Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier: Ogq1nqJ23Kompjr5f+Limjk9JgV4LliiU+gvG2/LVK4=
Subject key identifier: D3:57:3B:D6:92:2B:BA:C2:A1:B9:6A:67:AA:22:3D:7E:04:D7:34:6D
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial: 01A0C85913CC0138EFBB9D9CD07D8D756254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number: 0D1D
Signing time: Tue 22 Sep 2026 09:01:15 +0000
Manifest this update: Tue 22 Sep 2026 09:01:15 +0000
Manifest next update: Wed 23 Sep 2026 09:01:15 +0000
Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: 8xfU10YuuTDvaO3MpD0CXnUk4B5bXlFx1FDqB+ZY2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:13:cc:01:38:ef:bb:9d:9c:d0:7d:8d:75:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Validity
Not Before: Sep 22 09:01:15 2026 GMT
Not After : Sep 23 09:01:15 2026 GMT
Subject: CN=d3573bd6922bbac2a1b96a67aa223d7e04d7346d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:6b:96:77:43:ae:fc:99:b0:3a:2d:33:ef:
c0:a1:1f:11:16:09:99:b2:51:32:9c:a8:be:29:5d:
a2:e9:bd:ce:58:f4:1e:ad:35:e1:fd:db:99:45:3b:
e6:1c:b6:5f:aa:34:68:e4:81:9b:f1:d6:9f:3f:8d:
1e:17:c0:7c:10:c9:f0:89:74:8d:75:ce:23:03:7e:
c6:4d:17:45:bf:f5:d7:19:1e:3b:c4:66:8e:04:5b:
6e:41:c9:ed:f0:58:fb:71:8b:5f:54:55:3d:0a:d5:
ec:02:09:4a:84:87:b2:07:37:a0:7d:2c:f5:01:1b:
c5:e8:41:75:bd:cb:cf:30:38:a2:9b:bf:5b:85:76:
f8:f9:1c:1a:68:b9:51:a8:0d:00:44:7e:99:39:48:
79:e7:39:40:d3:08:04:be:bb:fa:63:33:9e:c2:09:
cd:75:d0:fd:ee:24:f7:11:a0:ca:79:a8:52:fb:57:
dd:ff:3d:cc:d6:c0:5d:3a:f5:cc:f6:b5:94:65:88:
13:e2:56:57:ca:aa:85:ea:80:40:6d:c6:a4:c5:d1:
54:b3:02:8d:09:03:c3:23:6d:a9:13:ec:74:6d:e3:
d6:18:41:05:70:07:c3:e3:30:0d:52:c1:7c:69:79:
b6:9c:b7:69:e1:e0:4d:90:fe:1d:c7:6a:5c:1f:12:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:3B:D6:92:2B:BA:C2:A1:B9:6A:67:AA:22:3D:7E:04:D7:34:6D
X509v3 Authority Key Identifier:
keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:b6:2f:dc:dc:ea:e9:56:c3:d3:8d:61:3e:7a:ad:3d:ea:
f5:c7:20:03:b7:a9:1a:36:5a:4c:c1:fb:25:74:5c:59:28:7d:
cf:80:77:82:9d:cb:e9:51:7d:9e:c9:64:ab:10:c6:56:de:09:
cb:46:21:e9:9b:01:4e:a0:3f:ad:ec:ae:5c:97:5f:99:99:f2:
a7:91:ea:f6:a5:bd:f5:30:ed:ea:4f:e4:0f:33:3b:32:89:9c:
c8:cb:5e:d8:5d:58:8f:77:15:d6:aa:0f:7c:b6:11:4d:87:8f:
6b:5d:3b:f6:67:06:b5:c9:aa:e0:49:f7:24:69:5c:3f:20:5f:
42:9b:13:0a:4b:8d:ca:66:29:d3:02:9e:f3:be:fe:fe:a2:0b:
8f:29:5b:68:f0:de:f3:8d:49:02:12:1c:a1:48:6d:8a:80:6b:
13:7e:5d:86:67:9c:11:fc:7c:0f:7c:97:b1:33:c0:32:00:ce:
48:31:7e:67:1c:3f:30:9a:a3:54:66:b5:8d:50:4f:ac:1d:21:
2c:5c:c2:c6:7e:24:7e:95:32:8d:5f:d5:dc:9f:72:2e:4f:ec:
bb:4d:44:24:9e:39:a1:09:38:0a:94:82:e1:38:94:51:d7:91:
b0:f3:e9:5b:50:cc:5a:53:be:43:51:b4:9e:98:5c:9d:2a:f0:
ba:4a:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:16:50 2026 by rpki-client