
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: Dx3wQnQ8Gcl99Hy2lKOTER4BMR+2WV0DTUh+G0zbiZc=
Subject key identifier: 48:0C:B0:64:4B:A4:B7:6D:F4:82:8D:EC:33:C7:51:91:2B:53:26:C9
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 01A0C3D75A5B780F0C95E91A34E265358D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 12:01:05 +0000
Manifest this update: Mon 21 Sep 2026 12:01:05 +0000
Manifest next update: Tue 22 Sep 2026 12:01:05 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: ZmZkYuzlscdo2j/yZPoUFhWyvBGf0XzzNcmD0ZC4U6U=)
2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:5a:5b:78:0f:0c:95:e9:1a:34:e2:65:35:8d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Sep 21 12:01:05 2026 GMT
Not After : Sep 22 12:01:05 2026 GMT
Subject: CN=480cb0644ba4b76df4828dec33c751912b5326c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:37:b1:5d:5d:d8:bf:e6:b9:42:30:37:c0:
4f:37:92:44:73:c9:41:2f:da:27:3e:79:85:5d:5e:
f7:8e:8b:e3:d1:89:8d:f1:cd:64:bf:16:59:90:6d:
d4:bd:ec:4a:49:c0:86:24:f2:eb:c6:f4:cc:af:80:
1d:ae:25:9e:b2:b8:b1:82:08:64:dd:38:d4:28:13:
66:09:e6:48:5b:18:21:7b:02:77:8c:11:8e:15:d7:
56:b0:4a:37:c8:8c:fb:45:c8:39:b6:55:31:94:77:
48:09:8d:20:b5:70:ef:e3:a0:0e:d6:4c:87:ed:d1:
4d:43:a0:76:f8:68:c3:78:e6:3c:b8:4f:cc:b3:ec:
f7:4f:cc:55:67:43:95:78:a2:80:f9:25:72:64:ea:
32:94:d5:bd:89:37:a0:44:92:08:bf:8f:5d:38:e2:
19:ff:f8:10:f2:9e:c2:29:7c:fa:71:22:07:41:e4:
5a:0e:70:de:e9:8f:d0:45:bc:82:92:54:92:e9:97:
1a:72:e5:81:30:f8:75:0f:5e:fb:c5:57:28:b2:51:
a0:ca:23:54:d9:84:a2:f0:b7:b9:c7:c8:76:e7:11:
fa:09:04:02:e1:b9:d5:eb:67:56:20:a0:27:59:35:
01:6a:57:dc:6d:59:53:b5:4b:ff:6c:bb:86:8f:09:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:B0:64:4B:A4:B7:6D:F4:82:8D:EC:33:C7:51:91:2B:53:26:C9
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:38:40:8c:88:53:18:33:38:bd:9f:18:43:40:6c:7d:97:86:
eb:18:5e:49:fe:29:1c:a3:f2:cd:99:26:1d:f4:97:d6:1c:2b:
47:c1:7d:14:c3:eb:b2:1b:bd:39:9a:f6:72:a1:ab:a6:89:75:
10:e4:bf:20:8d:e2:f8:fa:87:9e:94:e9:29:8d:41:80:9f:0e:
e1:74:f7:4c:98:1f:34:6d:6f:e3:4e:9e:80:42:d2:ae:f3:b7:
55:8d:7c:97:c8:e9:e6:3d:b3:3e:35:21:81:8d:40:b4:08:60:
38:66:3b:42:3e:b9:70:46:99:d9:43:99:7a:4f:10:76:21:d1:
c4:19:84:2e:d6:95:0c:09:db:26:63:3b:e3:55:9b:3c:df:36:
4c:49:0f:2d:b0:14:8b:8e:69:56:be:bf:3d:72:fe:c1:bd:69:
75:c9:3e:04:31:4d:56:ef:55:9d:4e:d7:f5:dd:f6:17:c8:5d:
6c:c0:60:13:f7:46:d1:49:97:7b:6a:fd:35:26:e1:69:ad:66:
ae:c3:cf:91:48:b1:7b:2a:02:84:56:ff:9e:e8:7a:1e:19:ef:
73:37:93:72:f9:25:92:ec:d8:60:76:59:32:5a:d4:bc:c0:7e:
6e:c3:d3:28:62:02:06:6c:73:ac:b5:11:f3:7c:0d:21:d1:21:
30:23:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:19:19 2026 by rpki-client