Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: e+y+N18pvGNgjtH0pWTO8BJP/MSlOdPQikYykNjGnrg=
Subject key identifier: 38:F3:14:32:2D:56:E5:E4:3C:2A:2D:4E:5B:37:FA:6B:1D:6C:6C:59
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 01A0CB22DE7FB9A36DB90431C630E72EF615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0F8B
Signing time: Tue 22 Sep 2026 22:00:55 +0000
Manifest this update: Tue 22 Sep 2026 22:00:55 +0000
Manifest next update: Wed 23 Sep 2026 22:00:55 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: SBawdGMTECs1WydMHITrLzDp3yr/kAZlamu+AkOveOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:de:7f:b9:a3:6d:b9:04:31:c6:30:e7:2e:f6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Sep 22 22:00:55 2026 GMT
Not After : Sep 23 22:00:55 2026 GMT
Subject: CN=38f314322d56e5e43c2a2d4e5b37fa6b1d6c6c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:50:ec:30:72:bb:aa:78:7a:c2:1b:1e:aa:
c7:fe:bd:81:b7:72:b2:6f:5d:42:f7:2e:c5:14:25:
05:31:38:98:42:7c:79:05:7f:35:82:f2:ba:9f:4d:
cd:34:0e:43:4f:58:db:5d:6f:0f:90:6b:fa:dd:a7:
2d:b6:d5:cd:3b:33:bf:81:ed:41:e0:b1:73:93:fe:
f6:21:f5:ee:d3:b9:0c:32:0f:23:c3:14:17:ae:7a:
63:4c:ac:cc:8e:9d:32:9b:15:25:c9:83:08:a5:62:
5e:7e:52:ec:68:29:0c:01:42:a7:d4:51:db:03:4b:
78:6b:dd:63:6e:68:61:a6:bd:da:40:00:fe:74:5f:
6e:37:02:ce:e6:10:33:aa:38:f9:d2:7b:3e:f7:87:
46:d0:34:bf:92:e6:1b:7f:f9:eb:7e:b0:71:6b:4f:
dd:92:49:fa:49:7b:62:af:40:dc:76:cb:99:ee:37:
ee:e7:0d:80:5c:2b:d3:ed:61:99:92:17:3b:1d:b9:
bb:ae:63:08:e6:41:7d:91:ea:b6:c1:76:f0:58:47:
a3:9b:a2:8b:41:72:8e:87:f3:1b:e6:ae:12:06:c0:
e2:be:e8:49:a6:f0:43:aa:25:ea:96:3a:1d:5b:e2:
54:31:9c:38:30:94:2f:47:4b:2e:6d:90:da:63:5b:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:14:32:2D:56:E5:E4:3C:2A:2D:4E:5B:37:FA:6B:1D:6C:6C:59
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:25:a2:cd:5d:13:0d:47:5e:f9:5b:ba:92:8e:78:f4:5c:29:
bd:10:c3:1d:31:cc:cb:b6:cc:95:4a:02:90:72:bb:b2:25:a7:
8f:57:eb:ce:e9:d0:17:61:fe:de:2a:55:e3:7a:b8:93:56:ae:
5b:3c:3a:a4:d9:7f:e9:b4:25:97:33:5a:c5:ba:48:fe:6b:51:
64:f8:b3:fd:49:b7:2e:06:d4:67:77:6e:a1:30:a1:28:75:7b:
4b:f3:7e:54:97:53:8d:93:21:95:33:45:d7:4c:a6:66:31:0d:
e8:65:29:f5:c4:8e:25:d5:b5:b3:3a:98:f8:08:93:9f:f8:86:
0b:99:15:22:f6:ca:8c:12:bf:a8:b7:d4:85:dc:6a:26:a3:cc:
15:a8:bb:a9:53:d3:e2:07:c4:d0:7f:64:d7:2a:0e:2c:98:de:
38:2b:a3:c8:4d:c1:72:d7:f5:84:15:ac:3c:58:4a:ac:07:63:
55:0d:65:59:88:c5:92:5b:4b:69:31:12:94:da:c4:3c:11:b1:
08:40:ae:e3:cf:9f:e6:f1:5b:6d:b9:f6:5f:7b:4b:0d:52:f1:
00:3b:0f:46:38:f0:c7:89:de:78:76:a2:cb:72:fb:84:be:89:
29:04:18:b9:77:5f:a1:f4:00:70:6b:39:35:2e:38:10:49:08:
98:5f:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:58:08 2026 by rpki-client