Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: Pg9oO7Q7ZQV3USs+eZoUAFhCckYd17lM8Annw3fdgcA=
Subject key identifier: 0D:11:5F:6A:05:36:5A:30:74:86:C0:A9:D7:43:89:82:86:D6:66:2F
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 01A0CEFF35030AE3C70B40C4913C640C94E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0F8D
Signing time: Wed 23 Sep 2026 16:00:26 +0000
Manifest this update: Wed 23 Sep 2026 16:00:26 +0000
Manifest next update: Thu 24 Sep 2026 16:00:26 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: xkGq0wQRgyQ54WScXWzXeK/3ASK7eS29ORbbeUaXvbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:35:03:0a:e3:c7:0b:40:c4:91:3c:64:0c:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Sep 23 16:00:26 2026 GMT
Not After : Sep 24 16:00:26 2026 GMT
Subject: CN=0d115f6a05365a307486c0a9d743898286d6662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:40:a7:0a:0c:ce:6e:4c:04:1a:8b:fc:8f:
7e:e0:34:10:b6:2b:e6:0e:35:fa:e0:26:38:11:8d:
7c:15:3b:95:dc:dd:8b:f2:12:28:48:78:36:1e:d2:
a1:2c:07:df:82:92:77:b6:8d:07:0d:81:fe:e6:11:
73:74:cd:a3:57:ae:9e:ca:66:74:73:c4:f9:38:5d:
c0:8b:1a:40:14:39:2b:08:8b:a2:15:6e:40:5c:d0:
42:d2:9d:91:fd:08:73:bb:e5:6c:c2:95:3b:92:42:
c5:8a:7b:4a:6f:86:a2:73:43:e2:e3:4e:58:af:12:
ba:bb:b8:ad:8e:d0:75:ce:db:b5:bc:7b:fc:6d:b2:
58:ab:bb:0a:7f:f2:08:07:a5:5f:87:5e:0e:17:e0:
81:a7:c4:aa:98:ec:9c:0c:f9:f2:12:55:64:fc:6e:
d8:0c:d3:8d:d1:9f:d8:01:73:3d:13:e1:20:68:e4:
59:99:f7:d7:d1:d1:8b:8d:82:31:2b:8e:a7:98:e0:
a0:3e:81:6d:a7:ed:7f:1f:5e:55:cf:c2:54:32:b1:
c4:1d:95:9a:e2:20:7a:7c:d3:75:97:ab:2c:34:4e:
ca:a2:b9:ad:7c:5d:f4:0e:64:de:36:f5:98:37:ef:
e2:d0:37:2c:99:24:93:ce:7e:e2:b1:fd:d8:b8:d7:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:5F:6A:05:36:5A:30:74:86:C0:A9:D7:43:89:82:86:D6:66:2F
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c6:06:ec:59:75:b6:39:a3:57:02:24:02:b6:24:47:81:65:
69:12:3f:cb:92:45:5a:ae:d6:45:54:05:0d:77:5a:e2:c4:a4:
f3:52:ba:2c:7b:3a:ca:e0:07:d1:55:94:50:26:3d:9f:d6:34:
35:d4:8d:49:57:19:1a:77:b6:99:48:6c:2c:19:29:97:0e:b0:
f5:3b:5c:82:10:b2:00:d1:27:70:c9:03:2f:59:7e:33:43:96:
e9:5f:fd:4e:d9:aa:fd:62:bf:8a:27:a3:d6:09:68:b8:04:43:
7e:6f:09:d6:bb:bf:af:a3:26:f4:39:f2:af:01:3d:cf:e8:a5:
c9:be:1f:ba:06:be:ff:77:d6:08:67:7d:94:2b:f9:4a:ee:91:
77:d4:0f:57:63:cf:6d:58:65:ca:ed:5d:82:79:54:f7:f3:d3:
82:18:8b:b6:71:02:3e:d0:2c:7e:df:44:b6:a2:25:7b:5f:7a:
4d:55:f1:4a:fa:87:33:43:82:f4:e1:fb:45:c1:a0:21:5a:23:
19:e9:d5:17:1b:3c:9d:f7:de:04:73:14:c1:eb:1a:95:fb:a1:
39:4f:a1:c3:fa:8f:b1:d1:c9:3a:7f:04:64:67:6b:23:4e:9c:
e7:10:00:99:80:0d:f7:6a:47:3e:43:88:c3:b6:73:58:44:3a:
49:a2:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:41 2026 by rpki-client