Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: gL+R7T7bkLBZFEpatFldhqk32jVOwCods1yPJas8FMs=
Subject key identifier: CD:FB:A4:51:63:72:7C:B6:34:DB:95:38:E6:70:D0:3A:AE:56:D2:92
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 01A131B4136D54CBB739BFF1A4EA2FF72FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 0759
Signing time: Mon 12 Oct 2026 20:00:47 +0000
Manifest this update: Mon 12 Oct 2026 20:00:47 +0000
Manifest next update: Tue 13 Oct 2026 20:00:47 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: Ka7oC9lo68FqLzPFUz3HSAgEgyNHpEI6+361QuFECLk=)
2: VC6pU8sH53fsSXhpjxvq2spJkW8.asa (hash: eY4uxqqdpm3pkCV4oqysR7RZdD/oSeWBc0FKFASjw1g=)
3: XaMeeXQ5ysc8kABhh0l_VC0xvRQ.roa (hash: f1b46uPGTd/9X8UPdm3VptVXLZpHjki1wLcZZ1TfO/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:13:6d:54:cb:b7:39:bf:f1:a4:ea:2f:f7:2f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Oct 12 20:00:47 2026 GMT
Not After : Oct 13 20:00:47 2026 GMT
Subject: CN=cdfba45163727cb634db9538e670d03aae56d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:1d:66:bb:9c:2a:b5:5d:7a:55:c7:e6:0f:
41:32:ef:df:b1:e4:04:7f:61:40:66:1c:0a:fe:ea:
ca:fa:2a:80:c1:a4:8c:62:62:94:0f:a7:a2:b9:6c:
0b:f0:4a:16:df:47:60:e5:0f:ac:94:d7:b0:fb:9a:
b6:1f:56:a0:54:16:41:39:9f:1b:e4:ee:3e:d3:a6:
56:fe:46:ea:b8:8e:ff:43:24:cb:b0:8a:5e:e3:f5:
92:73:e8:24:12:72:38:95:2a:3e:7a:e9:47:b1:cc:
59:93:79:56:53:80:6d:73:e7:d0:2b:5d:14:8c:78:
57:2a:82:93:de:eb:03:cf:09:f5:2b:d6:b3:53:c8:
06:9f:92:98:33:a5:e9:ad:17:0c:f7:bd:e9:fa:8c:
40:12:0b:7f:20:a1:ee:95:97:52:27:a8:68:a2:8e:
68:f7:92:50:8d:dc:ad:76:13:5a:89:22:df:7d:7f:
10:9b:65:00:d5:e7:08:96:ca:9e:06:19:c8:03:a6:
d7:3d:ca:f5:86:c6:23:08:89:e0:66:56:fa:bb:e7:
71:ad:58:bb:48:61:d9:b6:a5:62:e5:a5:cd:3e:4a:
fe:a9:5b:d0:3e:3b:ee:b1:7d:f0:2f:32:70:ea:23:
bf:04:33:59:5e:0b:e1:c6:f2:fd:55:64:2b:ad:f9:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FB:A4:51:63:72:7C:B6:34:DB:95:38:E6:70:D0:3A:AE:56:D2:92
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a1:d6:c0:3a:10:b1:36:87:ef:9c:5d:5d:a7:c1:30:0d:b6:
ea:e6:fb:45:ce:79:26:7c:a9:8f:e5:42:0d:73:fc:de:b6:9a:
d5:0e:38:ee:0c:3c:3a:80:f5:f3:21:aa:07:de:d4:82:70:40:
f6:ff:8c:a4:37:f8:54:21:9a:16:ae:75:01:cc:7c:30:97:03:
a1:9e:e1:5d:eb:23:5b:07:f8:63:0b:c7:6d:f6:e2:f5:fd:46:
ff:f2:90:7c:20:f8:42:5b:c4:58:67:17:1f:d2:07:22:b2:56:
a3:7f:d7:76:e6:9f:28:df:37:7d:eb:31:cc:39:54:9e:1f:fd:
e4:46:9c:38:88:4a:76:97:e5:5d:16:85:06:b0:30:a4:49:a8:
f0:d0:56:de:03:bf:db:c9:87:7b:e1:b4:7b:48:53:32:44:d0:
47:95:44:bd:22:9c:9c:de:73:b3:9b:f1:4e:af:db:93:36:3f:
10:21:79:4c:80:da:35:cf:00:a7:2f:d2:c7:97:c2:df:48:eb:
c3:bb:02:41:39:84:1f:7f:05:93:db:c3:be:e4:24:e0:e2:24:
14:7b:dc:53:69:e4:18:d0:f7:96:a4:7c:23:5b:1b:21:ae:da:
fb:de:b8:44:c7:20:20:9e:08:87:7f:a0:85:dc:18:3b:8b:28:
00:2a:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:24 2026 by rpki-client