6:02:20:03:
a4:2b:ce:16:ab:9b:0b:a9:a6:ae:e5:56:85:4a:69:d1:58:93:
25:94:03:cb:38:08:97:e0:78:8d:13:aa:09:01:47:28:92:c2:
f6:0f:de:4a:35:d1:9d:2e:98:a1:dc:b7:a1:84:6f:9d:71:a5:
96:b2:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:52:32 2026 by rpki-client