Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
File: M5rxdTy1gnt7QzdTtXxHjUqtbus.mft (raw, json)
Hash identifier: kJ71xw9nBK1qhyoUEDOwJZEWRYczglo6sctxwtDUo84=
Subject key identifier: 40:01:04:CF:C3:94:37:05:8A:1D:37:3F:D3:E7:46:E3:16:D8:DB:F3
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 01A0C8C67300398A2A740A6396615EE608DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 11:00:43 +0000
Manifest this update: Tue 22 Sep 2026 11:00:43 +0000
Manifest next update: Wed 23 Sep 2026 11:00:43 +0000
Files and hashes: 1: 1Tl9UIhCqeKOtou3xYXepXYcMhg.roa (hash: 5AkZht3+a78cap99bgI8nP4neP9y8A6GlDJrz6Dteng=)
2: B48qkRdOfa6_cPOlPzDgOqUlWSg.roa (hash: wSI7kbco2gmflRi9epKlQvIQAAUD21wLcZHQLK7txNA=)
3: DQBKGiZGDTDf_MhJYHXFm05lwLY.roa (hash: n5gQOXIBUlgRM18cV4srzrmBIxmZMJi0pTGhNSWt7ec=)
4: M5rxdTy1gnt7QzdTtXxHjUqtbus.crl (hash: 0vNS0+ERUVk6e14qUP6Uqg+B6IZa/NcenSj4lL7B4ho=)
5: QSCGwSsoRSbt1W2PmX3ch0nQTSY.roa (hash: R4X1zIr5apakhLTxXprIGVOA1Cqy//r8dlHgHlvik2c=)
6: Srwm0O5XziVvTMCAUPAPHDtyOL4.roa (hash: Xqk8aLHxkijmEc5CYN4gn6Fq5GjplNDxfZlZrnMA9sY=)
7: XRa-p6VrifJy5ugNFDkQeJ2v7pg.roa (hash: vt5PHv7coIM1JmNeX6jiBcQ3MwSimt+j/3Pge4DDNa4=)
8: ZNzJPMt2B1SyImQTB05Yvsvkd14.roa (hash: leKWlyfh6OtsxG9LVgSYbJDdSIf0o1TbZ02gUSkJ9+8=)
9: pr-1xePD4ZCkXz1RmxaUJla7Wk0.roa (hash: /UkrVYY41cQP/8A3LMNbtpf3fvfzlt7M2OaVy/IHrJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:73:00:39:8a:2a:74:0a:63:96:61:5e:e6:08:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Sep 22 11:00:43 2026 GMT
Not After : Sep 23 11:00:43 2026 GMT
Subject: CN=400104cfc39437058a1d373fd3e746e316d8dbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:12:21:7a:25:56:93:c2:3f:e1:3e:9e:4b:
c0:95:57:2c:9a:e0:4e:3e:71:f7:20:06:81:25:b8:
12:7b:98:47:19:49:47:9c:a0:4a:0f:4c:33:bc:fc:
8b:5e:6d:37:9c:d0:62:36:0b:6b:d0:3c:1a:e1:9b:
9d:59:01:33:6a:9f:62:be:4d:09:c6:e0:20:1a:05:
36:a8:27:fd:7a:67:b3:f5:43:1e:78:32:fa:52:ea:
f0:2b:ec:4a:00:8f:dc:2b:a6:33:bc:5a:8c:30:35:
84:28:b0:51:41:c7:90:04:66:89:a1:eb:a6:c0:43:
5b:24:6c:bd:ae:d0:0e:52:00:a6:6d:ad:46:06:96:
3b:3f:a2:15:2a:2d:b1:39:ec:f8:b5:a7:f2:b4:74:
ef:13:cb:06:57:0e:5d:21:d3:a0:a0:e2:23:be:79:
26:59:47:56:4e:43:45:bf:07:95:5c:46:cc:9d:bf:
31:2f:a7:9c:cf:7a:d3:8e:68:bf:40:44:eb:0e:be:
46:92:0d:d1:d6:2e:f6:02:06:9f:5b:7f:c0:f3:0e:
a3:f3:03:f2:c9:03:65:e5:cc:27:7e:3b:22:01:d3:
cd:ab:7b:aa:f8:e9:fd:70:3c:b7:5f:eb:6b:41:95:
2f:73:33:e2:e4:2f:49:83:db:ec:b8:28:d5:b0:37:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:01:04:CF:C3:94:37:05:8A:1D:37:3F:D3:E7:46:E3:16:D8:DB:F3
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ff:79:85:bf:9d:7f:4a:3f:cc:8f:75:12:3b:e7:87:2f:1f:
36:05:84:0c:91:01:da:bd:1d:9b:21:85:62:d6:17:de:4a:32:
f6:e1:01:91:52:b4:d7:f6:5e:ac:de:cf:84:7e:54:01:24:a2:
f8:ce:3e:6e:52:fb:9f:6a:29:4f:62:f4:09:0f:f6:24:0c:ef:
2b:12:c5:ae:ca:5c:9d:94:7c:b7:27:8e:0c:21:a1:f5:39:c0:
ff:b9:a5:d4:ef:58:b0:05:3b:9f:06:8a:44:fb:68:a9:90:3e:
b8:8b:4c:7d:ad:80:55:55:d5:1f:89:a1:2d:95:f7:66:ee:dd:
4f:04:fb:d6:6a:15:a5:22:1c:94:d1:1d:76:c9:89:d0:15:72:
4b:de:4e:7b:3c:d1:9d:0b:2d:d5:81:30:12:85:19:24:0d:64:
be:03:5e:17:79:65:e6:29:33:96:f5:09:70:37:65:01:6e:e1:
15:d4:7e:26:5c:3f:98:e8:74:0e:e2:38:eb:2f:cf:de:60:f1:
1b:fa:dc:a8:33:99:0e:e8:cc:f7:4f:0e:dc:2a:25:bc:d4:24:
c4:6b:e8:c3:b4:f1:3a:25:19:e5:dc:5b:69:5a:c9:70:61:5a:
67:d2:19:03:d0:84:02:e4:8e:28:bf:16:ca:5c:32:8c:fc:fd:
97:24:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:46:36 2026 by rpki-client