Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
File: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft (raw, json)
Hash identifier: NLdBMnZBry3arbn6SOFQbkWLkTSFl+Wu/KDWVRYSVfU=
Subject key identifier: 5B:70:09:43:EF:86:7E:A3:C0:F4:50:83:33:45:71:21:41:E5:0D:A3
Authority key identifier: E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
Certificate issuer: /CN=e5100a621d1fa344107325d3519467eca1145eb9
Certificate serial: 01A0CC3624904D12EFF800EE66400195E980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:01:35 +0000
Manifest this update: Wed 23 Sep 2026 03:01:35 +0000
Manifest next update: Thu 24 Sep 2026 03:01:35 +0000
Files and hashes: 1: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl (hash: MYTESD7UbmEkvBjKRoxKxS73JVMNoFkWvbyw2KPTs6I=)
2: N2hdkNTYOGqgW-2z7I2L2W726cg.roa (hash: +V63+wGYl8NMUG+4AXEpAFTMSrZt1PqBAvD4BIyWtoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:24:90:4d:12:ef:f8:00:ee:66:40:01:95:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5100a621d1fa344107325d3519467eca1145eb9
Validity
Not Before: Sep 23 03:01:35 2026 GMT
Not After : Sep 24 03:01:35 2026 GMT
Subject: CN=5b700943ef867ea3c0f450833345712141e50da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a6:09:f3:d0:c8:12:74:74:19:03:62:fd:16:
e0:fb:b9:d2:51:0b:95:34:f0:92:96:ec:de:ff:03:
64:c4:95:ff:9e:d0:52:cf:e5:35:53:19:36:a4:72:
71:74:0f:c7:94:96:17:1d:9a:ce:b0:fe:7f:a8:5b:
a2:6f:57:d8:13:f8:32:a1:9c:10:56:30:2a:85:fb:
14:de:85:5d:c1:fd:94:27:fd:5f:ad:de:72:9b:79:
e2:b8:21:60:85:f6:b2:08:5f:5a:60:2e:8c:ac:11:
7b:39:3b:79:f6:6a:f5:15:e9:f8:7d:3a:eb:83:55:
1c:c5:60:c1:a4:de:e7:80:f9:e1:38:90:e3:cf:dd:
06:07:aa:67:1d:cf:8a:dc:0d:6b:cf:91:79:ea:b3:
3d:de:88:d4:6c:4c:66:b9:e8:3f:52:31:46:62:91:
f2:e0:57:28:36:0f:2c:e3:f1:46:c3:40:a6:8e:6a:
f9:10:f8:f3:79:ac:ef:a5:54:34:f8:42:02:14:97:
19:05:d4:ef:a4:63:5b:c8:dc:fe:db:fe:7b:90:a5:
fe:1f:26:80:19:13:e7:d4:7a:95:03:69:fe:09:3b:
fe:3b:a6:ba:1e:41:91:72:a8:cf:19:2e:bb:e1:2d:
1e:e2:24:ca:b8:42:2c:59:b0:bc:14:3b:14:fa:d4:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:09:43:EF:86:7E:A3:C0:F4:50:83:33:45:71:21:41:E5:0D:A3
X509v3 Authority Key Identifier:
keyid:E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a7:03:54:b7:6f:b3:1d:19:19:ee:42:0a:6f:32:a4:f8:1b:
27:d2:51:69:84:1b:b2:3d:51:ff:c4:4c:5e:2b:b8:0f:61:b7:
ce:41:f9:0b:8b:d7:67:e3:27:86:6e:a5:c7:dd:cb:f4:e2:16:
41:51:9c:15:08:fa:fd:ae:b5:17:b4:6a:9b:8d:8d:f5:08:3f:
8d:8b:1b:6e:06:a9:bf:47:57:85:00:ff:6b:ff:09:01:97:e9:
08:45:65:27:d3:e4:5d:a5:6a:37:4d:87:19:36:65:f3:da:76:
fb:be:02:42:1d:c1:4c:cb:68:d6:ec:00:31:58:fc:3c:b4:0c:
59:ce:d3:15:ab:fd:70:f7:19:e2:dd:8f:e7:16:2f:15:a5:8c:
98:53:59:2b:bd:2c:ad:fc:ca:93:6b:37:81:d9:12:3f:94:db:
8f:e0:a7:9b:60:f1:3b:91:d7:57:96:b8:06:93:4d:83:8c:1c:
d0:e2:0a:80:bb:78:ef:aa:0e:c7:d3:78:87:58:53:92:1a:95:
ce:b5:c8:a6:02:4f:52:b2:4e:a0:7f:bf:1a:b9:6d:a0:fb:95:
49:ca:a4:3c:25:21:0e:84:3f:0c:82:01:42:c9:a9:0b:d5:71:
2e:17:b2:5c:a9:cc:f5:fd:02:6c:4d:b0:bf:9d:73:c5:23:59:
9e:6b:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:46:19 2026 by rpki-client