Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: NEW0AeQbMAb+CfcL7b9pNfHr98eN7HCLF0nt6pmNExA=
Subject key identifier: 50:43:23:F4:E6:7E:DD:08:B4:F7:2F:8A:9B:25:05:E8:90:88:49:25
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 01A0D83B76F8F7C11CE9334AB70DC2B3F633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 11:02:50 +0000
Manifest this update: Fri 25 Sep 2026 11:02:50 +0000
Manifest next update: Sat 26 Sep 2026 11:02:50 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: XNpG8i76sJs9crtik/j2MmzQOllui/+vyLAGoYJM1gM=)
2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:76:f8:f7:c1:1c:e9:33:4a:b7:0d:c2:b3:f6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Sep 25 11:02:50 2026 GMT
Not After : Sep 26 11:02:50 2026 GMT
Subject: CN=504323f4e67edd08b4f72f8a9b2505e890884925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:a1:52:b4:59:24:1d:48:5a:1a:ab:f1:02:
66:60:ab:ac:d6:9d:03:bf:80:e6:0e:f7:4f:5c:c0:
39:e1:37:8c:9f:03:34:75:a6:84:3e:ef:4e:11:8c:
56:04:94:35:90:ab:be:a0:5b:8e:4b:74:02:6b:50:
32:da:70:2f:00:51:7a:98:a1:c8:8a:7a:fc:fa:1c:
65:e9:7a:12:ee:c2:16:8f:b5:cf:77:be:42:c3:16:
31:7c:75:6e:4f:e0:bb:dc:a8:e7:bb:d0:d7:a3:90:
2c:27:cf:b4:07:53:0e:53:a3:7a:28:3a:40:54:e6:
99:c2:a2:39:00:9c:4a:5e:82:04:a0:87:3e:a4:f1:
4f:75:36:4a:89:80:b1:3c:b6:09:ae:77:ef:19:f9:
4a:4b:48:d0:25:f7:1b:63:35:aa:10:84:cd:a7:2c:
25:66:77:61:1b:4a:19:ff:e8:a7:d4:32:c1:ce:81:
a4:d0:3b:e3:f1:fd:b7:b9:0f:9a:0c:04:18:3c:fa:
bf:d3:e3:53:0c:9a:3a:42:97:bf:f1:ad:69:fe:7e:
14:c9:b9:83:12:1e:ef:a5:21:60:5f:bb:83:57:61:
74:fa:36:af:30:9a:c2:2f:63:2d:ff:9c:38:2c:c7:
26:f7:50:54:e6:60:fb:49:fa:14:3f:d0:d6:02:56:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:23:F4:E6:7E:DD:08:B4:F7:2F:8A:9B:25:05:E8:90:88:49:25
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c0:52:a7:78:2a:2d:f4:3f:4d:1f:ce:2d:10:55:88:a1:a3:
41:40:d7:5f:14:39:32:43:15:13:9e:9d:8a:27:24:80:4c:dd:
7b:c7:78:cd:2e:a6:9c:d3:17:2a:1e:47:bf:ee:db:88:9e:31:
08:51:e9:73:c1:f7:52:30:da:4d:b0:c8:9e:ca:70:9b:e4:62:
01:0c:ec:b0:a8:ae:4f:3d:6c:8f:84:72:46:50:55:08:6d:8a:
ad:f1:a2:99:3d:27:57:21:1a:0d:30:7f:4b:80:3c:a8:39:ce:
54:1d:d5:44:f1:47:bd:63:ec:f9:2e:40:05:71:8f:44:10:f2:
93:05:53:22:fd:04:04:19:0a:42:b9:7b:9c:dc:3c:fa:49:59:
ef:bc:89:9a:3a:65:d8:0f:99:62:b5:a5:de:dc:51:e4:5f:af:
ea:b4:76:31:47:ce:cb:9f:7c:4d:d6:12:32:3d:87:2d:6b:fe:
2e:6f:1b:52:fb:b0:06:20:16:4c:fa:1f:b8:c4:f0:5d:9c:71:
28:ee:44:f3:80:e3:b3:23:e4:6a:d0:88:fb:92:82:f9:dc:08:
9c:bb:b5:01:b8:7d:f3:59:93:cd:63:8f:07:8f:e1:9a:2b:30:
a1:9e:55:d0:b7:2e:89:b5:72:65:c3:4d:33:56:39:c9:ff:22:
c4:13:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:43:29 2026 by rpki-client