Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: lnOyafuNMRBfwVQc/emzMXL2cS75qILjSZI5HdUvFfk=
Subject key identifier: 24:DD:29:69:31:43:B5:3E:CF:2A:9A:6B:7B:83:A0:37:D4:E1:DC:8A
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 01A111F2F55F1C614B4D8F5C5BFB1420DA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 16:01:37 +0000
Manifest this update: Tue 06 Oct 2026 16:01:37 +0000
Manifest next update: Wed 07 Oct 2026 16:01:37 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: JKmGj337TLzR7Y1PEt0J8JLZ8dp/XG+CWC9dEheQv1Q=)
2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f2:f5:5f:1c:61:4b:4d:8f:5c:5b:fb:14:20:da:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Oct 6 16:01:37 2026 GMT
Not After : Oct 7 16:01:37 2026 GMT
Subject: CN=24dd29693143b53ecf2a9a6b7b83a037d4e1dc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:59:a6:21:89:67:38:5f:a6:3f:52:62:35:c7:
4c:91:4b:37:77:92:3d:99:63:87:6c:26:28:5f:e7:
5c:93:3f:5b:c5:40:8c:5f:ec:ac:7f:21:01:d0:ab:
0c:41:9d:1c:c0:f0:f5:03:76:eb:5e:f9:fa:a9:11:
97:b4:9d:ba:86:03:e4:9f:f8:ef:cd:d4:c9:2e:2b:
42:2d:c7:48:93:f5:43:b4:ce:f2:ae:ab:47:ea:fb:
20:b9:94:fb:d3:20:32:86:05:60:36:f5:d3:0b:85:
38:1a:4d:4a:76:91:83:1e:af:10:aa:91:93:88:f4:
95:b6:c8:32:3b:23:38:0c:2a:7c:45:73:31:9f:e6:
15:f8:aa:dc:6e:4b:e2:c4:e5:f1:09:a4:96:7e:0c:
0d:6b:6a:f7:53:bd:21:e9:cc:bc:6c:e8:e0:ce:7b:
a9:19:68:3e:76:e6:ed:17:e9:56:ee:30:b9:3c:68:
96:fe:8b:10:0d:20:d6:c6:3e:73:fd:ba:6f:94:f6:
96:d0:78:cd:b9:80:cb:08:8f:d6:79:04:59:78:da:
55:58:0c:ce:e5:fc:2b:75:6b:d8:b2:07:e8:9d:ea:
ca:d7:31:f5:85:a3:b8:21:cc:18:0c:97:72:dd:84:
7c:c3:f3:26:a1:e0:96:1b:74:cf:09:68:d3:55:47:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:29:69:31:43:B5:3E:CF:2A:9A:6B:7B:83:A0:37:D4:E1:DC:8A
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:89:f0:22:13:da:60:2d:49:93:1f:a2:89:23:00:f6:ee:ef:
dd:94:0b:4e:da:fa:25:2b:ea:83:0d:8c:7c:82:fd:2f:ea:de:
d3:e6:66:83:0a:d0:02:c4:41:5b:c2:55:dc:63:89:de:ee:0b:
39:05:37:96:3f:1f:1a:fe:ea:e9:75:77:8f:f8:18:31:17:e2:
e3:04:87:4a:3d:b2:37:3b:56:e8:7d:fb:8e:d6:19:66:da:f6:
42:d3:00:b4:8d:35:fd:39:bc:ee:2d:e4:e3:3a:3c:7f:0f:a0:
c5:dd:41:7c:64:28:00:d7:76:79:91:59:e1:7e:53:f2:05:86:
88:7a:8c:eb:81:21:0b:42:5e:e3:1a:4b:33:51:d7:76:c3:61:
e4:8f:fe:a6:1d:a7:5f:fa:68:ab:0a:f4:28:af:21:ea:9d:03:
f4:4d:7f:3d:04:1c:a1:1d:d7:d3:8a:4d:21:7e:4a:f6:78:e5:
ce:8e:82:1f:7e:17:cb:6a:6c:b5:36:b9:84:cc:f5:1e:79:54:
b9:82:4a:ab:90:ac:b4:77:3c:62:3c:96:3d:73:ef:1f:d0:27:
bc:26:f5:2d:bd:da:51:bf:9d:e4:02:2e:bc:1d:d1:89:2a:d9:
43:21:4d:62:1a:1b:19:ac:ae:69:26:da:b1:97:0e:ea:51:42:
8d:60:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:48:18 2026 by rpki-client