Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: jwV8sUbDjqsulL6FO9pkxhosfPLg2gK28Tb3ux7JeYk=
Subject key identifier: D8:DA:35:25:B7:0F:2E:B2:B3:C3:F7:AC:8E:D6:06:0B:69:39:69:BD
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 01A1310F313EE89A09CBE687982930A3FF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1AA0
Signing time: Mon 12 Oct 2026 17:00:41 +0000
Manifest this update: Mon 12 Oct 2026 17:00:41 +0000
Manifest next update: Tue 13 Oct 2026 17:00:41 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: pSSc7Mf51ytUz67oW2yzqiuW+xnAi465qCamMQSlnZU=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:31:3e:e8:9a:09:cb:e6:87:98:29:30:a3:ff:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Oct 12 17:00:41 2026 GMT
Not After : Oct 13 17:00:41 2026 GMT
Subject: CN=d8da3525b70f2eb2b3c3f7ac8ed6060b693969bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5b:80:30:19:b4:6c:a3:96:38:db:44:27:bb:
6f:93:9b:e2:c7:27:83:ba:75:6b:6d:05:d4:d9:c8:
af:55:c4:13:0e:ab:e8:81:48:fc:a9:64:0b:9d:11:
1d:b7:1a:ae:de:db:74:9b:f1:18:a3:75:38:4e:4d:
22:30:92:38:3b:00:3e:bc:5e:39:d2:77:2f:d8:97:
ad:28:39:ed:56:ca:b5:52:34:51:a8:12:07:d6:83:
b0:a7:3c:33:dc:59:3b:1d:7c:93:59:81:f2:94:53:
77:40:6b:7d:2e:25:54:f4:38:6c:da:1d:e8:fc:e5:
37:02:8f:c2:85:8d:09:32:da:a9:e7:42:ea:c3:0c:
39:f5:d5:0f:cc:17:2a:9e:e8:5b:ef:d2:b7:ce:58:
da:dd:63:a6:57:23:da:d1:26:5c:81:4a:65:26:23:
14:45:ba:0e:fa:5a:52:bb:c4:a9:9c:1e:33:f5:0a:
1c:60:14:9e:58:d3:17:b4:7b:42:f3:17:7d:16:fa:
2a:95:0b:a6:fd:aa:49:8a:d0:16:41:d7:95:65:e0:
fe:c0:51:f3:7f:e4:90:e1:75:e0:ff:ac:3e:80:fa:
68:df:b2:bc:8b:5e:ff:95:e3:de:38:9e:b1:99:b6:
22:89:f0:74:fe:8e:fc:a2:ea:d3:58:fe:4d:cc:51:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:35:25:B7:0F:2E:B2:B3:C3:F7:AC:8E:D6:06:0B:69:39:69:BD
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:22:4e:be:80:e2:c8:d8:9f:da:20:24:96:c4:33:90:c1:7a:
af:38:8d:e2:17:07:05:47:63:35:2e:ca:7b:53:92:63:3c:0a:
c0:a1:64:98:22:37:eb:e1:b4:df:c4:d0:09:22:9e:e8:64:a1:
35:3f:ea:d0:ab:77:c5:19:cc:41:c8:07:5d:7d:da:0e:6f:b0:
dd:d3:b5:2d:c3:d1:25:b6:f9:a7:cd:f5:c5:99:2f:2e:af:06:
f9:14:65:2c:9a:24:e6:18:6d:04:03:74:2b:26:c6:19:bc:2e:
19:b6:9b:50:07:51:a7:5d:aa:2a:6d:86:95:7a:c5:f0:37:6f:
69:51:af:19:d1:ee:3b:6c:3c:60:85:b6:01:29:23:22:1f:3d:
0b:3a:6b:7b:dd:6c:5e:7f:93:6c:ef:fb:9e:ba:1b:cb:6e:97:
a0:21:03:6b:1e:30:38:1b:e8:4d:81:ad:c5:40:af:f8:44:51:
b9:2a:23:8c:e4:70:20:3f:3c:2b:b8:33:c8:13:4b:89:48:59:
5c:1f:79:3c:29:d3:3f:d9:bc:0c:1c:3e:51:1a:cb:4c:a9:e2:
99:b8:4c:63:35:e9:5f:f2:a7:f1:89:60:f3:db:14:39:f8:d5:
0e:6d:fb:cb:22:41:cb:f8:a5:2a:78:2a:2f:b9:2f:33:da:4e:
d2:cc:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:18:46 2026 by rpki-client