Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: WfYoWsLGqByeV6+BATCVkwtmCQKe7dkBGA918irb4WI=
Subject key identifier: 31:91:8B:65:99:3C:09:61:49:5D:0F:E8:8F:A8:F0:5C:01:E1:BB:B3
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 01A0D8DF3F5200A4F620E9FC1A64E5FA794B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 14:01:44 +0000
Manifest this update: Fri 25 Sep 2026 14:01:44 +0000
Manifest next update: Sat 26 Sep 2026 14:01:44 +0000
Files and hashes: 1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: IpCm1QOW7q+MjNqG63wtTb0EcSFB16YxbicvrZO7CyM=)
3: _Jzbksm-JMXJG_vIupQOGd5OWfA.asa (hash: Tb8L6c/yPd6zHGW5vozp+7vssh8lOxc/2tcpUf5JfNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:3f:52:00:a4:f6:20:e9:fc:1a:64:e5:fa:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Sep 25 14:01:44 2026 GMT
Not After : Sep 26 14:01:44 2026 GMT
Subject: CN=31918b65993c0961495d0fe88fa8f05c01e1bbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:7c:69:0f:bf:1d:f8:02:17:56:dd:e2:46:
ca:2f:ae:b1:87:5b:1a:a8:44:3a:1a:51:6d:68:89:
67:2a:a0:10:0d:bb:ba:6a:56:f1:12:65:50:49:1f:
a6:44:df:0d:92:2c:7f:09:1c:ab:88:02:6a:9b:66:
fd:71:54:9c:c8:5f:e4:13:e9:c2:19:48:72:2e:5c:
f4:74:00:cd:d9:54:2d:e3:e2:da:9a:1d:9b:a1:fe:
a5:a3:e3:46:f7:6d:a8:46:8d:13:49:de:5a:f9:f0:
89:59:cf:fe:7f:a6:b6:2d:72:1e:93:9a:53:9d:eb:
3a:1a:b3:5f:fc:dc:40:cf:0c:a3:b5:68:61:90:f1:
ff:1f:7a:75:93:47:ef:59:c7:d5:45:06:53:a2:42:
93:20:ca:a0:14:5b:0d:3b:24:91:d1:e3:ac:1f:c4:
00:de:d2:de:38:e1:ff:7c:fa:f6:ab:ab:e9:ba:d0:
8d:63:b0:49:d8:b1:42:e2:35:81:06:08:5c:49:6f:
0a:1b:31:63:b3:34:7d:15:e6:be:3a:ce:f4:d6:09:
d0:dd:a2:ac:c3:29:cf:7f:ca:79:1a:67:d9:54:0a:
60:59:06:7c:49:78:29:45:f5:ff:58:59:4e:b2:af:
fa:ef:7c:ad:52:4a:bd:97:b9:2e:0a:b5:9d:91:d8:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:8B:65:99:3C:09:61:49:5D:0F:E8:8F:A8:F0:5C:01:E1:BB:B3
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:69:15:13:98:cf:29:e4:89:55:55:69:ae:ea:62:4f:da:d8:
f4:e1:fa:e9:cf:a1:92:44:bb:e9:bd:b3:8b:5c:71:7e:fd:b4:
e5:c9:74:9c:27:41:13:f2:88:8c:58:df:4d:86:69:e1:ef:80:
94:8a:2d:89:52:6c:b9:e2:57:a1:97:7b:68:19:84:8c:35:27:
38:7a:ce:49:96:5f:5b:01:f1:66:8c:3a:4f:fe:44:ac:61:51:
fb:e2:b7:1a:cf:4d:e0:5c:19:db:f3:89:0e:c5:d0:25:9f:5c:
af:ad:d2:dd:f3:ae:fd:77:67:d2:f8:4b:5d:43:91:6a:30:26:
b8:43:8a:b8:c1:4e:a0:ef:a5:9f:5e:6b:28:62:0a:99:cf:fd:
d2:54:23:54:95:06:61:98:0e:f9:92:9d:5a:e8:b2:31:95:cd:
40:23:e4:ac:cf:5b:8a:1b:a5:4c:2c:77:82:f6:19:67:38:5c:
15:bc:5b:2a:f3:6d:66:86:8c:92:75:b5:d4:f8:91:00:84:03:
39:60:35:3b:0d:4e:8a:23:f8:7f:70:82:ac:c5:9d:dd:91:fd:
07:79:c6:13:9a:89:f8:d6:ee:32:77:eb:5f:a8:27:b9:2f:0e:
28:f2:c5:6d:4c:6e:19:46:64:9a:13:98:43:02:bd:a0:13:f0:
99:2b:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:17:53 2026 by rpki-client