Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
File: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft (raw, json)
Hash identifier: EARoExQsuhZWPsx9ITya7v6NTM65zJ1Y+XRsHARsM4w=
Subject key identifier: 2B:BB:3C:9F:81:F6:CF:BD:EA:C8:BD:8F:FF:3C:38:2E:29:A0:5D:C8
Authority key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Certificate issuer: /CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Certificate serial: 01A13E25B6098B13F6083297CA6C4F06FEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
Manifest number: 19E5
Signing time: Thu 15 Oct 2026 06:00:21 +0000
Manifest this update: Thu 15 Oct 2026 06:00:21 +0000
Manifest next update: Fri 16 Oct 2026 06:00:21 +0000
Files and hashes: 1: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl (hash: mP9xy7VH7gVYXKNSnK4pmlGpM38uS2zV0hxQOOiIT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:b6:09:8b:13:f6:08:32:97:ca:6c:4f:06:fe:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Validity
Not Before: Oct 15 06:00:21 2026 GMT
Not After : Oct 16 06:00:21 2026 GMT
Subject: CN=2bbb3c9f81f6cfbdeac8bd8fff3c382e29a05dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:db:e2:10:f5:48:83:3d:8f:09:21:dd:77:
34:ec:09:3d:79:2d:ec:90:3c:13:b3:da:3f:0d:ea:
41:ca:71:e8:f7:77:a0:ac:d5:cc:91:2a:69:96:a0:
6c:90:ea:02:51:aa:b0:60:77:c5:4e:36:7a:df:d5:
c0:e7:4c:91:ae:54:b1:56:58:ee:80:5a:86:ad:f1:
8f:28:2a:42:9f:ba:1a:13:12:96:6b:44:cc:1a:aa:
09:39:c8:6f:f8:9f:d7:ee:a3:94:40:81:9d:0e:50:
62:61:30:8c:5e:b5:73:89:b0:54:d2:4f:49:89:0b:
e1:32:34:56:45:f1:5a:0b:55:37:0b:b2:24:d9:d1:
a7:bd:1e:7b:84:ca:ca:1b:98:c8:3a:32:7f:04:2f:
6c:2a:d7:b8:4b:8b:71:40:bd:c6:c8:3c:96:33:63:
57:ed:34:5c:f3:45:84:4a:d3:29:3a:6c:ea:16:cf:
e8:d3:76:77:a6:0c:04:f4:39:62:03:1c:19:07:c8:
07:ed:34:98:a1:6f:1c:c2:2f:b5:2e:80:7c:13:7f:
c5:68:48:e8:a4:51:36:5b:55:96:5f:e8:4c:fc:ef:
54:ad:fd:ce:cb:0e:06:b4:29:8b:5b:31:65:65:82:
1f:3a:89:6a:07:25:3a:8b:99:56:95:10:62:13:05:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:3C:9F:81:F6:CF:BD:EA:C8:BD:8F:FF:3C:38:2E:29:A0:5D:C8
X509v3 Authority Key Identifier:
keyid:E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:13:0b:0b:56:62:39:87:d0:f2:25:3a:6a:ce:d2:4d:0f:89:
bc:ae:19:9e:df:41:0f:61:af:09:14:1c:e8:b1:8e:9f:69:bc:
53:15:19:b6:a2:0b:07:c4:1b:3e:c0:79:d4:75:d0:14:11:d2:
fa:72:2c:53:a7:f4:ef:c5:4a:39:b5:eb:a9:0b:c7:cb:58:0a:
6d:e3:32:d7:84:49:e7:80:19:c5:73:2f:0e:a0:21:08:0b:21:
c5:53:47:53:d3:01:da:1b:29:84:ad:04:ef:ef:f0:e8:57:de:
5c:d7:01:70:e5:14:fb:d3:37:65:aa:1b:a6:26:5d:38:2d:f6:
3e:d7:74:8c:87:b6:ed:fb:41:09:f7:83:74:8f:ac:39:59:58:
7b:ef:49:ce:78:3f:7f:5a:d8:0e:60:74:71:80:b6:15:9e:c8:
d7:7c:c3:8e:d9:c0:2b:51:a4:07:2c:7f:3e:cf:22:76:fe:e0:
c2:66:23:07:c7:56:07:95:bd:bb:7e:4a:90:48:0c:d5:fb:8a:
f8:96:40:1f:9a:61:97:df:e6:f5:75:e7:e7:85:22:62:6e:90:
41:ec:ff:83:ff:1d:12:4b:50:ce:12:ba:13:04:64:4d:72:49:
42:62:14:46:4c:f2:47:f4:a3:3f:5d:4b:7c:47:39:82:45:53:
08:c0:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:49:49 2026 by rpki-client