Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
File: 5CI8HxzaGbmTW0jH_c8gVcKWICg.mft (raw, json)
Hash identifier: 3XbzOaYes7jjlAbPiqjKINCyN9xt0LAuq7mjf0JFzjI=
Subject key identifier: 5E:2E:7D:C1:04:7F:B3:1A:C2:CD:DF:6E:00:8E:14:39:B6:29:E2:0B
Authority key identifier: E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
Certificate issuer: /CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Certificate serial: 01A0D5029EC9411A159D1ED78722D446EEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
Manifest number: 02D9
Signing time: Thu 24 Sep 2026 20:01:53 +0000
Manifest this update: Thu 24 Sep 2026 20:01:53 +0000
Manifest next update: Fri 25 Sep 2026 20:01:53 +0000
Files and hashes: 1: 5CI8HxzaGbmTW0jH_c8gVcKWICg.crl (hash: pgQX3x4gqUqstSIYonOmUsnyWeY302x8qr+ovMY/xxw=)
2: xuYEpRaA_BbVvcRMwj6GF8dzFtk.roa (hash: +oo5HVPSdE5F0vnX0GJbLJAscp8MlST1lOFf6d/1Nz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:9e:c9:41:1a:15:9d:1e:d7:87:22:d4:46:ee:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Validity
Not Before: Sep 24 20:01:53 2026 GMT
Not After : Sep 25 20:01:53 2026 GMT
Subject: CN=5e2e7dc1047fb31ac2cddf6e008e1439b629e20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:10:ed:f9:ea:0e:82:69:2a:1a:bc:0c:7c:
b6:86:2b:d5:69:be:0f:e7:d2:cd:30:f5:5e:d2:9a:
ab:6d:22:69:e1:6a:ad:75:e6:e1:be:14:56:47:15:
a2:d6:0d:7b:d0:70:b0:80:c6:67:72:05:ba:e0:f6:
e9:53:9f:4b:44:4a:40:df:2d:78:93:80:ee:d8:0f:
27:c7:a9:1c:29:08:dd:da:00:17:1a:45:da:6d:c6:
3f:52:ed:b8:fd:93:f8:7e:3f:f9:3a:db:b7:e0:3f:
b4:08:50:b1:89:e2:3c:b3:ea:01:43:19:ff:53:00:
99:82:c9:d6:be:fa:4b:36:7e:43:6e:0c:12:47:d4:
4b:25:c1:0f:38:10:a8:78:6f:11:a4:d6:9f:0b:de:
b6:66:2e:f0:a5:3c:8b:c5:80:13:bf:d7:e2:4c:8d:
b3:06:47:8c:05:6e:93:55:00:7f:52:cb:e4:33:f7:
b6:2b:ac:38:1a:b2:15:b5:97:96:37:f3:79:df:69:
d4:9f:0b:aa:30:bf:ac:28:6b:f3:7d:92:e4:5e:15:
b7:37:d9:c0:ae:00:07:df:ce:bd:70:97:0d:10:e5:
96:aa:5e:03:88:eb:3b:61:b7:d3:9b:32:6f:31:56:
05:72:ae:78:6b:07:6d:69:8f:bd:91:a8:b4:2d:2e:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2E:7D:C1:04:7F:B3:1A:C2:CD:DF:6E:00:8E:14:39:B6:29:E2:0B
X509v3 Authority Key Identifier:
keyid:E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e1:8a:f8:59:c2:53:a9:fd:d5:3d:68:3d:cf:21:90:d5:3f:
2a:2b:5b:90:66:80:b3:12:74:de:39:ae:9d:ee:ed:ae:a1:b2:
12:2e:b5:e7:5b:3d:56:a7:68:64:83:b3:b9:2a:f2:1e:d7:e4:
d5:e5:b4:12:b4:64:ba:ef:f6:eb:dc:f5:23:50:86:8f:fe:f9:
bd:da:a4:2b:65:c1:0d:48:e4:d2:03:c7:ad:c6:d5:e2:58:a8:
e9:ce:6e:e6:f6:a2:2d:d0:84:46:d1:94:14:b8:d8:10:28:7b:
aa:62:50:4d:35:39:b5:c9:f0:43:93:1b:20:44:ce:cd:fb:a8:
01:93:20:9d:21:a4:da:da:2d:16:eb:37:79:ef:40:6e:8c:bb:
d9:45:0e:b9:79:50:63:93:93:49:fa:52:96:1d:76:8b:2e:40:
17:eb:05:a2:f4:51:85:59:84:75:1c:5c:34:0d:81:d3:bd:80:
ff:7a:9c:f3:3b:31:e8:02:85:dd:d0:40:ba:2e:f1:86:94:17:
c7:75:32:af:49:10:b0:9f:ba:87:82:0c:13:03:79:19:c3:eb:
5a:f0:72:7c:ed:9f:da:df:65:b0:cd:c5:02:43:36:c9:6b:68:
43:b8:7a:dd:ed:f3:85:4a:ce:19:dc:65:fc:38:d6:88:77:7d:
ba:16:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:14:48 2026 by rpki-client