Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: pRS/v2vb/c3lyP9jayOeFrVaDGtGMD9rik/S3pHmrfo=
Subject key identifier: 29:DD:1F:F9:C3:26:E5:C7:E5:EA:41:3D:DD:DA:EA:1F:AE:DA:D2:B5
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 01A12541F523D740187DF8771F66CECF7ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 10:00:41 +0000
Manifest this update: Sat 10 Oct 2026 10:00:41 +0000
Manifest next update: Sun 11 Oct 2026 10:00:41 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: Q9floyF78qxJFxALI+5PPAHfnVaNXZaSor8ksIPcUks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:41:f5:23:d7:40:18:7d:f8:77:1f:66:ce:cf:7e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Oct 10 10:00:41 2026 GMT
Not After : Oct 11 10:00:41 2026 GMT
Subject: CN=29dd1ff9c326e5c7e5ea413ddddaea1faedad2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:b9:e0:fa:d6:ab:4c:59:27:eb:ff:80:bc:
0b:cc:05:0e:c8:08:fd:21:14:ce:ed:e0:fb:f3:a0:
be:cf:ac:e7:cf:f1:39:a3:b9:ba:be:10:0b:f0:88:
9a:91:7b:05:20:17:8d:8c:5a:36:aa:4f:3f:8a:f7:
dc:70:ae:ea:38:06:d5:1f:38:c1:94:a5:7d:23:ee:
57:11:9a:b4:e7:03:a1:fc:4b:bd:78:da:53:e1:8c:
f7:6c:db:6c:f0:66:3f:b0:eb:82:04:86:ad:5c:63:
5d:32:a8:d9:2a:53:83:bc:be:7a:9e:44:d4:4f:40:
5a:11:d2:e0:1c:f4:10:a3:0a:fe:37:ee:91:96:d1:
93:25:b4:bb:88:6a:2c:17:ae:77:11:66:1b:64:e1:
d1:f9:20:eb:b8:6f:79:89:fb:35:70:2c:be:a9:4f:
e9:2f:74:a9:02:57:b5:8b:73:da:f0:c9:a3:ab:26:
26:6e:2f:c0:a1:0e:20:fc:ca:22:53:9a:d9:27:ad:
78:72:37:1c:66:0c:68:92:2d:c7:c7:98:a8:98:c0:
27:64:ce:9a:75:89:fb:0a:b6:f8:62:51:73:98:13:
b5:0d:ab:c2:e9:35:7e:ea:de:8b:3e:bc:3f:b3:48:
40:1b:19:31:ae:32:9a:36:24:a3:9f:23:b7:44:f9:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DD:1F:F9:C3:26:E5:C7:E5:EA:41:3D:DD:DA:EA:1F:AE:DA:D2:B5
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:59:66:ff:83:3a:31:6f:cd:7e:1a:02:05:2f:8f:c6:f8:
c9:34:23:ac:07:1e:c5:7d:1b:2b:aa:66:0a:be:11:7a:f8:3d:
0b:15:5e:2b:4f:d5:54:a4:98:38:56:20:d0:e4:8b:19:74:58:
03:6b:40:f7:3c:d1:90:0c:df:4a:40:58:b3:22:6f:01:33:c5:
5a:4f:46:63:e8:3e:b7:7b:88:1f:70:fe:d2:e8:10:73:96:e9:
bf:cb:df:c0:fc:ed:b8:c0:70:88:c3:ee:60:73:47:67:3e:0c:
89:71:45:fd:ef:62:32:bb:28:67:ac:4f:b8:54:81:e3:06:c1:
ee:96:04:22:21:d8:4d:ba:80:9e:ca:90:33:c0:48:55:04:89:
9a:31:ca:31:87:4a:ed:9a:12:55:28:bf:5f:69:14:ce:fc:31:
1c:bb:cd:e6:27:2d:80:41:35:7a:16:4e:de:0b:a7:d3:d7:c5:
92:8f:02:54:65:e8:a9:91:35:fa:db:df:f4:66:54:3f:87:20:
86:ae:d8:b3:7b:91:56:50:d0:48:42:04:8c:bf:6b:4f:83:2e:
05:67:1f:5c:70:96:0c:1c:37:78:07:ca:85:81:80:e0:3a:24:
5e:3f:6c:c6:a8:9b:71:0c:e6:73:18:40:d2:f2:84:7a:05:6b:
c2:7b:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:56:51 2026 by rpki-client