Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: cywL+8VNdz1pmz/pTGkyqJ/jJAezO3q94y08ehv4ikU=
Subject key identifier: A4:BE:8C:2B:4B:C6:4E:D0:7D:96:2C:65:08:F4:97:D0:E9:6C:B6:49
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 01A0C8C719757527B14878B93325ACE75DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 11:01:26 +0000
Manifest this update: Tue 22 Sep 2026 11:01:26 +0000
Manifest next update: Wed 23 Sep 2026 11:01:26 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: JlgGH3iO3qYQCq2QsDhVdO0+kXViCdnEnL4MxpwJqHE=)
2: l26a7R_zJZToxzZfQDSNdGwONXo.roa (hash: f6mXkllCRchDTdmRlgeark5dgGsFI7jH1YE/DCr29Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c7:19:75:75:27:b1:48:78:b9:33:25:ac:e7:5d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Sep 22 11:01:26 2026 GMT
Not After : Sep 23 11:01:26 2026 GMT
Subject: CN=a4be8c2b4bc64ed07d962c6508f497d0e96cb649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:e9:d6:df:74:4e:20:05:e0:2e:a6:e5:c2:
bc:cf:6a:a1:01:45:3c:30:15:4a:a8:4c:ce:fe:4d:
61:0b:4d:e3:8b:0f:8d:51:a9:1b:02:b0:10:ba:37:
d9:43:b0:bd:a1:79:c1:19:1f:36:46:91:19:64:73:
f4:14:0f:fc:41:6d:0a:b1:f4:78:a0:13:04:b8:10:
2d:a3:ae:14:90:6c:28:dd:8b:1a:94:33:cc:65:c6:
6e:c0:9e:bc:b1:0d:a6:16:a6:77:60:41:8c:5c:93:
a4:f1:35:e7:42:d9:49:28:44:22:ba:15:b3:46:b8:
fc:08:13:ac:83:e1:51:7b:62:6d:d6:bc:43:a3:a9:
cf:98:8a:9b:d5:f1:e3:77:1a:20:5e:ef:6f:85:5e:
66:9e:ea:4e:22:60:c4:d1:d9:b7:ff:b0:e6:30:ba:
c2:e3:5d:3e:1f:fc:5d:45:62:73:98:eb:a5:66:0b:
1c:9c:a3:02:48:3a:e6:29:c9:57:97:f3:ff:48:0b:
db:25:17:68:2e:58:20:73:b5:4a:24:48:20:40:ad:
84:95:2a:e7:3a:9a:5e:d6:96:0e:e6:e2:90:2f:0a:
a5:26:94:ed:a7:eb:66:50:cc:ff:37:04:e8:eb:8d:
42:a1:a5:bb:72:5d:b8:c3:06:aa:81:47:08:a3:71:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:8C:2B:4B:C6:4E:D0:7D:96:2C:65:08:F4:97:D0:E9:6C:B6:49
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:ce:51:99:b9:8c:c9:ad:c9:da:a6:df:bf:fd:1e:8f:42:
a7:d9:20:50:a7:15:e0:76:5a:74:f1:01:3e:50:b9:24:89:21:
9d:26:a7:74:3b:3d:73:0f:e3:8d:fd:a1:e4:1e:a4:ae:20:24:
cf:8e:da:29:4f:09:62:68:f8:9b:49:86:78:28:23:81:9c:68:
a7:cb:48:b3:2f:90:8b:16:bc:82:2e:65:a3:b1:e8:f5:fe:38:
17:e3:b4:d6:e2:75:7d:3c:0c:83:69:74:45:e2:ab:78:07:a4:
65:88:bb:4e:a0:77:1f:2e:64:cf:ac:8f:ac:24:d8:9d:f0:75:
9b:e5:7d:79:f7:a3:00:e4:02:2e:36:c2:7a:66:6d:6a:e3:14:
6b:0d:3e:11:04:5b:62:ca:4a:43:35:79:a9:a2:a0:03:e6:3a:
7b:0c:0e:ee:ad:e1:3d:6d:e2:7d:a2:86:40:e2:ef:30:ae:53:
73:32:60:df:48:1e:f0:be:a4:22:92:65:55:cd:74:28:a3:58:
05:09:60:0f:64:c5:14:6c:8d:72:18:e9:a7:fd:b3:a5:50:ad:
2d:6e:81:79:e6:45:90:95:4c:81:6a:11:ae:3c:e0:32:47:e4:
9a:a0:4b:81:78:5f:db:57:ae:52:bd:f2:b9:be:4e:e9:50:c0:
0e:42:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:10:01 2026 by rpki-client