Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: mvxzAHlz+93+4+YG13xUapm7drBr3F0AP1a2dye2ReM=
Subject key identifier: 58:F9:82:60:00:E5:28:E8:65:A5:F7:66:A8:89:90:E3:C9:A7:6D:4F
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 01A0C0D5C4657099035C6064006D7F81824A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 19F5
Signing time: Sun 20 Sep 2026 22:00:29 +0000
Manifest this update: Sun 20 Sep 2026 22:00:29 +0000
Manifest next update: Mon 21 Sep 2026 22:00:29 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: XfmiOJZMqNcMkAvTFOx+wha9nE4BjR0YMTPt0P4Hbg0=)
2: sZxrSzhn7wD6WFSw7UC6NwZuEFk.roa (hash: kEkaa7N2aenPpjJ1vqccMcmAKJMsk4dI56LBorB67HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:c4:65:70:99:03:5c:60:64:00:6d:7f:81:82:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Sep 20 22:00:29 2026 GMT
Not After : Sep 21 22:00:29 2026 GMT
Subject: CN=58f9826000e528e865a5f766a88990e3c9a76d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:7b:79:20:30:51:17:43:71:a9:9f:8c:d0:
95:3f:f0:2d:4d:7f:c4:3f:c1:78:3d:97:4a:58:d0:
c7:7f:10:01:1a:e1:32:4a:11:d1:56:4e:87:39:f8:
13:78:3e:1c:4e:56:ee:19:b2:de:fa:fa:ee:4f:20:
3f:2a:00:08:de:0d:54:5a:52:da:27:32:c3:1c:df:
fb:d2:c3:c5:8c:a3:a2:15:bf:66:6b:66:5f:2d:76:
c3:c3:1d:c5:af:59:1a:7f:08:19:8d:51:93:f6:5a:
7a:e7:09:46:55:90:06:e8:b2:be:df:23:40:52:0b:
43:c9:b1:86:84:95:6b:04:6a:48:ab:24:bc:8e:f9:
a0:f1:46:54:9c:1a:11:e4:38:91:ed:92:77:46:f6:
1d:6a:55:1e:4a:f7:05:c2:e2:a6:38:bf:c3:20:f6:
1b:9c:f5:b8:d3:d0:4a:05:82:1b:8a:c3:3c:73:60:
c0:10:b2:4d:5f:97:da:76:01:4a:db:cf:77:6f:b2:
51:24:44:b1:f6:66:d7:7a:46:91:eb:be:73:7f:9f:
6f:3a:95:6c:65:41:b7:de:64:61:7b:74:a8:c6:7b:
12:f4:ba:a1:ff:b0:be:3e:36:06:35:6f:97:1c:16:
72:3c:8a:09:17:76:e8:b6:1d:78:a5:2d:69:3f:f9:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F9:82:60:00:E5:28:E8:65:A5:F7:66:A8:89:90:E3:C9:A7:6D:4F
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0b:ab:0c:fd:fa:13:66:21:9c:e0:12:22:3f:53:3e:f2:44:
c7:59:2b:ec:eb:b4:6b:30:2b:01:d5:bc:7b:72:c1:30:a5:f9:
7c:33:a1:e1:af:9c:fe:01:bd:2b:03:95:40:e6:a4:17:75:f5:
b0:e3:db:bc:e6:06:17:f3:d4:89:6a:f2:fc:4b:96:e4:25:b8:
d0:e9:20:a0:1e:cf:70:ba:7e:a2:d0:ea:79:09:7b:d1:f4:3c:
0f:b6:11:b7:58:71:f4:c7:ce:6d:c7:1a:10:26:07:a6:01:02:
35:44:37:d5:a2:17:ee:1f:4b:eb:8a:80:3c:b2:d7:84:62:d2:
d3:e0:66:96:0d:0a:b1:a6:be:9e:a6:b7:96:02:b4:72:5e:ec:
65:21:a4:6a:da:f6:78:d9:e4:e7:50:8b:00:a4:6b:1f:f9:80:
65:fe:fc:d8:5c:8e:78:cf:b0:0a:87:8f:cd:6f:d4:df:91:0b:
4c:c2:b1:38:c0:54:cc:7d:1e:08:d5:f6:84:e6:cc:ba:b7:3d:
df:f5:2b:03:7c:50:39:c1:aa:86:3b:69:5e:1b:6d:e3:84:9e:
02:af:58:65:a2:64:3f:f3:e0:ed:e7:14:6c:77:72:6e:7c:87:
e0:d8:b9:b8:d1:6b:32:41:ff:a3:89:49:a1:93:a5:e3:9d:e4:
53:37:4b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:28:13 2026 by rpki-client