Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: gESUEheOguJFWlRb+5PFYEtxP0yrLpNA5a+4nFPBUVM=
Subject key identifier: 9E:7A:96:DB:29:CB:87:F9:A4:CE:54:FC:2A:64:35:FB:FB:17:4F:84
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 01A0C40D94D58B49B250C8D736284B88407D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 13:00:19 +0000
Manifest this update: Mon 21 Sep 2026 13:00:19 +0000
Manifest next update: Tue 22 Sep 2026 13:00:19 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: p//Tk/HCKO4jPhBVcljJcarPrNWfNuSwbWWJvsbuE44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:94:d5:8b:49:b2:50:c8:d7:36:28:4b:88:40:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Sep 21 13:00:19 2026 GMT
Not After : Sep 22 13:00:19 2026 GMT
Subject: CN=9e7a96db29cb87f9a4ce54fc2a6435fbfb174f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:91:5a:2c:5f:34:55:9b:ca:a5:94:23:ce:
98:93:40:1e:8f:90:6f:cb:af:64:a4:48:b5:8f:f3:
41:eb:d6:f0:7d:4b:11:62:f4:d3:d9:b4:10:8c:27:
1c:0e:f8:cc:d0:8d:03:de:e9:98:40:99:f7:28:74:
ed:2a:dd:3a:c7:b3:a6:6a:1b:39:8c:ab:13:f7:8b:
d9:df:d5:00:63:d8:99:81:3f:a2:47:f8:50:ab:1e:
09:50:b0:25:cb:06:0f:f3:5c:76:2e:e9:62:4e:ec:
78:4d:02:2b:f2:49:c5:da:35:60:d4:f1:d9:f1:98:
22:c5:e3:30:f0:f6:86:71:bb:e9:92:93:b5:93:12:
56:d4:53:50:bd:fd:bb:55:9f:89:83:7a:b1:b8:a5:
5a:0a:be:47:1d:7c:37:ab:ad:74:9b:9c:e5:9b:8c:
be:5a:c5:4b:69:a3:22:d2:95:e0:e5:28:a0:46:05:
d2:fc:98:be:f8:35:7c:ce:b7:7b:22:3e:88:20:58:
3b:9e:1c:17:a4:e2:62:90:17:87:f6:c7:f1:c0:73:
5c:c4:31:6c:07:e3:51:84:be:ee:b0:43:62:82:82:
d8:09:15:e8:8a:9a:33:18:4e:78:ca:58:99:88:f5:
57:ba:a5:e6:39:11:e5:bc:76:ff:0d:f2:5b:ac:b2:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7A:96:DB:29:CB:87:F9:A4:CE:54:FC:2A:64:35:FB:FB:17:4F:84
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0c:4e:68:90:c0:73:5c:6d:00:a5:76:ca:dc:af:a8:7f:2d:
76:7b:57:39:93:88:94:d5:86:4b:36:91:9c:84:c2:48:87:19:
bc:19:a8:32:5a:3d:39:f8:64:e7:4c:2b:cf:e7:74:bb:f0:0b:
e0:95:4a:c6:f2:2d:6c:2b:b7:e6:73:dd:00:97:66:be:dd:ee:
19:2a:99:64:39:90:f2:a1:ee:86:a9:c3:26:d4:a0:11:f6:4c:
af:8c:31:55:67:3e:51:99:aa:d3:13:ca:cc:71:a4:cb:76:15:
42:ec:67:50:f7:8d:cb:6d:26:dc:3f:82:c3:35:6b:0c:fb:4d:
82:47:cf:1f:04:33:40:17:87:25:57:e7:33:b0:c2:88:b8:f2:
df:32:42:53:d8:62:ec:4d:b6:72:fa:31:c1:03:10:db:ed:af:
d9:6d:ef:f8:57:24:7a:da:ec:ef:47:28:81:1b:27:3e:83:59:
4c:eb:27:83:3f:cd:af:35:b0:76:22:83:70:64:cb:e0:f9:ed:
0f:60:c9:66:e8:d2:25:8e:e7:42:10:48:a6:bc:d7:35:ab:74:
5d:4d:e4:85:62:a9:87:e2:a6:2b:25:a8:6e:63:41:51:4e:9a:
9d:4b:41:71:95:77:ff:fb:90:f3:10:94:f9:18:67:26:42:6a:
2a:26:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:49:55 2026 by rpki-client