Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: zCdhA8LMggWJu+2LChE8ZjqHPmkRRgKoesprdoS8l9s=
Subject key identifier: 35:15:C9:C5:C2:88:DD:87:86:D6:2B:FE:8F:28:04:C7:FF:D9:33:4C
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 01A0C1B1616C37770DD0CB1C1FDC7DBF6848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 02:00:22 +0000
Manifest this update: Mon 21 Sep 2026 02:00:22 +0000
Manifest next update: Tue 22 Sep 2026 02:00:22 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: qY7LFuGQkFBzMQ6Dkck2ty3C8nita6tx21v+JOJsTng=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:61:6c:37:77:0d:d0:cb:1c:1f:dc:7d:bf:68:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Sep 21 02:00:22 2026 GMT
Not After : Sep 22 02:00:22 2026 GMT
Subject: CN=3515c9c5c288dd8786d62bfe8f2804c7ffd9334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:10:dd:29:cc:01:d2:1a:05:7d:05:43:9e:
e6:61:a4:da:17:fc:a7:78:69:97:8a:83:35:36:79:
68:09:a6:ce:a9:5d:6f:44:9d:8c:b5:94:d8:e3:a4:
93:00:de:48:cb:b4:87:fc:d2:5c:4c:30:26:16:88:
c8:50:20:f4:ce:af:ac:c1:72:ec:3c:2c:d8:e5:8e:
fe:31:87:78:b9:e1:fc:1f:8f:95:2f:ea:67:bd:3f:
3c:ee:04:23:98:0f:a7:0a:82:ee:7b:b5:15:84:fd:
f3:71:af:51:bb:ba:12:d3:33:fd:d2:a0:64:e9:0d:
eb:39:65:b0:18:73:49:5f:52:8f:41:1b:8a:b9:b4:
8c:1b:37:e8:52:8b:f1:86:fb:d4:09:56:bb:30:43:
6d:85:f6:5d:a1:17:2f:4f:9c:58:a6:b2:f1:e2:a8:
2f:b1:84:17:33:eb:88:3b:db:96:ee:04:28:4e:03:
74:44:d8:62:11:1b:3c:a2:a0:3f:ed:75:0b:65:39:
d8:d7:1d:93:de:f6:23:01:05:91:eb:89:9b:e2:06:
ec:65:ee:00:05:96:09:46:4c:00:46:7d:6f:d2:bf:
10:d7:4b:e6:ed:dc:7a:7c:58:9e:4c:d3:a1:65:b0:
9c:3a:9c:7d:19:46:bd:3b:bf:29:6d:3e:62:28:b9:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:15:C9:C5:C2:88:DD:87:86:D6:2B:FE:8F:28:04:C7:FF:D9:33:4C
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:5a:d6:e6:c1:2e:d0:70:c4:c9:d5:96:bc:09:2e:0f:34:
2c:1e:ab:c6:e5:b1:a7:b7:73:da:94:53:fd:d7:00:52:30:59:
39:c5:8c:91:ab:e8:cd:62:7f:ec:43:19:e7:89:b6:c4:bb:37:
a3:07:78:38:a6:dc:38:c9:c1:8b:44:ea:bc:c7:96:5d:07:05:
cb:f7:79:da:08:12:93:fa:47:4b:44:c1:8f:ba:de:ec:02:a5:
71:10:2a:75:d9:94:ef:a3:6b:34:37:fc:70:e2:c5:81:13:2b:
da:7c:9c:9b:a7:6f:41:e4:4a:20:e6:b4:55:97:8d:6f:fb:a9:
d7:34:79:c1:12:e1:fd:2a:9f:7b:0f:95:d6:8b:a5:11:83:ce:
2d:2a:17:bd:d3:2a:9b:5a:c9:95:33:be:14:39:37:f3:06:3a:
56:07:d1:4b:d2:24:82:0f:e0:3a:68:f3:da:b4:ff:ad:a1:1c:
52:fe:e6:b6:6a:98:c4:0e:91:46:ef:50:b6:9d:69:72:b7:ec:
ec:a9:fc:65:59:ec:2d:2a:85:9b:0b:41:39:59:75:d2:6e:3f:
88:92:44:6a:10:6c:f6:ea:17:d5:c9:6d:eb:22:2d:8b:ac:85:
65:24:0b:4f:7a:ec:9d:d4:26:ef:4d:f3:3d:e8:ec:95:37:cf:
75:5c:5d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:33:38 2026 by rpki-client