Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: k03SvhsUZKXn9//H6/KFUXxECB6hhf1jlINUc/QqP/8=
Subject key identifier: 67:EA:9A:48:50:81:73:0D:14:86:9B:1A:C2:C7:1D:9E:27:1E:DC:BB
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 01A1C58CD48F5C8514885F0F5A5CBA71DBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 16D1
Signing time: Tue 10 Nov 2026 13:01:43 +0000
Manifest this update: Tue 10 Nov 2026 13:01:43 +0000
Manifest next update: Wed 11 Nov 2026 13:01:43 +0000
Files and hashes: 1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: Nya4Ecmse/gmuqrUjwlRC2sMkSKsI2LHRCEk8KWBJAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:8c:d4:8f:5c:85:14:88:5f:0f:5a:5c:ba:71:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Nov 10 13:01:43 2026 GMT
Not After : Nov 11 13:01:43 2026 GMT
Subject: CN=67ea9a485081730d14869b1ac2c71d9e271edcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:43:88:1b:e3:b4:5b:05:0b:01:6f:48:5a:
e5:f5:ec:57:2a:0d:62:df:bb:f6:ea:79:34:18:01:
3e:fc:06:0b:b0:06:33:f5:d8:52:0f:93:13:ce:a8:
9f:06:b6:28:64:21:8e:ad:29:7a:50:22:4d:7d:9b:
c4:85:80:a0:04:ea:d3:9a:b9:a4:df:df:e8:98:75:
ee:58:ff:74:10:e2:54:e3:6f:29:90:59:49:a0:ff:
53:f3:80:dc:01:27:56:21:1b:4c:6c:a5:89:92:17:
e7:9e:95:ab:a8:1c:f1:d4:67:5d:98:0a:b7:1a:73:
45:04:46:4f:de:af:25:dd:30:79:6b:95:92:4c:ba:
15:20:f4:25:67:7a:dd:bc:22:63:7f:ac:ef:5c:96:
70:f4:3a:eb:2d:e0:cb:46:f7:3e:c1:f8:01:ae:31:
18:9e:af:fd:32:f3:81:02:48:b0:c9:d6:06:9d:00:
69:54:ca:36:f0:5c:9b:43:c0:cc:48:c4:8a:0f:cb:
63:cd:d0:6e:d8:66:c2:66:4d:a4:18:e4:07:ea:86:
bc:38:ba:de:90:46:39:7b:2d:ea:ab:23:d1:2a:c5:
8f:17:e2:30:4f:f7:84:e1:72:07:f3:1c:a6:e5:9d:
a9:e7:da:e0:f0:d9:7c:a2:79:90:b2:2a:ec:db:12:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EA:9A:48:50:81:73:0D:14:86:9B:1A:C2:C7:1D:9E:27:1E:DC:BB
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:72:63:5d:ad:de:49:ff:61:f7:4a:52:5f:94:33:09:92:e9:
c5:d2:08:e0:51:1c:ca:33:a7:4c:56:a8:83:e2:ed:5a:7f:e9:
fe:64:15:0d:07:ca:d0:18:51:e7:72:de:02:ec:d3:54:a2:82:
bb:44:bd:30:6e:31:56:15:66:2d:16:ef:88:4d:f8:2a:78:61:
35:dc:70:35:ae:c6:88:d4:da:7e:a3:c2:6f:f4:6f:28:a7:5c:
46:ca:9b:0c:a1:ff:12:b8:7e:f1:7a:e6:69:2b:51:e0:c6:2b:
2b:b0:75:14:f2:f4:41:62:5b:12:b4:7a:3d:0d:85:72:4c:34:
c5:76:be:05:46:81:58:64:40:32:34:96:71:7b:a4:ef:76:a6:
54:0a:99:6c:c5:48:e3:60:09:cc:49:d8:86:96:0c:48:cf:b3:
38:35:60:56:64:20:c3:4e:04:03:b6:ca:d6:78:44:ba:19:83:
83:78:6d:66:08:05:6c:84:8a:ee:6c:9b:76:e5:3f:fa:82:2d:
46:c8:31:ea:b4:b8:26:17:10:37:1e:a0:50:00:f4:3e:15:b9:
4f:30:3c:c0:ed:ea:0d:6e:c4:e1:de:35:c0:d4:61:bf:a7:54:
02:0a:8d:99:82:65:06:49:b1:98:c7:90:b6:72:64:1e:e8:51:
20:38:fd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:10:16 2026 by rpki-client