Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: b+tOEGLS5V6VcMUctZn5pvKk9hrFDD9rdin14ZEWzlE=
Subject key identifier: 0D:E5:54:BE:0B:DC:42:2D:C5:F3:4F:52:F3:68:ED:18:3C:58:04:AA
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 01A0C6D84E8E9D1A3E1B004CFAA1469D555F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 1A63
Signing time: Tue 22 Sep 2026 02:00:59 +0000
Manifest this update: Tue 22 Sep 2026 02:00:59 +0000
Manifest next update: Wed 23 Sep 2026 02:00:59 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: L9df2FzNDo/HEDxkDGBqN+vohn2RE6oddlcTsn140vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:4e:8e:9d:1a:3e:1b:00:4c:fa:a1:46:9d:55:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: Sep 22 02:00:59 2026 GMT
Not After : Sep 23 02:00:59 2026 GMT
Subject: CN=0de554be0bdc422dc5f34f52f368ed183c5804aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:7d:cf:e4:61:eb:95:c5:25:d4:8a:8f:c5:
92:51:24:a8:c6:87:b3:4b:b5:ce:28:1a:90:70:e5:
a9:bf:97:e6:e7:c9:e9:f6:70:dd:9e:ec:74:98:35:
e8:fd:d2:67:e7:19:5d:61:a8:b9:0f:3f:12:23:eb:
17:1a:70:94:b4:59:e8:5a:b9:f9:55:39:95:dd:a3:
4f:c6:82:4b:f0:08:aa:bc:3a:96:b6:72:ce:b4:df:
d0:da:8e:b7:9c:88:f8:89:13:14:46:be:62:a3:9a:
45:5e:96:dd:3d:08:a4:3d:92:44:46:34:42:11:bd:
f6:b3:fe:fd:11:73:cf:57:d0:7b:41:3f:16:da:7a:
37:a9:34:5a:0f:dd:2f:88:b5:4c:b5:a4:af:3f:2e:
e1:fa:46:e6:20:4b:d7:0e:04:a1:0a:4b:c0:20:62:
de:92:c9:dc:66:75:47:f7:f6:6f:c6:0b:00:04:e8:
74:f4:26:77:4c:28:3e:6e:b4:39:a8:c0:1d:64:6b:
da:8b:45:ac:be:b3:77:b2:4a:8b:19:a0:f2:00:72:
a6:2a:41:8e:97:10:3d:b8:0c:db:f8:17:4c:05:9b:
bb:04:0f:4f:ab:ac:81:53:e1:ef:66:90:fc:ba:52:
10:80:d1:17:4f:0b:71:af:36:ce:e4:1f:a2:62:fc:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:54:BE:0B:DC:42:2D:C5:F3:4F:52:F3:68:ED:18:3C:58:04:AA
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:0b:b8:c6:25:8c:1d:37:74:c2:ac:91:05:d9:a5:9d:a5:
56:97:79:48:f5:10:a9:3e:73:19:92:f3:e2:7c:17:9c:d3:79:
62:55:c6:3c:74:b5:6f:b1:2b:81:4f:6e:fa:e9:93:8d:e1:c7:
10:e9:e7:e7:68:22:a6:13:c6:ee:9b:3e:15:07:f4:75:a0:cc:
71:e9:7a:a8:23:eb:1d:ea:fa:5e:96:9b:72:d1:7e:12:d0:eb:
5e:bf:88:91:e5:2d:d2:95:c4:90:e6:41:54:0a:5f:a6:57:d3:
eb:56:ca:66:30:21:82:1d:2e:1a:eb:7d:8c:2f:4b:08:2c:40:
92:06:f0:29:e4:e4:ca:4e:37:d8:90:80:27:ef:1a:32:a6:37:
eb:ca:e0:bf:06:a2:58:76:8c:87:f8:21:3d:ad:32:b6:72:fc:
6b:4f:2a:da:4d:79:d4:3a:20:c8:e4:cd:50:fe:e9:bd:de:1c:
b2:d7:7d:12:f3:b4:a5:e2:0c:6c:40:ee:48:7b:c7:e7:dc:ba:
e0:e5:58:1f:3f:d4:31:d2:ea:25:9f:6f:26:8c:2c:0f:59:15:
74:1b:ce:00:61:17:8c:17:26:2a:50:91:49:7b:c7:bf:a9:70:
b8:3d:32:bc:9e:62:c9:d9:a9:e1:70:31:70:7a:38:25:74:9b:
d2:8b:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:13:08 2026 by rpki-client