Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: Q3FoA63kJNDvpeh3jS3FihU5lQ44GlVEms0FRgVikxA=
Subject key identifier: 24:89:C1:7F:F1:F4:13:D7:95:53:2A:C5:07:E5:BA:19:F4:FE:DC:47
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 01A1DF838E3F479EA2B9EA4636E02A12BE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 14:01:43 +0000
Manifest this update: Sun 15 Nov 2026 14:01:43 +0000
Manifest next update: Mon 16 Nov 2026 14:01:43 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: 06C3ZHtfyuLc4IVhhggUrUUt6V76upMyVPV9hzuw7EQ=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:8e:3f:47:9e:a2:b9:ea:46:36:e0:2a:12:be:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Nov 15 14:01:43 2026 GMT
Not After : Nov 16 14:01:43 2026 GMT
Subject: CN=2489c17ff1f413d795532ac507e5ba19f4fedc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:99:bf:1f:50:3b:ab:d3:f2:6b:6c:27:74:
62:10:b9:12:46:74:92:e3:3a:cb:96:26:5e:64:20:
91:00:76:af:cd:49:7b:48:f6:7d:c8:ae:b2:8b:b6:
d6:88:c8:91:d1:65:e2:ab:0e:21:e0:97:27:ea:40:
9e:01:30:4f:20:b2:77:5c:6c:f0:0a:7d:27:2a:04:
dd:8f:2a:5c:06:54:5b:09:7b:b7:f2:1e:47:01:d7:
eb:b3:48:90:bd:75:12:1d:92:5c:eb:1a:3a:72:fc:
b5:14:08:0a:e3:d6:3f:d7:25:f6:b3:5c:1f:61:c0:
bd:bc:2f:78:48:ff:d1:d5:30:78:19:e2:c9:2a:fe:
24:b6:c6:e2:e0:51:21:99:35:39:e6:53:67:d6:64:
ac:b4:80:b1:69:6a:8a:10:b7:82:f7:1c:39:c0:49:
be:f9:eb:1e:b4:74:90:60:0f:71:ca:40:9d:ef:bf:
63:c0:9f:cc:ff:a9:ab:e5:10:1a:dc:a7:9e:68:97:
1f:4b:2d:8d:d2:57:97:92:c2:05:6c:c2:10:f2:80:
76:20:7d:a8:07:d2:03:ad:ac:73:30:52:33:97:39:
0a:07:6a:99:27:07:9a:89:b7:57:bc:a3:e0:68:65:
62:c8:04:fa:0e:af:7c:a5:f2:4f:05:82:05:af:f4:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:89:C1:7F:F1:F4:13:D7:95:53:2A:C5:07:E5:BA:19:F4:FE:DC:47
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c1:d1:cd:71:de:d8:2c:5d:bf:fd:b2:84:78:10:d3:cb:35:
d0:ed:9e:d3:7e:a4:89:90:40:7e:c8:cb:52:4f:5d:ae:4f:e1:
34:f1:fa:0d:22:36:f7:62:ca:6a:eb:b1:98:68:2f:35:c6:73:
e9:13:57:3c:26:40:70:a5:47:a5:7b:16:f0:a9:b3:99:fb:57:
14:61:82:5e:6a:56:e3:fa:81:ef:09:58:dd:f1:b0:4e:58:d2:
94:88:b2:e1:10:fc:83:66:82:ca:d3:28:a8:66:ff:6c:2e:2f:
d3:b2:24:4d:26:40:f0:a2:6a:83:fc:5f:2a:98:4c:92:f0:dc:
8c:3d:28:1b:25:b7:8f:d4:8e:9c:71:e8:f7:0f:25:98:f2:c0:
24:ed:7a:8c:a7:56:b5:80:a7:13:a8:9a:a7:10:6f:8c:6f:09:
75:a8:00:96:8f:05:21:4c:11:ae:4c:77:4e:ed:d8:09:19:b5:
4f:11:44:8d:79:57:a9:bc:e8:6b:fb:07:6d:35:73:cc:c5:7e:
84:f2:8b:3f:24:4d:e0:c5:63:17:95:43:a7:d2:57:66:68:45:
d2:09:55:e3:c8:10:3d:2d:3f:ae:89:69:62:eb:1e:a1:ad:77:
a0:5d:ce:9a:89:93:d2:44:10:c3:ea:a8:30:0e:ec:20:5a:a3:
ce:5a:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:24 2026 by rpki-client