Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
File: 5cfDmlkS3cIen2tRmJZyV2ISeDM.mft (raw, json)
Hash identifier: h3DIJslm05b1OxMhod/zGwKgXKGlgh4JpA+IN5BAwIs=
Subject key identifier: 66:34:E2:B2:5D:B8:E9:64:DA:1A:D8:E7:C8:3F:4C:52:31:43:AA:E3
Authority key identifier: E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
Certificate issuer: /CN=e5c7c39a5912ddc21e9f6b519896725762127833
Certificate serial: 01A0D94CCA357A3DD6BC8E33808EA3A72F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
Manifest number: 05EA
Signing time: Fri 25 Sep 2026 16:01:23 +0000
Manifest this update: Fri 25 Sep 2026 16:01:23 +0000
Manifest next update: Sat 26 Sep 2026 16:01:23 +0000
Files and hashes: 1: 5cfDmlkS3cIen2tRmJZyV2ISeDM.crl (hash: JTY8X8yOk4KViwW/IYQTI7pooAVtnpZmLD2dY1bCnM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:ca:35:7a:3d:d6:bc:8e:33:80:8e:a3:a7:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c7c39a5912ddc21e9f6b519896725762127833
Validity
Not Before: Sep 25 16:01:23 2026 GMT
Not After : Sep 26 16:01:23 2026 GMT
Subject: CN=6634e2b25db8e964da1ad8e7c83f4c523143aae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:78:e3:8a:8e:01:e7:01:cc:fc:10:88:51:
76:d0:08:99:18:b4:d1:72:0d:20:b9:a6:58:24:5d:
7c:b5:fe:33:9b:90:48:5b:6c:0b:73:a6:8e:2f:f9:
2d:a2:6f:5c:87:cb:71:0f:e7:18:9e:3f:b1:12:38:
23:d3:2f:02:e1:2e:f5:af:39:86:b4:09:03:55:0d:
cb:6e:ce:b6:97:c3:ea:29:cd:86:e3:4f:d4:f0:8f:
c8:d4:3a:b7:2c:0c:2c:9f:44:37:a8:e2:4a:39:51:
3b:e8:5e:96:79:f3:78:44:17:4b:fa:5b:57:f6:ac:
ba:ef:a2:2a:e6:1a:51:89:71:4a:ba:dd:f3:b5:a7:
c2:db:20:06:cb:78:3a:b9:68:90:1d:d3:cf:ea:3b:
e5:37:99:8a:57:dd:fd:c1:63:03:9b:c8:48:c6:2b:
2c:aa:05:e1:2e:e8:17:7c:ad:ae:40:99:f7:21:45:
80:9e:14:c6:f5:e4:8a:a4:f7:a4:0a:78:3e:46:75:
45:a5:e2:ec:c0:74:ef:40:42:50:c7:de:bb:b2:2f:
96:97:c1:68:a0:02:dc:86:12:3d:23:64:97:51:3b:
1d:39:bd:85:c8:86:c1:2e:dc:9a:d7:eb:eb:8a:81:
94:4d:0e:e3:90:e5:84:5e:a1:b4:3f:b7:28:6a:32:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:E2:B2:5D:B8:E9:64:DA:1A:D8:E7:C8:3F:4C:52:31:43:AA:E3
X509v3 Authority Key Identifier:
keyid:E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8d:30:4c:96:d0:37:4f:4f:12:1f:7f:56:70:fa:a4:da:50:
ad:c1:9c:00:5c:22:8b:18:33:51:84:a5:6f:05:46:29:50:37:
f8:c1:a4:20:f5:49:6c:42:36:ec:31:7e:89:7d:52:98:ef:61:
c5:65:e5:a8:cb:f6:79:21:cf:13:45:f7:63:a6:85:c2:b5:08:
74:f5:fb:02:dd:9c:d0:ed:f7:6f:3e:3d:79:15:f4:63:63:4e:
95:e0:fb:1f:1c:5e:70:e1:c7:1d:91:67:4d:e2:99:ec:77:1e:
1f:7b:e9:0d:32:1e:87:98:d4:93:a1:5d:45:31:7e:b6:51:99:
28:91:71:b9:eb:a1:7e:11:b2:1b:47:08:2a:d6:bf:02:8c:46:
ec:f3:76:c6:65:57:cd:1d:bb:b8:a4:00:db:d0:75:de:1c:0d:
62:8a:1f:38:af:20:dd:bb:38:80:ca:46:54:27:9a:f6:01:41:
0d:3e:ec:6a:fa:fd:50:ce:bf:e1:ae:74:bb:13:5d:d0:c6:4e:
1b:40:84:0f:9b:66:23:95:2e:3b:1a:50:d6:e0:aa:2c:8a:cc:
c7:d4:e8:2c:ce:32:83:7f:78:42:fc:e5:77:59:69:3f:49:ec:
32:88:03:a2:99:ce:d0:ac:87:40:bc:12:58:e9:6e:ab:dc:ed:
a3:d8:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:32 2026 by rpki-client