Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File: 5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier: THVkLrIRnDy1KzOgB7h2qe8VTfE0BOpPz3pTcuLkvMA=
Subject key identifier: BF:FF:82:63:E6:9A:23:71:EA:0C:A3:19:DA:EE:C9:D4:8B:B9:22:63
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer: /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial: 01A0CA473731E52AC416AAC610A655AD66EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number: 10CF
Signing time: Tue 22 Sep 2026 18:00:59 +0000
Manifest this update: Tue 22 Sep 2026 18:00:59 +0000
Manifest next update: Wed 23 Sep 2026 18:00:59 +0000
Files and hashes: 1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: 2Y7XK1e6a9j+YKdMqWMp8dGyBsnXAsaimdzwX/Y7BLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:37:31:e5:2a:c4:16:aa:c6:10:a6:55:ad:66:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Validity
Not Before: Sep 22 18:00:59 2026 GMT
Not After : Sep 23 18:00:59 2026 GMT
Subject: CN=bfff8263e69a2371ea0ca319daeec9d48bb92263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:d1:3b:f8:f2:fb:c6:d1:5f:23:fa:ec:8a:
c6:da:fd:c8:c2:0d:a6:b1:79:71:a3:de:9a:60:df:
33:41:be:bf:bb:4f:24:62:cd:6d:f5:81:eb:8e:5a:
9c:2e:57:95:6a:0e:f0:95:0c:15:b0:dd:fe:3a:86:
39:65:d5:f6:9d:3b:b8:a4:67:e2:40:b6:ea:fe:83:
6b:ef:1f:f9:b5:91:01:52:37:f3:b6:59:dd:4e:e0:
98:09:8d:75:c7:25:6a:a8:5e:80:d7:55:6b:2c:4a:
5e:02:f5:a2:4d:bb:bd:96:3a:48:41:7a:1c:d9:39:
d4:36:03:94:4c:89:52:39:19:d8:fb:98:da:09:33:
53:69:4e:74:7e:12:b0:bb:4d:b8:c6:bb:e0:6f:e4:
8d:36:e0:0e:ea:a6:3a:3d:06:c6:01:bc:6a:a3:6f:
39:35:90:9b:4b:ff:0e:ae:36:f4:43:ee:3c:65:18:
5c:64:bb:d1:ef:94:be:e9:55:a1:11:b4:d7:12:ae:
c1:07:a1:40:8b:28:36:81:81:42:c9:10:14:4e:ad:
21:44:4d:67:08:3d:c5:20:da:43:be:c1:af:dc:94:
17:6e:88:67:b2:46:a3:2e:1c:7a:4e:78:f1:a4:9b:
d4:e4:41:56:9f:c9:46:fd:3b:58:10:19:24:2b:4a:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FF:82:63:E6:9A:23:71:EA:0C:A3:19:DA:EE:C9:D4:8B:B9:22:63
X509v3 Authority Key Identifier:
keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:11:a6:03:69:c2:f2:65:96:25:ac:e3:fe:6c:62:ce:63:
39:7f:fe:0f:5c:6e:1d:3a:af:19:d0:0f:b3:b9:75:43:dd:8d:
07:7e:48:37:97:0a:79:4f:3b:e2:1b:ae:85:ea:b4:de:bd:88:
d1:a9:0f:93:c6:45:3e:ab:b1:ef:90:7e:e1:7c:4c:a1:ed:20:
f6:2f:c0:e5:ba:fe:09:ab:f7:28:e2:2f:e0:e2:4a:d2:8e:f8:
74:88:12:95:13:b6:75:87:99:c2:54:8e:81:49:57:7d:0e:d3:
99:be:59:dc:00:57:1a:87:c1:5c:5c:15:27:27:4f:30:c8:4c:
a0:ca:24:d4:dc:7b:3b:a9:12:76:80:8d:d9:c0:c5:ed:1c:b6:
f5:aa:a0:8a:b5:31:e9:91:9d:d7:19:5f:f8:a7:98:0a:5c:5e:
a6:02:c1:07:75:69:88:89:8f:6b:85:a4:9f:d1:b5:62:ed:46:
42:8d:ed:05:5a:92:49:d3:69:1f:be:3c:0e:67:43:29:ba:68:
a6:c9:7d:f2:38:fd:49:72:87:89:34:d2:31:98:ce:e6:47:97:
46:b7:db:58:35:f6:62:b6:fd:dd:44:26:fd:b0:13:eb:5a:f1:
e8:d6:94:50:68:c9:29:6e:a6:94:3b:24:d4:34:22:a2:4b:7b:
f6:d8:42:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:55:43 2026 by rpki-client