Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: DaIaqYlP+jCXToxGv0yfHmzmZ5eRhGCw84PswceSp1A=
Subject key identifier: CC:62:D3:D7:E9:7F:59:1B:BF:AF:8A:A8:86:CF:CD:3B:DA:CA:6D:74
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 01A0C47C68831730836D64B47B7E1537772E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 15:01:22 +0000
Manifest this update: Mon 21 Sep 2026 15:01:22 +0000
Manifest next update: Tue 22 Sep 2026 15:01:22 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: +akzKQNt2XxrSZSG0eeby2jqkqDpKad0jPCjKenjy/Q=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:68:83:17:30:83:6d:64:b4:7b:7e:15:37:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Sep 21 15:01:22 2026 GMT
Not After : Sep 22 15:01:22 2026 GMT
Subject: CN=cc62d3d7e97f591bbfaf8aa886cfcd3bdaca6d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:85:12:c3:41:88:44:7d:64:2b:b4:6a:3a:
a2:a5:4c:44:a8:63:72:b0:5e:1c:c0:26:86:2b:6f:
c9:c7:32:7a:89:26:bb:8a:00:29:39:54:ec:dd:ba:
56:4f:27:fd:af:06:80:95:da:fb:6b:bd:30:dd:c0:
68:ae:66:80:c3:81:87:a0:93:06:e2:a4:a3:e9:c5:
c9:5c:f9:11:b2:6e:96:3d:3d:12:25:9d:14:55:c0:
30:66:5f:81:bb:aa:7a:84:71:b3:e8:f7:a9:f3:20:
5f:b9:db:b4:89:7c:e3:74:ea:2c:f5:ac:ed:08:76:
2c:c7:89:ba:87:dc:d9:8a:ff:1d:6f:54:9e:69:6b:
d7:af:6f:7e:32:bd:9c:f7:e1:2a:c2:94:6a:51:bc:
80:49:1e:8f:15:b9:aa:c5:35:7c:f2:30:91:e3:51:
99:60:7b:7a:6e:c2:e5:bd:32:b8:fc:0e:f7:fc:4a:
e2:d0:3e:a9:35:9b:fb:c9:67:93:db:2e:e0:a7:15:
26:66:08:60:63:70:22:97:c4:b0:df:1c:7d:7f:a8:
4a:20:86:c9:9e:1f:09:c3:cc:e0:f3:b3:77:2d:35:
9c:bd:a9:ec:fe:43:9f:39:10:5d:08:58:22:79:92:
68:92:40:00:a2:01:f2:13:50:b8:e4:e1:61:8e:bf:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:62:D3:D7:E9:7F:59:1B:BF:AF:8A:A8:86:CF:CD:3B:DA:CA:6D:74
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e4:ad:c3:88:07:c6:73:1e:15:38:dd:fc:f3:88:a2:6e:6d:
56:35:fd:04:b4:e0:17:d4:fb:dc:ca:81:93:1c:fe:37:b6:a1:
41:63:5d:1a:b9:6d:01:3f:0f:1e:6e:66:e4:3d:49:ad:cc:62:
d9:68:01:2e:3e:c4:23:de:3d:f3:ef:97:8e:2f:89:6c:75:13:
83:af:80:8c:97:c1:8f:6e:08:3e:c9:8b:cf:7c:10:36:0c:94:
47:21:56:5f:35:2c:d4:53:ec:b3:e5:d4:10:15:f8:84:86:af:
6b:1a:a6:11:d9:8a:53:27:42:2c:79:46:5d:6a:1f:9a:85:f4:
f1:d9:48:23:73:62:8c:78:31:ab:f9:b9:c3:58:1f:1f:b5:c1:
3d:94:9f:11:fd:ba:50:13:f1:a4:7f:38:bf:d9:3f:97:30:06:
08:62:d0:91:df:14:e2:dc:f5:ed:1c:b5:cb:bb:a8:01:1a:6f:
d5:87:73:63:34:98:e4:81:ab:43:0a:84:bc:d0:24:67:a5:96:
1d:2b:3e:46:f9:a4:55:37:52:46:f6:f4:ed:43:98:ff:d8:50:
52:a1:2a:ea:88:b6:37:37:94:da:58:2f:52:0f:d3:31:93:fe:
fe:88:63:a6:e0:68:55:fe:40:08:32:34:35:fb:4d:91:46:94:
07:39:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:16:12 2026 by rpki-client