Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
File: 5akg5_Td28JaYDiLxP0ejmRqbdI.mft (raw, json)
Hash identifier: VemQouxIQahizAREWJGinSgpMWlh8yueJYIdcp7+ay8=
Subject key identifier: 1D:A1:FA:29:FE:B6:26:5D:96:DC:CA:5E:29:80:FF:94:86:3F:9B:3E
Authority key identifier: E5:A9:20:E7:F4:DD:DB:C2:5A:60:38:8B:C4:FD:1E:8E:64:6A:6D:D2
Certificate issuer: /CN=e5a920e7f4dddbc25a60388bc4fd1e8e646a6dd2
Certificate serial: 01A0D124B36DF71691F7020EEDC235298DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
Manifest number: E5
Signing time: Thu 24 Sep 2026 02:00:38 +0000
Manifest this update: Thu 24 Sep 2026 02:00:38 +0000
Manifest next update: Fri 25 Sep 2026 02:00:38 +0000
Files and hashes: 1: 5akg5_Td28JaYDiLxP0ejmRqbdI.crl (hash: sx3n10nQsh5a01gw6T2iY5OZe3etWUs7voEbOyYXEm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:b3:6d:f7:16:91:f7:02:0e:ed:c2:35:29:8d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a920e7f4dddbc25a60388bc4fd1e8e646a6dd2
Validity
Not Before: Sep 24 02:00:38 2026 GMT
Not After : Sep 25 02:00:38 2026 GMT
Subject: CN=1da1fa29feb6265d96dcca5e2980ff94863f9b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:84:cf:9f:6a:d3:11:e9:03:8b:a9:7d:d7:b1:
c9:91:bf:5d:dc:21:b1:f9:20:b4:9f:56:32:67:30:
a1:96:19:2f:d1:f2:7f:85:8b:13:d5:6c:6b:45:41:
c8:5d:af:4d:fb:22:f4:71:79:87:83:d3:9e:39:51:
2e:50:44:8b:07:1f:1b:2b:46:02:80:82:77:64:65:
fd:3a:76:d5:aa:89:d1:b9:78:bb:b7:03:cf:7b:8c:
f5:cf:66:96:7a:06:3c:e5:09:3a:96:98:66:3c:30:
06:fb:98:a9:fe:d7:bc:0b:c8:4b:6c:0f:b3:8a:04:
f5:64:9a:11:a3:af:a2:3b:88:3a:cf:5d:f3:95:cc:
df:54:1f:67:29:d3:b7:13:bc:ea:61:1e:23:f7:54:
ab:86:3f:7d:35:72:e6:6e:2d:0e:4c:9a:9e:d1:b0:
65:a0:f6:5e:27:d1:50:66:5e:fc:f9:20:f7:5b:27:
dd:6c:f9:35:2a:f3:b1:07:6b:67:0e:0c:0a:86:55:
61:ad:21:e0:48:da:ae:39:6c:18:b4:0e:81:a9:d9:
61:0e:7d:42:4d:7c:d8:e5:0c:48:56:f0:e5:5b:1d:
2f:7e:b0:a4:cc:65:93:52:17:fb:61:d8:c1:4e:89:
f4:b8:ed:42:3b:32:34:9c:6d:c4:d0:22:22:b8:7f:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:FA:29:FE:B6:26:5D:96:DC:CA:5E:29:80:FF:94:86:3F:9B:3E
X509v3 Authority Key Identifier:
keyid:E5:A9:20:E7:F4:DD:DB:C2:5A:60:38:8B:C4:FD:1E:8E:64:6A:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:70:b5:f3:aa:66:ca:bb:99:88:ee:1d:83:cf:6b:de:23:9b:
96:f8:cd:5a:0f:76:57:31:28:45:d8:4b:26:2f:02:56:fe:d0:
29:d2:e0:1f:b2:7c:f4:0a:d0:93:1a:6b:57:c7:f6:88:47:bc:
40:0b:56:b8:3a:0d:a1:af:c0:3e:d8:33:dc:90:ac:53:b1:50:
8c:e8:ba:3a:b8:f2:3b:ed:db:2c:7d:e4:b7:00:af:e8:87:5f:
5a:cf:2b:89:89:a4:ca:04:cd:b0:0a:53:57:5f:3a:43:90:26:
13:fb:35:a5:0f:97:b6:24:3f:5a:77:35:12:fb:7d:38:e9:7f:
40:2f:b0:ee:5d:df:aa:b8:b7:21:5c:2b:48:08:8a:8b:6a:fc:
89:83:1b:47:44:8b:c7:29:27:00:cf:6c:82:44:41:d1:34:62:
43:bc:45:1b:b3:e0:d4:82:07:40:15:a2:16:4c:e9:3c:2b:cf:
19:f4:97:1d:8d:c8:80:c2:5a:27:b6:f9:46:b0:e7:8d:c0:4b:
3e:4d:16:c6:70:e5:61:0a:b7:dd:00:52:ec:ac:d6:2e:c8:15:
b4:19:66:05:31:00:d4:0e:db:26:13:3d:77:74:42:eb:4f:d3:
e0:a8:ba:80:3e:76:be:f6:32:ea:0b:20:9f:cc:e6:ca:30:3a:
be:59:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:47 2026 by rpki-client