Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: cQdx7hOEsHHXAAsS/h50xvHCZcZZ/lA61c18qwvlL8A=
Subject key identifier: 6E:25:0F:E2:57:48:83:7A:60:A7:FE:AF:A1:FD:D8:F2:63:A2:5F:6C
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 01A0C88F3133A6FAB7043A8E7A39EE99E33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 0785
Signing time: Tue 22 Sep 2026 10:00:22 +0000
Manifest this update: Tue 22 Sep 2026 10:00:22 +0000
Manifest next update: Wed 23 Sep 2026 10:00:22 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: XHOF8kHqMb5P6R9TGSPNcI7KgYiXGLFbwYcEa1+Hem8=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:31:33:a6:fa:b7:04:3a:8e:7a:39:ee:99:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Sep 22 10:00:22 2026 GMT
Not After : Sep 23 10:00:22 2026 GMT
Subject: CN=6e250fe25748837a60a7feafa1fdd8f263a25f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4f:c7:8e:80:07:80:a8:91:cd:cb:20:71:07:
d2:8e:ff:b9:b9:0f:4a:0b:c2:8b:ba:a7:24:88:48:
ad:92:d5:02:68:c0:34:24:4f:f6:f0:26:ca:a6:1a:
ab:3f:95:61:bc:e0:21:e6:7f:ba:dd:a2:b7:c6:22:
5b:a7:64:1f:fb:94:7c:2b:33:71:82:e1:cb:f1:a6:
89:4b:0d:ff:eb:ee:3a:9d:4b:11:b0:e2:05:bc:15:
47:99:b9:e3:10:dc:0d:bc:d8:d0:9c:a5:c7:d2:43:
6d:6f:10:da:bc:84:1a:1e:85:7b:43:8c:eb:3f:c6:
b5:64:ac:1e:30:b1:88:be:a8:fe:ab:7b:b7:52:d2:
d8:d5:9a:84:83:ea:f1:1b:89:32:39:a2:56:ec:8c:
e0:52:8a:6c:b3:fa:34:53:33:d0:8b:c2:c0:24:21:
7c:5a:5e:4d:b0:92:de:12:fd:04:80:c9:f9:95:08:
88:58:8c:da:58:98:26:cc:e8:a2:33:67:62:71:12:
5e:41:45:cb:ee:2c:30:a9:ed:db:fd:29:1b:7b:4c:
f9:25:b0:b2:1e:e2:ef:9b:20:72:d0:c0:d5:16:44:
59:d7:52:95:69:24:67:1f:97:8c:0a:07:12:2c:72:
11:0a:54:b1:7d:24:e1:11:77:9d:09:c3:a9:27:dd:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:0F:E2:57:48:83:7A:60:A7:FE:AF:A1:FD:D8:F2:63:A2:5F:6C
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:22:a8:5e:6a:fc:c7:fe:5c:d0:7d:32:6d:59:dc:7c:1b:7f:
b9:a5:f3:a3:74:b7:63:8b:d6:25:ea:4b:db:ac:be:f1:84:95:
3c:9e:3d:70:7a:f5:c6:4f:35:98:86:20:33:31:7b:58:90:e4:
8c:be:cf:f1:6c:ec:19:47:d0:0c:ef:d6:e7:9d:c7:56:af:84:
1a:78:2d:ff:88:8f:7c:b2:5e:4b:d2:2e:11:12:c0:49:d2:41:
df:5f:32:3f:b9:68:b2:ac:62:6f:10:a1:4b:ca:d2:a8:f4:f2:
4d:6d:ee:7b:74:ec:d4:3e:75:56:f7:3a:df:6c:b2:3b:fd:8c:
2f:e2:93:6c:0a:1f:1b:de:8f:11:61:61:01:7a:5c:f2:06:3e:
ff:49:40:f3:74:fb:6d:63:a1:94:74:1e:95:60:38:b9:fb:4a:
2e:24:7a:99:c9:d7:49:e5:9f:29:3d:e3:8b:59:6d:5b:60:44:
44:47:d7:7e:04:c5:44:57:ce:bc:9c:55:60:4e:26:bc:19:9e:
70:a3:5a:c3:83:f6:27:3e:03:78:b4:d4:bc:fb:01:3c:2a:ba:
51:05:a2:9f:8b:ae:03:de:c9:e2:85:21:f7:39:ed:7b:fb:84:
d2:c2:4c:70:57:af:fa:8b:a0:1e:3d:36:53:bf:c0:26:54:d5:
61:e0:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:23:44 2026 by rpki-client