Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: eFw8dDpjk+qb+EDSScDO+FAt3xIrP9I7BRuex/taN4g=
Subject key identifier: D2:32:2F:31:AE:E7:63:F9:66:22:BC:46:8C:2C:0E:9E:21:9A:FB:58
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 01A0C5FC2EC511C22F691A1A64D7A7166A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 22:00:33 +0000
Manifest this update: Mon 21 Sep 2026 22:00:33 +0000
Manifest next update: Tue 22 Sep 2026 22:00:33 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: 2YS+hx591SuRt4odnT1y8KhzK7vnilNJzbaTgx0pcP4=)
2: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (hash: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:2e:c5:11:c2:2f:69:1a:1a:64:d7:a7:16:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Sep 21 22:00:33 2026 GMT
Not After : Sep 22 22:00:33 2026 GMT
Subject: CN=d2322f31aee763f96622bc468c2c0e9e219afb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:2a:cf:aa:8e:6c:d7:10:32:2b:fd:c5:af:
92:83:c3:3d:fd:b8:16:b5:b2:c8:c5:12:7e:e6:fa:
be:36:de:64:b7:82:8e:ef:3e:12:e4:53:a8:46:bc:
5f:12:b1:02:63:d2:a2:2a:60:d5:fa:93:3f:65:3e:
a3:4d:5a:a4:8a:54:23:25:cb:f5:65:9f:d7:f5:59:
59:9e:b3:79:b1:dd:e4:b7:64:f6:4c:f6:fe:c5:7b:
bb:35:34:cb:30:7c:2c:03:33:bd:ce:65:2e:e6:54:
ec:18:30:34:05:9d:4c:c7:92:d7:dd:16:7d:1e:ff:
f3:86:07:dd:93:57:be:3d:75:20:89:e3:1a:c0:09:
95:67:82:ea:0d:83:2d:3e:90:6a:31:41:8b:34:1f:
ff:7b:c3:db:87:5e:03:d6:3c:3f:56:bf:d2:de:3b:
7c:5c:90:82:75:7e:60:c6:32:12:4f:87:76:3b:2d:
00:fd:17:76:7b:5f:2f:08:83:48:a3:7a:99:f6:23:
c5:e7:92:d5:0b:d4:ad:92:ee:94:46:17:96:fc:ad:
4c:04:fa:5a:ff:b6:f2:f1:84:ab:0d:f4:55:ef:ea:
15:90:36:f9:bc:9c:4d:2e:ef:da:a0:cf:c3:d7:f7:
a4:22:6b:a2:b8:be:68:58:3b:cb:01:f5:d1:23:9e:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:2F:31:AE:E7:63:F9:66:22:BC:46:8C:2C:0E:9E:21:9A:FB:58
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c7:38:2b:e2:6c:1e:fb:1d:cd:07:34:76:61:5a:8c:da:e2:
99:11:32:01:af:8e:90:4b:3b:d8:ff:c6:49:33:1d:f6:08:9c:
a2:a8:12:08:38:af:f8:b1:fe:1a:0c:f7:08:e7:de:5c:a1:ad:
15:82:00:71:21:2c:e1:30:af:43:3a:99:d4:32:1b:be:96:97:
8d:f5:2a:b2:d2:04:5f:2d:89:58:f7:39:7b:1b:c0:4a:f4:a2:
63:af:96:c1:76:9f:14:68:fa:f4:1a:2b:c7:5e:d2:ac:ec:69:
7e:e2:93:85:4d:57:62:76:0c:56:2c:01:b4:7f:de:13:bf:f4:
bf:45:02:62:5b:7a:ef:44:23:48:0a:dc:f0:4e:aa:88:db:1b:
87:e6:f4:8e:01:52:cf:6b:ed:3d:ad:9f:e1:52:3b:ac:cc:20:
f8:3a:b8:da:bf:af:49:ab:ca:b2:cb:06:89:f5:df:71:00:e2:
b2:6c:bd:aa:94:df:1e:e8:f6:46:4f:1d:60:6c:04:83:03:30:
ce:25:e5:83:e3:1f:c3:19:f7:5f:cb:f2:49:a4:3f:47:0d:47:
ef:0a:9a:95:0a:b0:3f:e8:c4:ba:4b:b4:68:fd:5f:41:bf:98:
35:b4:c2:ee:e6:3a:f6:74:cc:cb:fa:ae:73:f4:d8:57:a5:d6:
12:ed:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:04:08 2026 by rpki-client