Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
File: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft (raw, json)
Hash identifier: 1zMJN+20YKw5qx3H9GNcAItto9vLq32WsTwGjGeK+x0=
Subject key identifier: 12:35:5D:40:FC:42:45:3A:97:88:8B:59:53:44:25:22:6D:17:B0:14
Authority key identifier: A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
Certificate issuer: /CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Certificate serial: 01A0D01280FC2BF2ED547E3DC8CE14484141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:08 +0000
Manifest this update: Wed 23 Sep 2026 21:01:08 +0000
Manifest next update: Thu 24 Sep 2026 21:01:08 +0000
Files and hashes: 1: KnqLm83Z2hlavX1T4fc9lfOMzqw.roa (hash: r6PDB8P6tsiT5QQpwA2/Urm/y2YE3Dk/QLO59cu8riw=)
2: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl (hash: /mBlBjN7nIxJW4+iiO7K09BpkAi8McSZMCn3a0fRvek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:80:fc:2b:f2:ed:54:7e:3d:c8:ce:14:48:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Validity
Not Before: Sep 23 21:01:08 2026 GMT
Not After : Sep 24 21:01:08 2026 GMT
Subject: CN=12355d40fc42453a97888b59534425226d17b014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:9a:21:ca:7d:4b:1c:76:9b:af:bf:18:8f:
2b:0a:7b:7f:93:e5:cc:60:7f:88:33:c7:ed:d9:05:
75:87:9b:cc:22:8e:2f:9b:78:86:58:3e:1d:0e:f3:
a9:d4:8f:71:c6:c1:de:af:bc:b4:d0:44:a0:5d:88:
d1:3f:c6:06:04:1b:87:a7:10:bb:5a:a6:47:ef:44:
e8:e6:5f:3b:43:22:2b:d6:ee:ec:11:67:c1:3f:30:
f1:d9:45:b1:c6:0a:e7:39:c5:f6:08:53:f8:32:59:
b6:f1:05:06:5c:19:7b:f9:90:28:69:c7:fa:dc:bd:
cf:b4:87:5f:d5:18:29:30:6d:ec:86:f5:4e:e0:a0:
3a:ea:d8:0e:ef:b5:a7:07:47:72:15:57:01:7e:a9:
a8:05:2d:d5:5a:6c:cf:84:6d:94:86:b2:7d:5d:27:
e0:d8:70:d6:b2:31:28:ad:16:19:f5:44:ac:33:d3:
fd:de:0a:20:3b:3e:26:8d:50:a5:a7:ce:64:f3:f4:
00:6b:93:ba:1a:0f:d3:2e:76:cb:ec:d7:c1:a8:9b:
eb:31:12:ef:3e:1e:76:5e:60:c0:59:61:48:eb:75:
98:c5:18:fc:f2:28:91:bc:3e:04:24:fe:a4:2a:b2:
48:43:86:9a:ab:7e:af:dd:e4:0b:a9:14:24:dc:b3:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:5D:40:FC:42:45:3A:97:88:8B:59:53:44:25:22:6D:17:B0:14
X509v3 Authority Key Identifier:
keyid:A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5b:5f:86:22:6e:b5:30:a1:8e:fe:0b:88:56:f9:29:ab:e0:
2f:93:d0:69:d9:af:16:6d:1e:e3:67:c6:ef:1d:f0:06:d2:cd:
34:d3:67:26:4a:54:36:2a:af:bc:e4:a3:da:af:7d:50:b2:46:
06:f0:14:bf:40:64:d0:8b:dd:c6:95:2d:13:a8:8c:70:c0:12:
94:ed:ea:8d:a4:f3:29:96:d0:9e:67:b4:bd:86:86:8d:6e:b4:
b9:84:c5:6f:39:32:24:b1:88:ee:de:e8:e2:60:68:98:6f:97:
70:43:25:e8:06:8a:9b:ec:8b:8a:9f:02:ff:6d:29:31:6a:03:
25:11:a5:43:0d:64:91:cb:07:9b:65:5d:61:a3:9a:e2:c0:fc:
28:00:8b:0c:51:01:2e:7d:0a:5d:00:84:82:f7:ae:f5:c9:26:
70:b3:d7:05:97:f8:f6:2b:f8:35:20:07:e1:c2:42:62:89:a8:
73:1e:45:01:07:67:93:10:64:06:ee:ce:eb:49:bc:46:ff:c9:
fe:69:01:af:56:8c:04:8e:ac:dd:54:7e:5e:87:1d:96:20:2a:
54:c6:12:07:d1:40:3a:be:e9:c4:9a:ba:50:62:21:f5:88:f1:
f7:b9:d4:25:04:f1:31:a5:8b:f0:7f:39:8a:1e:a0:08:13:7e:
ce:ec:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:47:15 2026 by rpki-client