Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: ybJrWXdYLKpomjM9rG7mXPo6PuvlZoFlpwWhXS+jsFk=
Subject key identifier: 94:1C:8D:16:56:4D:F3:68:10:FD:D8:75:AA:61:AD:0D:18:19:B5:F7
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 01A12AD6BA3FFBE2D70A0D113233AEE5F2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 066D
Signing time: Sun 11 Oct 2026 12:01:17 +0000
Manifest this update: Sun 11 Oct 2026 12:01:17 +0000
Manifest next update: Mon 12 Oct 2026 12:01:17 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: NcmtwYLMJYBoB3VI3tZMjA+GURn3G/DsUD8TZeahOHU=)
2: P-9Kjz1UfHMjTGFeahDrOs1ver0.asa (hash: W3pSYzCFr5OFf1TZYGacRWXPYdcekLj5JmITjzZJXho=)
3: vldYV3LWOW9tys3pjIJKZGnUQ1c.roa (hash: iuNVM1moJTBXO3h20HhJjEBtsYGf3s4iabPV9C2WSgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:ba:3f:fb:e2:d7:0a:0d:11:32:33:ae:e5:f2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Oct 11 12:01:17 2026 GMT
Not After : Oct 12 12:01:17 2026 GMT
Subject: CN=941c8d16564df36810fdd875aa61ad0d1819b5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d7:22:65:86:e2:c4:e4:da:83:bd:81:09:54:
72:b4:d0:09:86:08:9c:99:d7:a0:e5:fa:34:14:42:
31:1a:11:5f:17:54:52:76:52:99:bb:1d:7a:62:b8:
e6:5c:3b:c8:bf:c4:20:6f:42:da:38:49:b2:4e:7e:
8e:41:56:97:60:69:a2:33:fb:fb:ff:10:df:b1:c1:
39:7f:23:39:0e:07:a9:12:1f:7d:86:71:5f:15:62:
c7:3b:ea:1d:fb:2a:25:cb:73:ef:5d:f0:ec:94:3e:
15:7e:55:03:62:ba:06:f5:f6:c0:19:cb:82:88:d3:
dd:64:80:e6:c6:90:22:79:79:eb:48:ac:6b:2c:37:
f6:53:9d:2e:4d:69:79:5e:f3:1c:1c:b9:32:51:29:
1d:07:fa:d2:90:dd:76:eb:8c:82:c1:d6:d9:a9:d9:
e6:ef:66:2a:3b:8c:92:c6:23:d8:33:ea:df:82:8c:
dc:dd:07:11:16:f7:88:88:66:c1:ad:05:b8:36:2b:
0c:40:59:50:1f:c5:6e:f1:04:71:bd:72:51:9b:95:
89:18:0a:1d:4a:4e:9b:d4:94:48:0c:e1:e7:56:1d:
b4:b2:a2:2d:c0:03:75:97:c8:f4:50:28:14:ca:29:
64:ef:80:77:e2:12:90:0a:4d:64:fe:6d:17:92:a3:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:8D:16:56:4D:F3:68:10:FD:D8:75:AA:61:AD:0D:18:19:B5:F7
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:02:27:ba:fa:2a:9d:2f:93:b2:64:2a:7b:b5:fb:01:82:dc:
91:33:db:a0:be:55:6c:b6:58:7b:89:40:1d:e5:f0:29:d8:6f:
ee:ee:0d:82:26:63:77:80:36:02:13:37:d9:4e:7a:43:ac:ba:
3c:a7:be:5e:8e:b8:ff:bf:9b:b3:49:59:87:9a:0c:b1:97:da:
df:a1:5d:85:63:4f:67:96:18:b1:bc:18:b1:8c:af:b5:1c:c2:
cb:e3:2d:6f:b4:81:8c:eb:60:bf:95:bb:80:4b:15:55:9d:e9:
ae:6a:b6:43:97:cd:ad:5b:8d:d8:8e:12:f3:67:38:a3:c3:33:
2c:b4:ed:c5:08:55:6c:e4:5f:9d:fe:9e:d6:25:c1:9d:bf:f5:
99:97:1a:33:17:67:e8:a8:9a:02:25:74:01:75:ef:16:fb:05:
5c:f9:2f:c0:79:61:37:d2:a1:d7:d8:80:2a:07:3c:25:c5:a0:
06:f6:d8:e4:31:3a:ed:82:15:77:8f:5a:e9:cf:04:55:4d:4b:
49:3d:13:bd:df:28:da:91:cd:c1:4f:4b:91:f8:57:e4:bc:db:
1b:fe:67:ad:bd:12:20:3c:3f:43:36:0b:2e:09:22:b4:ec:79:
e2:a5:f4:b0:44:8d:50:62:74:5c:b1:bc:a6:13:4e:bd:dc:23:
a0:dd:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:41:46 2026 by rpki-client