Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: IDX14WImpK8KKpMNhwsW6UM/zCVEnsilp/NeGqmBYVQ=
Subject key identifier: 56:05:44:99:40:C8:80:94:C4:5D:8E:66:96:A3:C5:06:D5:75:90:DA
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 01A0C5C535B14C6B76CB95BA99E273BC7D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0FA9
Signing time: Mon 21 Sep 2026 21:00:30 +0000
Manifest this update: Mon 21 Sep 2026 21:00:30 +0000
Manifest next update: Tue 22 Sep 2026 21:00:30 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: WGw6u1svUmaXsBw496wlG934c/5j3HIkr4V38r8p1I0=)
2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:35:b1:4c:6b:76:cb:95:ba:99:e2:73:bc:7d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Sep 21 21:00:30 2026 GMT
Not After : Sep 22 21:00:30 2026 GMT
Subject: CN=5605449940c88094c45d8e6696a3c506d57590da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:36:f3:03:76:b5:40:28:3e:3a:d5:80:cb:
9f:3d:db:b2:03:0c:c9:62:c3:1a:e1:72:f0:ed:5c:
0c:a1:df:5c:f4:86:84:48:5d:3f:fa:f6:b2:ef:77:
fc:7d:59:88:3c:0c:e2:75:e5:ba:cc:21:bc:f6:01:
02:2d:4b:12:90:d7:0f:c6:12:20:90:80:da:24:8d:
69:4f:5b:a5:0b:f6:38:49:da:71:43:a0:75:97:78:
6a:76:41:f7:7c:10:23:c9:1b:b0:8c:1d:49:03:36:
a0:1e:b4:2f:a9:ad:99:87:a2:d9:09:d6:67:75:89:
63:c5:f4:73:27:7b:c3:a2:91:67:99:cf:05:7a:ab:
52:9f:e7:49:eb:7e:ff:6c:a9:1b:18:41:86:3f:30:
73:0b:cf:92:f0:28:de:f3:3a:1d:99:d8:23:3b:1f:
19:14:6b:7b:fc:ce:21:63:7c:a1:ef:ce:43:69:be:
e1:5e:49:22:53:66:2b:3f:2f:53:23:9b:82:8c:35:
60:42:28:fd:df:0c:8c:c3:95:31:f6:3b:71:8a:47:
d5:15:e6:3d:8e:04:4c:8a:cd:b1:69:85:5a:1c:14:
1c:be:97:9b:9b:57:a0:26:0e:12:3a:92:02:42:f6:
44:45:a8:98:20:8f:b3:d4:0d:c9:b8:8b:f0:8a:a0:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:44:99:40:C8:80:94:C4:5D:8E:66:96:A3:C5:06:D5:75:90:DA
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:52:c3:00:28:f7:e9:58:3a:79:64:fb:77:08:7a:df:f9:e6:
59:23:fb:47:15:81:53:5f:91:0c:1d:00:46:1e:90:78:48:28:
fa:9d:e8:df:09:cf:81:87:5f:0e:11:87:22:31:9e:ad:80:7e:
12:71:73:1e:7e:82:71:a4:34:47:d9:ff:08:f4:28:67:72:e0:
59:b7:9d:91:95:7a:0c:e3:7d:4f:09:10:7c:69:74:19:96:b0:
04:e9:70:1d:23:62:14:c2:c0:94:da:79:3f:f1:d8:4c:5e:dc:
c9:d6:f9:84:8d:4a:c8:d3:24:72:6f:ba:d3:fd:d1:0d:40:3c:
a9:20:f8:55:6a:39:e2:54:91:19:75:e3:6c:02:fe:ad:57:91:
26:6b:bd:dc:89:7a:97:46:0f:bf:c2:6b:ac:49:fe:cf:29:46:
3b:c5:88:cd:0f:43:e6:1a:aa:8c:a6:6b:48:34:a6:5f:68:da:
de:67:70:2c:43:74:32:07:09:50:32:b1:d7:68:f1:d9:14:dc:
60:8a:e8:f1:44:f2:1d:88:6b:7c:c4:16:2c:01:bd:29:9c:70:
fd:81:91:e6:d9:fa:a0:99:f6:73:31:9f:a8:60:81:bf:2e:f1:
a3:cc:bb:f1:22:c1:90:fe:20:55:7e:5b:f2:d4:5b:21:64:6c:
b2:25:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:44:37 2026 by rpki-client