Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: hGUEBlYocugsFzx7GgWiY+bGcZwSniyizOjVpYRqeu0=
Subject key identifier: 7F:F4:18:6E:C3:81:F1:CD:C3:7A:88:02:A1:16:DD:BA:09:D4:A0:12
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 01A1C21CF636B17E64CED127CCC251AD1964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 155A
Signing time: Mon 09 Nov 2026 21:00:40 +0000
Manifest this update: Mon 09 Nov 2026 21:00:40 +0000
Manifest next update: Tue 10 Nov 2026 21:00:40 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: G1lVIFARCd64Hy8EYAiMSdTaRCPgLIi48c5E135D3FI=)
2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:1c:f6:36:b1:7e:64:ce:d1:27:cc:c2:51:ad:19:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Nov 9 21:00:40 2026 GMT
Not After : Nov 10 21:00:40 2026 GMT
Subject: CN=7ff4186ec381f1cdc37a8802a116ddba09d4a012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:ca:f3:a6:09:4c:d3:1b:b6:bd:73:1c:c4:
16:60:0e:dc:40:39:d4:9b:45:b6:f4:9f:30:b0:99:
45:d7:bc:d6:cb:fe:72:5c:8c:de:85:59:24:d6:99:
b5:4c:33:ab:00:1d:95:ce:d8:a3:85:24:74:7f:66:
67:8f:94:2c:62:56:98:d4:c4:a8:2b:02:11:a5:19:
4d:fa:69:50:62:e9:f2:31:e6:b7:82:f2:86:b2:8d:
04:0e:fa:f1:cd:5b:7f:c4:bc:3c:0c:15:28:c5:1d:
69:1d:7b:81:02:54:81:e9:74:d7:9e:ae:b0:a7:52:
25:4d:72:1e:12:f0:80:7d:0f:0c:ff:b4:8a:5f:f4:
1c:42:19:97:91:f2:90:1d:a8:b6:f9:c9:22:a0:78:
6e:7f:15:07:66:ee:49:f2:73:c7:25:78:43:87:ef:
75:7c:a8:ef:15:2b:a1:1b:b0:dd:84:f2:d8:3d:f2:
32:3a:f1:45:48:1e:2d:f2:30:02:6c:1c:3f:ab:da:
8a:ab:88:b8:27:28:26:14:c3:31:d9:cd:f8:b0:57:
e4:34:8e:c7:d5:61:d0:b6:0c:ce:b1:86:b9:d6:b4:
1f:00:25:8e:af:33:bb:7e:04:24:15:3d:b9:3d:93:
d7:1d:3c:41:9c:83:00:93:da:ce:63:f5:19:5e:48:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:18:6E:C3:81:F1:CD:C3:7A:88:02:A1:16:DD:BA:09:D4:A0:12
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bb:19:7c:b9:ca:70:e9:e8:a4:aa:0d:4c:f3:f0:91:c1:3c:
63:07:ee:10:58:d5:39:dd:87:67:f2:26:14:6e:3b:c2:c1:72:
f0:29:9a:01:4e:ad:22:0a:e9:ac:63:92:12:aa:f8:2e:86:26:
38:b5:7c:83:c2:c6:eb:eb:28:61:96:89:42:bf:ed:a1:70:e2:
53:0e:eb:4f:04:f0:af:38:0d:2c:af:73:bc:c4:df:eb:e2:69:
2b:03:a1:db:72:ea:6b:04:35:b8:d8:d5:f6:75:a3:9f:0e:1f:
22:eb:57:9b:0f:88:0e:65:2d:e1:17:fb:ca:5f:f7:10:ca:83:
b7:86:15:7a:e7:68:7d:d0:3e:41:55:b4:1b:91:4c:bb:f1:61:
b5:2e:02:78:2e:00:f6:77:17:b6:00:37:05:7c:ae:10:53:80:
85:ab:ad:d8:e3:12:b2:0e:2d:b7:62:f7:1b:e7:e8:46:15:a6:
2f:7b:10:68:6c:eb:d0:8f:c6:45:bc:60:60:07:1f:b0:c9:c3:
0d:2c:51:08:98:e9:ab:ad:16:cb:d0:78:2f:ce:36:ed:5b:f0:
f2:8a:a6:51:13:56:e7:88:24:3c:13:3c:4a:7e:f3:4c:02:4d:
cf:c3:08:e9:9b:c0:64:11:a0:01:2d:73:44:6e:e0:fd:a6:7b:
c1:5d:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 04:06:35 2026 by rpki-client