Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: fqBWzaRBmiE40QwQm7eU+NmKZGIBMiOhNfy+WEVdzTY=
Subject key identifier: 78:6D:2D:28:38:3C:C9:B1:93:26:7F:2F:FA:18:92:CD:D5:93:13:0B
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 01A1201BB31E3847877BAC6FD5256D367135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 06A8
Signing time: Fri 09 Oct 2026 10:00:48 +0000
Manifest this update: Fri 09 Oct 2026 10:00:48 +0000
Manifest next update: Sat 10 Oct 2026 10:00:48 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: HbBCgWcP7CL7XiP7H55R9PbJUumX0E2ySJv4t8NmEYs=)
2: DVxcthJ5zcZ8COkBA3rotGAlLFU.roa (hash: vJnipHRerz0UttumCZypDHr2IzvHL7fPbWoqduV1jL8=)
3: iDjUHReMaiMBvtjZdmRz4HvetFg.roa (hash: jPu0BoNWhKVwiGPpdPSY4iU5CH4YO6NsUMtetTUIS9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:1b:b3:1e:38:47:87:7b:ac:6f:d5:25:6d:36:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Oct 9 10:00:48 2026 GMT
Not After : Oct 10 10:00:48 2026 GMT
Subject: CN=786d2d28383cc9b193267f2ffa1892cdd593130b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:bb:a2:be:11:b4:ca:10:4e:89:4e:d1:a1:
9e:60:25:9e:de:bc:28:8f:a8:0e:2e:68:22:84:a5:
dc:19:2b:01:96:75:c2:54:5b:0c:cf:45:e7:06:ec:
07:bf:57:a5:25:69:4a:5c:17:91:65:c0:02:de:4e:
4e:58:07:aa:54:7d:84:e9:ad:b5:32:1b:12:24:96:
bf:3e:c9:dc:47:19:85:96:4b:63:3e:1a:4e:d1:43:
1f:68:01:01:d6:8f:00:b1:33:55:f7:f2:53:ee:96:
91:06:80:e5:3a:d2:52:cc:8b:83:6d:08:37:6a:46:
8c:b4:7c:ae:84:cd:51:40:cc:71:aa:52:3d:57:86:
96:17:ae:57:09:41:19:71:b1:76:ef:80:ce:d2:a5:
53:34:31:d2:84:19:7d:16:44:c0:4a:c3:a9:bb:9c:
b9:aa:9d:e3:52:f7:fd:7f:f0:59:75:45:10:0f:e4:
38:f0:09:25:92:d6:8a:cf:10:8f:b1:8f:d6:2b:03:
fd:d2:23:40:84:5d:35:90:4f:5c:da:2c:8f:f1:cd:
c0:ef:23:d8:a0:de:a4:69:16:2d:b3:39:bb:49:01:
e9:c1:56:9d:2c:77:c7:31:9d:e9:2c:c5:9a:0d:82:
09:60:26:00:6a:d2:ec:1a:e0:5d:92:be:ee:75:4d:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:2D:28:38:3C:C9:B1:93:26:7F:2F:FA:18:92:CD:D5:93:13:0B
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:77:d8:bc:d1:87:67:27:85:f8:9f:c6:19:6d:39:30:70:ea:
60:11:e7:f9:92:04:e1:ea:e5:ef:ca:65:3b:e7:0b:7e:03:80:
77:4c:94:3b:e2:b8:82:a8:81:c2:cc:dc:4f:71:50:1a:7d:f0:
8f:1e:9b:aa:ad:79:2e:30:01:4d:c9:5d:40:fd:e5:d4:ad:de:
b6:56:82:8c:6e:b1:82:e0:4e:39:2a:97:b3:fb:df:76:94:f6:
34:e9:74:12:2d:4a:17:e1:1a:63:49:fa:0e:79:61:cc:36:60:
b2:c3:51:c5:e8:84:ed:38:a2:f6:6f:84:2f:55:98:a7:82:8b:
d3:5a:66:1b:8b:de:27:3b:70:fd:89:87:95:0c:3e:66:48:8e:
c9:43:7d:30:bf:57:10:fb:81:8f:0e:58:d9:ad:87:44:5b:b6:
17:0c:97:e4:0e:49:46:6b:19:29:8e:a8:60:65:a2:9b:9d:8f:
d8:91:6a:b5:db:e3:d1:70:ff:c0:9b:f5:aa:36:c0:ce:76:59:
73:fc:b5:84:75:2f:a3:b6:d9:3f:61:e1:e0:37:8f:da:aa:a4:
02:ff:9f:17:86:65:eb:39:40:ff:d5:48:16:5c:41:96:32:6d:
99:6b:d2:e2:ad:e5:43:99:cc:ac:f4:32:f6:42:95:69:20:f7:
ff:e8:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:27:02 2026 by rpki-client