Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
File: 5loh5Pr8mTpaPjY1ZG8OUaPre20.mft (raw, json)
Hash identifier: flg2DN8xSxUSmmSA9F0SYrPF+rk23Q2xvQ9iYSz+vJc=
Subject key identifier: F0:31:88:83:18:1C:CE:B9:97:04:5F:A9:C6:E0:81:5A:2D:D2:3E:EF
Authority key identifier: E6:5A:21:E4:FA:FC:99:3A:5A:3E:36:35:64:6F:0E:51:A3:EB:7B:6D
Certificate issuer: /CN=e65a21e4fafc993a5a3e3635646f0e51a3eb7b6d
Certificate serial: 01A0D124E79994E9627F88D88888E4EB630C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
Manifest number: F2
Signing time: Thu 24 Sep 2026 02:00:51 +0000
Manifest this update: Thu 24 Sep 2026 02:00:51 +0000
Manifest next update: Fri 25 Sep 2026 02:00:51 +0000
Files and hashes: 1: 5loh5Pr8mTpaPjY1ZG8OUaPre20.crl (hash: w5GQwIKafLTuul5RB4Kw29Us4CzPY76gJT1dvaBxQ/Q=)
2: WLBqKFSRYhW2BLxrPxBOnJ5-nEE.asa (hash: /lRmFidkYST8vyWDfHx47uGzvp12UzkNdZt/L+a0R9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:e7:99:94:e9:62:7f:88:d8:88:88:e4:eb:63:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65a21e4fafc993a5a3e3635646f0e51a3eb7b6d
Validity
Not Before: Sep 24 02:00:51 2026 GMT
Not After : Sep 25 02:00:51 2026 GMT
Subject: CN=f0318883181cceb997045fa9c6e0815a2dd23eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:5f:0a:10:7f:4d:33:94:b3:28:52:83:d0:
ed:17:3e:90:27:95:5c:42:98:3f:b4:f5:12:ef:46:
8c:7c:fa:06:1a:88:af:0d:b7:3e:f6:3b:95:28:75:
14:fd:01:dc:79:e8:d4:99:78:ba:0b:5d:1f:66:83:
5a:5c:96:15:42:db:ec:0d:be:c5:aa:0e:f5:50:b1:
d0:7d:d9:6a:c1:bd:b2:3d:66:16:7a:1c:6a:72:1a:
44:b1:5f:30:37:79:ee:e6:ed:e4:16:92:dd:e1:98:
ff:99:9c:0e:d9:fd:bf:f7:49:eb:0e:b8:1e:3f:dc:
cf:c3:58:12:9d:8d:74:45:70:cf:92:67:7b:49:4c:
64:48:ac:29:42:c8:8e:4f:46:75:46:5f:32:18:3f:
b4:21:97:30:1d:03:43:dd:51:fe:65:9d:dd:8b:b3:
e7:6f:a3:33:0f:53:84:4a:21:3a:a2:f5:4a:8d:54:
45:87:c7:6a:a7:ac:71:df:94:78:02:c0:1e:b7:3c:
97:9d:bf:95:54:f9:20:21:20:0e:5e:e1:a2:c8:96:
69:94:b0:f7:51:e9:d8:61:ad:0a:99:bf:77:80:00:
20:27:6e:a9:98:08:f2:29:fd:f8:70:68:67:07:80:
8c:ac:cd:fc:0b:79:c2:99:be:31:07:e4:0f:16:4b:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:31:88:83:18:1C:CE:B9:97:04:5F:A9:C6:E0:81:5A:2D:D2:3E:EF
X509v3 Authority Key Identifier:
keyid:E6:5A:21:E4:FA:FC:99:3A:5A:3E:36:35:64:6F:0E:51:A3:EB:7B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e7:f4:54:3f:2c:29:f1:76:23:7b:7d:73:3c:42:bd:92:99:
36:c4:42:91:c2:a2:7b:17:1b:5c:8b:86:f6:0b:2d:ba:79:5d:
3d:6c:21:cd:5f:e2:e5:fe:e7:c1:93:1b:de:15:86:c4:c9:3f:
4e:34:9d:f8:4b:31:9d:82:7b:95:76:e7:0e:da:b9:25:0d:4c:
d7:15:18:11:17:73:ed:54:86:62:c0:38:be:78:9f:46:14:3a:
9b:e7:44:93:16:d7:e7:3b:5e:6e:ce:92:f8:8e:71:a5:fd:d8:
6d:52:5d:6a:42:d9:bd:d7:64:12:ba:be:d1:31:1b:63:a4:ee:
40:5c:e6:d1:bd:1c:94:19:b1:d7:65:96:79:a7:3b:07:10:71:
28:d0:2f:88:31:ad:0b:a8:45:a4:54:36:f7:56:aa:6e:bc:8f:
b2:73:bb:41:f4:af:38:26:5b:9a:a0:07:ba:46:af:fe:52:2d:
69:83:53:22:94:79:0d:e5:80:2f:79:9c:5e:23:3e:b3:7d:2a:
98:31:94:4d:b9:7c:ab:d1:c6:7b:04:f4:d7:13:10:c3:fe:ea:
7c:c4:27:15:a8:7f:da:7d:1b:a4:e1:76:cd:27:e9:7c:f9:e1:
70:d5:ac:4c:6e:99:36:f2:84:46:17:2d:9d:5c:3f:b0:9d:ee:
45:0e:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:24:37 2026 by rpki-client