Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier: w0O4iUttpxmmUikfmoh4dMrxUHXDrRaIa1Zgi4OSa2I=
Subject key identifier: BD:F3:D7:4A:B5:A6:B8:6E:78:62:B8:24:4D:80:86:02:88:55:05:64
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer: /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial: 01A1005B043CD54AC77EFC9FC2BC351325A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number: 0C48
Signing time: Sat 03 Oct 2026 06:02:07 +0000
Manifest this update: Sat 03 Oct 2026 06:02:07 +0000
Manifest next update: Sun 04 Oct 2026 06:02:07 +0000
Files and hashes: 1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: LGwxnx7dUdfj9sukxqYPzYZK28MUae09mOPfcmWP/es=)
2: nwkylzsl9GQOKn32orn5yakjbK0.roa (hash: /75YPo5s/Ms0uyukdFXeyU5GUYakwPsjdM3EpdWBr4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 06:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5b:04:3c:d5:4a:c7:7e:fc:9f:c2:bc:35:13:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Validity
Not Before: Oct 3 06:02:07 2026 GMT
Not After : Oct 4 06:02:07 2026 GMT
Subject: CN=bdf3d74ab5a6b86e7862b8244d80860288550564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:30:09:14:f2:77:9d:bf:05:cd:b7:b6:99:
bd:f5:dd:4b:90:11:33:69:d7:45:3e:ea:c7:39:9a:
f4:1b:a6:c8:89:ad:6f:ad:3b:14:52:c3:98:18:73:
fc:a9:ba:38:8c:9f:25:2c:a6:8d:61:da:ce:b5:52:
b2:65:c5:a0:2b:68:4c:3b:3f:93:9f:f0:64:3b:a1:
89:14:3a:0b:fe:b9:69:b8:f2:1c:af:8a:be:9e:db:
42:a5:2f:9c:93:b7:90:dc:bc:30:33:96:fe:d1:29:
4c:59:c2:85:e8:0a:ae:fc:45:7d:2b:a9:2e:e0:d7:
4f:f9:ca:7b:67:cd:13:d8:6c:38:2c:dc:a5:9e:e5:
e5:71:f0:47:5c:8d:a6:b7:ca:0f:05:08:e5:c4:75:
99:96:37:8f:df:26:61:1f:c8:94:c8:fc:e9:f4:23:
68:e2:69:ae:d7:7a:e4:00:9e:79:71:0a:0d:9d:45:
34:86:51:6d:34:7e:4f:c6:f5:61:c8:79:c2:c2:33:
a6:5d:5f:58:1c:42:db:c3:3b:4c:15:42:15:cc:ec:
e5:c1:03:c7:c1:b1:c0:79:a8:29:77:6f:f0:7c:58:
9e:36:33:17:9e:07:de:44:40:bf:90:aa:d6:4f:04:
88:67:ad:fc:37:b9:b3:3e:5d:4c:e9:27:0f:75:89:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:D7:4A:B5:A6:B8:6E:78:62:B8:24:4D:80:86:02:88:55:05:64
X509v3 Authority Key Identifier:
keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:af:6b:92:fe:75:23:f9:ef:76:fe:4c:cf:e0:20:82:e7:
5d:80:0f:34:ed:f3:50:28:57:f1:60:77:da:27:31:98:47:65:
27:bc:54:6e:2f:e8:85:8d:05:b7:b1:55:e1:f7:2a:2f:a1:c8:
90:5a:53:94:91:e9:02:0a:eb:f0:7d:e9:3b:43:89:c5:78:cd:
84:5f:b6:0e:7b:84:ac:41:e2:dc:c6:f2:49:c6:88:40:9e:4e:
ba:7a:c7:28:79:91:64:7f:3d:47:75:92:85:d5:a0:be:52:cf:
28:8e:d3:66:e4:80:98:40:83:4f:32:e7:22:99:be:a2:de:23:
5d:43:28:f0:ec:51:d5:ac:e4:76:90:3b:08:36:ae:3e:5e:8b:
cc:50:68:db:72:c4:5a:27:c7:eb:66:d7:90:00:5c:9c:cf:37:
03:f8:55:91:68:a0:74:85:bb:74:83:cd:81:57:2e:1c:e0:d0:
33:64:a4:cc:19:80:1d:03:a3:37:65:0d:f1:2a:69:72:21:88:
86:d7:21:a0:56:86:04:95:4d:72:db:d7:32:9f:24:93:12:16:
91:e1:b8:21:7e:97:29:5c:ad:f8:ba:81:7c:9b:11:9a:b5:8c:
e5:db:7b:6e:c5:de:99:c6:1d:b9:b1:0a:14:29:37:c4:4e:5c:
e2:e8:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:32:52 2026 by rpki-client