Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: 5W0qilEooN9rZOk1GWpuo5KXE/K+ReXgMbSnhJjf6/U=
Subject key identifier: 8A:6E:5C:06:CA:23:7B:08:91:65:10:70:4E:2B:73:8D:93:1C:61:A5
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 01A0D5704DE387C4932E5F196E18AA816BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 22:01:41 +0000
Manifest this update: Thu 24 Sep 2026 22:01:41 +0000
Manifest next update: Fri 25 Sep 2026 22:01:41 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: w80Va9iH/MWxsK2RYmIZHmR6IxqveC9WHCfxyDRIWKw=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:4d:e3:87:c4:93:2e:5f:19:6e:18:aa:81:6b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Sep 24 22:01:41 2026 GMT
Not After : Sep 25 22:01:41 2026 GMT
Subject: CN=8a6e5c06ca237b08916510704e2b738d931c61a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:d7:58:48:20:97:da:2e:40:8d:ce:b3:d0:
8c:c6:76:7f:69:4d:38:9b:12:0f:72:0a:99:d5:dd:
d3:c6:c1:a0:6e:0e:13:cc:6a:fc:b9:e3:f5:8b:db:
0a:f0:32:bc:af:70:36:39:33:78:2e:e4:cf:40:23:
dc:7c:26:d3:60:eb:52:ba:11:5c:02:d9:02:05:c3:
1a:8f:97:04:d1:f4:2c:70:ae:49:31:f1:e5:2e:3d:
93:ae:a5:66:a9:11:12:24:83:f5:47:1a:00:02:64:
69:55:d3:5a:0c:71:a6:97:39:db:a3:c9:aa:4d:f9:
6f:8d:72:d8:f6:be:0b:ab:08:ae:f1:91:dd:b1:a3:
34:e8:86:d3:85:d5:33:7b:94:46:94:4b:b5:e5:31:
2f:85:81:b8:c8:32:85:c9:2d:27:50:7b:b1:9b:9e:
40:54:81:a6:b5:7b:cb:70:4f:fd:7e:ef:c7:c7:fb:
3b:d9:80:fa:a5:b3:4c:36:e9:00:09:aa:8a:da:34:
69:79:1c:42:3e:f4:2d:47:8f:23:82:e8:4f:ea:9e:
ff:8b:14:ee:77:c5:28:17:88:e3:3c:30:a2:1a:44:
dd:cb:75:c6:6a:1b:30:84:86:fe:72:3a:ba:ff:37:
af:8f:a7:78:8a:96:4a:de:e6:b5:db:4e:1d:5d:00:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:5C:06:CA:23:7B:08:91:65:10:70:4E:2B:73:8D:93:1C:61:A5
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8e:56:4d:ad:29:d1:f7:4e:ff:72:5f:04:10:67:fe:69:ef:
84:bf:40:76:40:f6:f5:97:9f:b9:c9:63:80:46:3b:67:cf:65:
03:a3:98:1f:8d:83:c4:78:b3:23:30:4b:dc:16:23:c6:81:1e:
ad:36:2b:b6:0b:2b:e8:a3:48:fd:32:27:0c:f8:96:a4:6b:96:
77:33:be:ee:20:0c:17:8a:05:e7:d7:a1:aa:5a:83:3d:6e:88:
72:c0:20:02:23:82:a9:f2:ae:26:da:8f:9e:e3:a3:d7:66:b7:
b8:ba:2f:8a:b3:d8:86:a8:06:5a:e6:99:93:5d:ca:21:af:3b:
a6:b4:b3:86:38:fd:4c:bf:05:f7:40:84:c5:7e:18:d3:71:df:
06:5f:42:e2:4e:53:e2:a7:e2:ef:8f:00:f1:99:eb:29:76:34:
4e:6b:d2:96:cd:ac:87:df:65:31:23:89:76:a8:8a:2f:db:8f:
39:44:84:2a:7c:2f:f7:ba:29:6b:ea:1f:47:58:72:10:22:10:
4b:73:69:ec:0a:bc:b9:77:5c:75:4e:29:c1:ac:c0:7a:a5:4b:
45:33:77:8e:c5:94:38:6a:fc:7f:6e:27:c4:8b:1a:ba:7e:98:
e3:78:b1:99:fe:e7:45:d4:26:72:d0:55:33:b5:9d:e9:0e:fb:
61:02:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:24:42 2026 by rpki-client