Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
File: 5jAbF0RrPssIF-QA6YL3Km2AHTE.mft (raw, json)
Hash identifier: 9ia8AkKg9m3lgP/vf0vguo5qs5QDIoDm/srzzg9tAVU=
Subject key identifier: 46:B5:90:93:87:98:6B:AA:20:26:CC:58:82:A9:F6:09:E8:71:27:AF
Authority key identifier: E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
Certificate issuer: /CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Certificate serial: 019FAD8853EB8E9C9C14431ABB1C9795CFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
Manifest number: 85
Signing time: Wed 29 Jul 2026 11:00:20 +0000
Manifest this update: Wed 29 Jul 2026 11:00:20 +0000
Manifest next update: Thu 30 Jul 2026 11:00:20 +0000
Files and hashes: 1: 5jAbF0RrPssIF-QA6YL3Km2AHTE.crl (hash: EdBd2NTX4U439ODzhmUuf7NGapLeOrLOF/XaPbGXZQI=)
2: y8-zYgb68sCKmok28fSORVZTV7k.roa (hash: kb393sHwSxydXSQ1l80qzXOkKVqcGzDmY/nU6zerbuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:53:eb:8e:9c:9c:14:43:1a:bb:1c:97:95:cf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Validity
Not Before: Jul 29 11:00:20 2026 GMT
Not After : Jul 30 11:00:20 2026 GMT
Subject: CN=46b5909387986baa2026cc5882a9f609e87127af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:48:76:ff:7c:2a:b7:63:ca:bf:e6:3c:0b:
43:42:7a:f0:b9:54:f6:3c:e5:41:76:1b:ab:27:e6:
e2:f2:38:9c:99:98:36:3a:fa:50:2f:44:a9:20:cf:
e7:a1:47:b1:07:b7:7e:e0:74:0c:23:b0:d7:80:b7:
cf:5f:6b:22:60:f9:37:11:de:71:a5:97:40:2b:88:
e2:87:de:6b:29:d5:40:e5:df:a7:0a:f3:cb:c5:64:
85:31:d9:28:c4:f0:22:f8:7f:7b:38:5c:87:57:ae:
54:78:c0:53:9a:46:d6:a9:6c:d0:7d:e1:5d:cc:0f:
a4:ee:f6:53:87:b8:95:b9:33:97:31:09:bb:02:79:
70:28:78:d0:02:18:ad:61:e4:76:2c:3e:52:c2:a7:
a2:21:b1:d6:e0:6e:3e:6b:18:b6:f1:df:f3:3b:a5:
bd:eb:d5:d8:4d:59:1e:e9:36:d5:c9:45:91:f8:56:
b9:46:d9:0d:e9:e8:1d:9a:25:cd:eb:3a:3e:e9:16:
d4:8b:7f:c2:63:46:a7:95:3c:59:13:cb:4e:e5:51:
be:c9:73:7e:31:a6:5a:ce:74:63:a2:e6:19:5b:70:
58:05:a5:f7:3b:f6:27:3f:c6:dd:19:ac:89:2a:5d:
95:83:29:21:3c:66:0d:59:0a:3a:89:42:92:25:58:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B5:90:93:87:98:6B:AA:20:26:CC:58:82:A9:F6:09:E8:71:27:AF
X509v3 Authority Key Identifier:
keyid:E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:17:00:5c:fe:d1:13:3e:fb:00:10:f2:db:1b:98:a2:21:f6:
76:b4:c5:b6:ce:6f:d6:84:6e:45:c0:00:26:36:04:11:f6:ba:
c7:dd:70:3c:e4:cf:2d:66:61:d1:c2:ba:7d:05:d1:9d:bf:f8:
c1:67:d5:cf:d0:79:ce:e9:b1:66:df:c1:11:49:d6:f1:46:35:
2e:8d:9f:24:36:66:a5:b8:26:6e:49:45:1d:e6:68:f5:cd:5d:
20:48:9f:7d:8d:2b:12:8f:58:f0:60:5c:89:e9:dc:3c:fc:4d:
f7:88:53:6a:56:8d:43:83:ab:93:38:16:7d:3b:05:14:e4:86:
f2:d2:f9:17:17:f2:9a:c6:79:77:db:7e:eb:62:ba:0a:32:50:
59:37:4d:9a:dc:f1:3a:b6:5c:cc:26:3a:1e:e9:e9:a9:fa:80:
c8:8f:14:ff:45:79:97:9d:8b:0e:8a:37:de:98:40:85:a5:7c:
a1:12:fe:54:08:b3:31:50:38:a7:f1:e6:a6:e8:2e:31:12:aa:
67:c3:c2:49:3a:88:9f:a3:a8:40:8d:b3:e9:7a:39:b7:83:bb:
3d:3c:98:34:c8:9d:4b:ed:c1:3f:a0:b3:ca:da:72:d8:62:19:
1b:38:32:09:ed:7d:f8:77:4d:d0:a4:3a:f3:0b:31:b9:cc:79:
b6:14:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:27:43 2026 by rpki-client