Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier: d8yGckdexbxZw0AYUXmrC9tRk71vTBdVsAoYYJl6eC0=
Subject key identifier: 92:1E:52:5B:EF:D9:01:01:C9:40:B8:34:8D:77:35:F8:90:AB:C2:10
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 01A0D7277B0F811BE310E5A116B96ECC7057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 06:01:23 +0000
Manifest this update: Fri 25 Sep 2026 06:01:23 +0000
Manifest next update: Sat 26 Sep 2026 06:01:23 +0000
Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: 2N1mpfDRXTwzXGZjPJZrPKepoXxoPUG202Y80MjTo/k=)
2: DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa (hash: FTS7rWAdFS8UyAMp19YH0zdu88+Df8yK+Znwjqplx54=)
3: sA6Qf2_ToIyGcsbWCFpl1ww3zYM.roa (hash: wfbilCSxn7pd6CKUaeLQcmM0OSGs3jIpHSCViiEgaxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:7b:0f:81:1b:e3:10:e5:a1:16:b9:6e:cc:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Sep 25 06:01:23 2026 GMT
Not After : Sep 26 06:01:23 2026 GMT
Subject: CN=921e525befd90101c940b8348d7735f890abc210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:14:d9:46:97:6c:6f:fc:12:d0:3d:b6:96:
35:28:42:bf:ed:4e:f9:4c:66:57:68:c2:c4:3d:8a:
47:77:04:54:a4:11:2a:da:e2:b4:eb:49:8d:ca:ef:
83:f2:05:41:47:a7:31:dd:ab:68:8e:5e:e4:f5:b1:
b4:32:b8:8f:22:16:1b:c7:cf:a5:7a:75:a8:aa:91:
f7:7e:57:57:b9:d4:b7:0a:11:73:81:8d:6b:0a:c4:
f0:6f:36:ec:33:55:10:37:77:75:08:9d:de:03:c1:
bf:c7:47:9c:46:60:38:a2:ba:2a:88:18:6f:62:9c:
d1:1d:1f:d0:54:28:e1:f3:51:d3:22:61:f2:ca:59:
ca:06:ab:71:47:35:e3:01:2d:f3:e9:b8:dd:7e:d6:
3e:94:ea:35:23:38:c4:31:5a:f0:31:d2:72:7c:27:
a9:f5:78:e7:9f:e6:7e:0a:7a:bb:1f:d5:bd:51:e4:
5b:b0:7b:fc:9d:47:71:72:3f:36:1c:c6:e9:a8:f2:
43:90:b1:d0:08:5e:59:05:a9:d8:09:1a:9c:ae:d0:
b6:fd:32:d1:9c:76:ad:f9:d7:8b:42:3f:1b:63:1d:
eb:06:82:6d:83:f8:d7:8e:a1:bc:32:f7:f1:37:85:
ee:bd:62:36:dd:d0:21:d3:19:23:72:af:1b:01:b2:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:52:5B:EF:D9:01:01:C9:40:B8:34:8D:77:35:F8:90:AB:C2:10
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:3a:46:a0:5b:a8:32:61:c2:82:a8:c0:57:e9:19:ca:0b:
2f:08:5e:65:30:00:bf:83:7f:2d:d7:95:a3:98:bf:bc:96:4a:
fa:98:6f:eb:2d:d5:c8:fa:ef:40:a2:1c:06:f0:81:36:32:9e:
05:b6:1e:6a:19:ec:c7:91:de:7d:ac:b4:02:57:ba:ba:59:d5:
2a:e0:fb:60:8e:b9:86:04:96:48:9e:56:f7:71:c9:8d:00:8c:
41:e8:77:8f:dc:5c:f8:b7:fd:89:ab:c2:e3:a8:26:da:67:d0:
52:7c:3f:ff:bb:af:bc:9b:c5:37:92:ab:37:b0:68:9b:fe:b6:
c0:07:49:e4:ac:cd:f6:92:68:b1:a6:c9:ed:16:dc:a9:cf:64:
6e:f2:c3:37:23:75:78:43:19:ff:36:90:88:c0:c3:84:01:c2:
58:07:1c:4d:db:26:0e:51:67:02:24:b8:6a:ad:af:99:3e:0a:
0d:54:88:91:6f:ed:ab:0f:be:59:c4:7e:b3:4f:73:a8:db:24:
37:99:f1:fa:ce:d3:1d:46:db:a2:b8:88:f6:96:25:00:b7:1c:
a9:76:c6:07:be:0f:a1:05:10:23:9c:dc:66:0f:37:fb:0e:f6:
4b:46:9c:5f:ea:f1:0a:8f:b5:56:d2:5f:77:f5:40:3d:ae:e9:
8b:c5:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:09:30 2026 by rpki-client