Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
File: 5HbpsSF9PIXySHce9G2zprVr-EY.mft (raw, json)
Hash identifier: U3ZDHUfX7PSkZqVDjbdB5Fj4G2Pd5JX8mg+piCnaqxg=
Subject key identifier: B4:3B:73:6C:69:A3:18:54:E6:3D:D5:3C:28:AB:F8:73:CD:85:64:9A
Authority key identifier: E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
Certificate issuer: /CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Certificate serial: 01A0CBFDF15379996C3AE8E6892E88965867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
Manifest number: 01F5
Signing time: Wed 23 Sep 2026 02:00:12 +0000
Manifest this update: Wed 23 Sep 2026 02:00:12 +0000
Manifest next update: Thu 24 Sep 2026 02:00:12 +0000
Files and hashes: 1: 5HbpsSF9PIXySHce9G2zprVr-EY.crl (hash: Spg9dDVFtWsnCgFt/zPaV9is8iQQCVE5p4s0wkAwkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fd:f1:53:79:99:6c:3a:e8:e6:89:2e:88:96:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Validity
Not Before: Sep 23 02:00:12 2026 GMT
Not After : Sep 24 02:00:12 2026 GMT
Subject: CN=b43b736c69a31854e63dd53c28abf873cd85649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:7d:05:8f:dc:fd:0d:fc:2e:ba:5f:9a:21:
53:33:86:6a:62:18:42:ac:ad:d6:af:7e:db:95:0f:
fd:eb:d0:60:4d:b7:9f:c1:08:a8:df:db:68:36:8a:
66:e4:10:38:94:e2:af:0c:74:56:23:97:ca:98:e8:
13:f1:07:1e:74:30:0a:d9:13:86:df:be:bd:ee:c2:
f0:fc:c9:c8:a5:25:5f:ae:b5:58:d6:b2:49:b0:af:
ef:09:e2:e4:b6:07:58:7d:67:12:17:7a:b2:de:03:
40:b5:83:f5:d9:08:cf:72:da:d8:61:29:57:34:82:
e5:56:4d:6e:b8:9f:c1:b2:16:a6:f3:b2:13:a7:ce:
41:12:0e:6a:b3:c4:f9:b7:5d:96:d5:b4:0b:95:93:
4d:22:cf:d5:6f:27:be:45:8c:78:f3:7c:f2:5e:db:
d7:23:10:2e:7d:b0:13:6d:86:51:a7:4c:91:34:33:
33:ff:61:7f:20:b0:8d:74:60:e3:07:98:60:88:a3:
d6:31:5c:25:60:0d:c3:a3:a0:1e:ad:bc:e8:2a:ed:
44:44:e2:e4:b3:1b:6c:88:2d:a8:b9:6d:28:d6:3b:
32:fc:82:0c:8f:00:f1:2e:18:a9:ba:b8:d3:8e:74:
e5:63:55:1d:34:67:6b:e7:62:ff:0b:29:e9:89:17:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3B:73:6C:69:A3:18:54:E6:3D:D5:3C:28:AB:F8:73:CD:85:64:9A
X509v3 Authority Key Identifier:
keyid:E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ec:a8:47:d1:fb:0f:d3:03:a1:36:81:67:c0:78:f4:d9:59:
8e:60:27:b7:3f:f2:42:08:45:a8:cb:38:31:81:0d:a1:80:b1:
4b:d8:f2:94:e9:21:55:7e:4c:0c:87:b9:87:ef:a7:e3:93:30:
19:46:1d:62:e7:4e:ab:c8:c9:da:95:95:dd:da:76:6b:b6:e7:
1a:49:fe:8a:7d:cb:b9:bf:c7:a8:ba:1d:51:b4:a8:c2:f9:59:
a2:c4:8a:eb:47:75:bd:a8:55:b0:e3:21:18:b0:75:60:15:7e:
8d:21:12:98:d7:9a:33:ed:43:23:6c:2e:25:e3:59:18:80:50:
c5:bd:3c:ad:7c:9c:b3:f7:ff:c6:ee:d7:f3:97:65:24:9e:59:
91:90:ab:d8:03:28:25:05:18:6f:87:d1:7f:7c:c3:25:ca:29:
06:c9:b2:0f:7a:fb:96:b5:23:fb:e8:a6:ba:2b:87:37:be:b4:
0f:bd:64:d2:3e:d1:0f:e7:b6:f3:38:7f:91:59:1b:be:7b:bb:
4c:d7:05:8f:b1:e1:ed:5e:e7:3a:3a:d9:5b:a9:c1:88:52:84:
a0:b3:03:d4:ad:ec:0f:6a:ad:75:24:ae:af:43:79:b8:1a:f3:
7c:67:90:2f:fe:96:6a:2e:b1:04:82:2c:68:d2:8c:7d:e4:b0:
ff:eb:b4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:07:34 2026 by rpki-client