Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: fyDRZ8QKx5ckT6hnZyJY79ACVxBdqlPaaki1/SIHgZQ=
Subject key identifier: B0:1B:FC:DA:2C:D2:DE:1E:AF:48:51:5A:86:2D:F9:96:0D:C0:9F:CF
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 01A131EB5F0D038FB729B7AD59DB084D869F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 172F
Signing time: Mon 12 Oct 2026 21:01:11 +0000
Manifest this update: Mon 12 Oct 2026 21:01:11 +0000
Manifest next update: Tue 13 Oct 2026 21:01:11 +0000
Files and hashes: 1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: Et452zDS6g5Q2ycg7k5t8c/WneKWspoBuk7zdAjYbRM=)
2: kVVy-YWr30S0GSdgLLy6UhLp1JQ.roa (hash: MLFi2OYZr+v/54OGb70/05XIuu/GA7oMfXFZI0ZBmD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:5f:0d:03:8f:b7:29:b7:ad:59:db:08:4d:86:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Oct 12 21:01:11 2026 GMT
Not After : Oct 13 21:01:11 2026 GMT
Subject: CN=b01bfcda2cd2de1eaf48515a862df9960dc09fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:e4:d2:bf:3f:69:6f:b6:2c:4f:67:af:45:
3b:73:a8:8a:40:73:d6:bc:80:66:dd:3a:40:e2:2e:
70:50:98:b7:72:5a:95:6a:df:35:61:90:be:81:f3:
e4:c4:5a:6f:07:b3:0a:98:8f:eb:ff:29:4d:6c:e8:
7c:b0:e6:7e:14:30:6d:b9:79:5f:b7:5a:77:2c:54:
57:cb:d0:6d:a9:0a:63:3a:0e:ea:a0:d1:96:e9:31:
bb:4d:d8:2d:af:e3:a3:3f:b4:aa:d2:dc:68:4e:c3:
53:42:47:9d:cd:51:71:59:30:7a:68:a6:71:9b:4b:
15:fe:20:d7:0a:01:8b:21:9d:91:58:a0:0c:86:82:
fb:25:39:b9:09:8f:85:47:18:4c:4c:1d:a0:52:bd:
0e:e8:77:b6:a3:f3:f6:b2:c1:b8:bf:6c:18:e9:74:
b2:02:d5:fa:78:0c:08:3f:55:f8:e8:a6:0c:76:f8:
58:a6:41:d7:f7:f5:4a:52:89:17:e7:59:1e:b2:73:
ea:a8:ca:14:7f:fd:72:ca:0d:d3:10:df:47:7e:89:
f0:6b:89:ea:e0:b9:b1:be:6b:90:06:7f:30:bb:48:
ff:32:03:31:b0:fb:33:c8:91:51:31:91:c5:f6:97:
a8:c3:66:fc:0e:ab:a6:db:d6:ba:fe:9f:58:3a:1d:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:FC:DA:2C:D2:DE:1E:AF:48:51:5A:86:2D:F9:96:0D:C0:9F:CF
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:44:aa:b9:38:e9:ed:d3:ed:94:3b:b7:35:23:d5:51:6c:c7:
b0:68:74:0c:81:a8:26:70:1e:e3:95:4b:fe:78:5b:bb:4b:6d:
b5:d7:61:e6:57:a7:cb:63:f7:45:8c:eb:5c:2c:f5:6f:a6:e7:
40:07:30:69:a8:54:e4:4d:fa:d6:d3:54:03:d8:c3:d3:1c:f3:
1d:eb:b7:f2:03:26:89:91:4a:c9:40:90:ee:ff:0d:3d:37:83:
53:4e:78:88:58:a7:82:43:af:89:1c:6d:97:73:93:cc:a0:2a:
fb:86:08:fb:d8:b6:a2:24:a4:a0:13:97:f5:f5:99:b0:6b:74:
74:11:12:74:95:3b:63:e4:8d:a5:e0:81:b9:c0:34:6c:a4:60:
0e:51:28:ba:38:7c:3a:1f:e2:52:00:00:c6:df:73:90:f8:c6:
a2:8a:9c:07:4c:9b:30:29:48:48:f2:55:f3:21:e0:32:d9:a7:
04:b5:64:bc:3b:c2:fc:0e:97:fe:70:a9:95:c1:4b:b7:7f:e9:
a7:d5:cd:0a:ca:51:5c:c8:0f:8e:e7:65:45:1b:0e:f5:2c:50:
10:41:54:3e:d5:62:9e:8a:bd:61:f8:e4:8d:64:f4:67:37:3f:
18:98:bd:7b:43:b4:f9:87:78:e8:1a:a1:67:ec:e1:21:80:c2:
76:df:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:49:23 2026 by rpki-client