Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: yaDn8SSdBh+jqExJKUSJ4A0pQ6k7Uig1ab3LuvhqBqI=
Subject key identifier: 98:A6:04:0C:08:33:EE:C2:E6:30:29:C8:49:EB:C9:59:01:A7:F4:50
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 01A13B24AE61E61A6FA80631C276884A7CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 1223
Signing time: Wed 14 Oct 2026 16:00:21 +0000
Manifest this update: Wed 14 Oct 2026 16:00:21 +0000
Manifest next update: Thu 15 Oct 2026 16:00:21 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: YBA5kVyuKaQ+TsNwR9HWElKnLkOufPVtkCQyABlhQQw=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:24:ae:61:e6:1a:6f:a8:06:31:c2:76:88:4a:7c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Oct 14 16:00:21 2026 GMT
Not After : Oct 15 16:00:21 2026 GMT
Subject: CN=98a6040c0833eec2e63029c849ebc95901a7f450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:78:42:9d:95:a0:b7:3c:e5:76:48:1d:cf:
6a:f9:cb:69:bd:87:e1:d1:46:3f:26:28:2c:45:c8:
7f:15:06:cc:81:c2:5e:c9:b5:27:dd:bc:c2:6e:77:
34:5e:bc:2d:72:c2:5c:af:de:46:de:7d:33:ea:5b:
30:7e:7c:81:dc:7e:96:f9:2b:be:bd:8f:ec:25:10:
f5:c5:d4:2c:f6:6a:c7:3e:90:41:4b:19:4e:03:f9:
bf:52:17:87:46:d3:a6:d2:77:00:80:7d:17:39:5a:
1c:16:d9:78:1b:a7:6b:ed:8c:bf:ef:16:9c:73:ff:
60:b0:bf:52:0b:94:1b:f1:b5:e9:57:4e:d7:5e:f0:
98:7e:16:0d:51:67:9d:9f:59:a6:7a:2e:a6:e6:91:
05:e9:68:08:25:f1:8e:f9:e4:1a:29:c3:30:f5:1b:
6f:80:eb:d7:8a:2d:ac:32:be:e9:38:dd:e5:ec:37:
c7:7a:7e:ee:c7:c1:83:0d:1b:22:3b:42:3e:67:c7:
d0:a1:3c:be:83:7f:fa:d9:38:12:97:0d:58:2b:82:
5d:bf:98:d4:c5:d5:49:e1:1a:6a:04:4e:b2:df:dd:
09:ba:87:fe:44:e3:a3:c4:22:1b:9d:ae:f7:63:eb:
41:1d:35:38:0f:1b:f4:2f:94:50:b0:1a:0d:fa:7b:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:04:0C:08:33:EE:C2:E6:30:29:C8:49:EB:C9:59:01:A7:F4:50
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:dd:ce:7a:94:e1:b8:95:5a:3f:a8:5c:b0:d8:64:58:c7:fe:
2b:dc:ae:ce:52:16:57:2a:52:6a:88:4e:48:10:a3:7a:c3:4a:
93:b8:f1:92:13:ec:fc:72:0f:4b:d8:e6:78:47:3e:03:dd:e1:
19:95:8b:06:90:2b:82:f4:b3:32:6b:1f:18:0f:b2:9e:8c:c2:
4e:62:d3:44:85:ab:94:be:56:7b:56:2b:fe:29:aa:d8:90:5e:
96:65:07:3e:e6:38:c3:07:6e:00:b3:8b:d5:8b:e7:7c:12:b4:
40:49:ea:03:47:39:81:88:15:74:01:59:63:2a:1b:18:ca:aa:
be:84:69:07:3a:c7:8b:08:ae:19:a6:01:d0:4d:40:22:a6:8b:
21:93:5d:fe:7f:d1:d8:bf:1d:c0:f0:6f:1d:ae:f1:20:a3:e2:
21:6a:e1:c9:cd:9f:00:1a:77:c8:03:47:ff:f0:17:ca:c0:fc:
19:34:52:71:21:fd:f7:db:60:08:07:c1:88:70:74:07:15:0d:
8c:44:23:8c:e9:88:bc:96:cd:1a:31:67:38:1f:3b:52:49:fb:
47:51:8b:de:22:35:59:b4:51:2d:37:8f:be:f1:51:83:bb:ab:
14:72:f4:31:0a:00:77:68:e2:fd:de:29:45:a2:83:e3:1e:b3:
25:08:c8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:55:13 2026 by rpki-client