Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: tEB64VrvcrXXJ/DOC6qMMQCRuGGvj11M7JGcCQpf764=
Subject key identifier: 6C:81:E2:F7:CF:63:42:99:0A:7B:7F:73:AB:BA:E0:94:E3:6B:EE:D4
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 01A1DEA7C6D96B325DD976203D1E2A0B64D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 0815
Signing time: Sun 15 Nov 2026 10:01:39 +0000
Manifest this update: Sun 15 Nov 2026 10:01:39 +0000
Manifest next update: Mon 16 Nov 2026 10:01:39 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: s2KDkE48Fp57ZUStiwo+cGy8pNc06e5zlmI8/t0Ywv8=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:c6:d9:6b:32:5d:d9:76:20:3d:1e:2a:0b:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Nov 15 10:01:39 2026 GMT
Not After : Nov 16 10:01:39 2026 GMT
Subject: CN=6c81e2f7cf6342990a7b7f73abbae094e36beed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:5e:63:71:bd:e0:4a:30:b3:40:f8:93:fc:
c7:54:cf:b8:f5:3f:a9:22:23:55:10:7c:21:cd:df:
00:bf:de:f0:ca:bf:b1:c7:79:4e:40:3e:a1:35:d6:
bc:89:7c:0e:f6:de:0d:19:02:21:6f:70:45:48:b9:
2b:8e:b1:11:af:39:ee:f1:75:45:eb:e1:c8:cd:2e:
d4:a5:1f:7a:0e:fe:5b:b0:8c:a5:4a:7d:6f:11:3a:
e5:27:82:97:83:3e:83:93:cf:55:40:e5:24:de:6b:
78:de:db:2d:ac:63:9a:8f:dc:d9:52:fe:6a:0e:20:
29:9f:9a:6d:48:81:0a:dd:ca:48:24:2f:62:3f:e6:
2b:40:d6:1f:4b:d7:cd:2b:8e:4a:b9:67:97:c8:36:
7f:a9:fd:dc:e6:2e:30:bb:65:27:dc:8a:7c:c2:79:
39:12:fb:be:74:e5:93:2d:05:c8:ea:4a:9b:e8:06:
16:19:54:63:69:86:7b:16:15:b6:d7:e0:2b:dd:a6:
09:74:f3:8c:86:1f:99:25:98:27:d4:f1:06:1f:5e:
8f:c2:36:93:98:0c:4d:8e:34:aa:e3:92:19:c3:e1:
db:3b:9f:a5:3e:8a:a4:f5:52:4e:21:55:91:4f:3a:
cf:15:af:f3:d7:e2:1f:7c:08:96:1c:07:43:3e:45:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:81:E2:F7:CF:63:42:99:0A:7B:7F:73:AB:BA:E0:94:E3:6B:EE:D4
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:96:47:e7:14:9a:98:83:e5:65:bc:f2:ca:87:b0:ff:f3:2d:
2c:0f:41:29:e7:ab:6c:42:1b:6d:e1:de:50:cd:86:df:d4:b2:
ce:fb:5d:3c:37:fb:53:93:96:97:96:80:d5:6b:92:d4:83:66:
b1:f7:f3:3b:53:73:58:88:f3:f6:3e:38:98:ba:0b:4e:7d:a1:
7f:b2:5a:5b:c4:69:d4:f6:63:84:cd:a7:4f:84:91:67:7e:45:
9b:8d:f1:ae:33:85:61:f5:fc:ee:3a:7e:61:ef:da:74:27:33:
28:14:80:20:b3:e5:a0:03:5f:b3:e4:12:73:f4:6f:11:ac:50:
9b:1c:89:29:ec:14:99:da:08:2f:92:49:84:96:ea:2b:2e:fd:
88:ea:b2:e1:cd:39:69:15:a5:df:4f:f2:68:c7:0a:09:1a:a0:
60:ce:fd:ab:ba:72:65:6a:2a:c8:15:40:80:41:31:58:16:e4:
bd:f4:cd:2a:69:87:7c:c1:be:13:4b:df:72:65:a4:42:01:9b:
48:df:70:6c:86:a0:5d:7e:85:8f:e8:06:d5:b0:98:e7:07:ce:
b0:62:72:86:9e:96:1d:5e:54:31:45:a7:62:bf:4d:32:bc:00:
08:67:c6:16:eb:b4:71:d1:3b:9f:7f:33:a9:10:5e:2b:92:92:
b7:30:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:53 2026 by rpki-client