Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: Xpcdws9IP2YNWn1jxqKIBnS7PsgQU5QXbHlI7KTiWkw=
Subject key identifier: 38:2D:75:80:FC:4D:93:A2:24:49:16:43:8E:6C:CF:EA:FF:1B:78:F9
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 01A0F6E94288E2406FE3AA9990046395A2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 1A80
Signing time: Thu 01 Oct 2026 10:01:16 +0000
Manifest this update: Thu 01 Oct 2026 10:01:16 +0000
Manifest next update: Fri 02 Oct 2026 10:01:16 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: 2b/bBhtm2hE5ttehVGFhezOTjPYRqnzBmZhimEYdBPs=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:42:88:e2:40:6f:e3:aa:99:90:04:63:95:a2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Oct 1 10:01:16 2026 GMT
Not After : Oct 2 10:01:16 2026 GMT
Subject: CN=382d7580fc4d93a2244916438e6ccfeaff1b78f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:12:4e:af:0d:fc:74:64:7e:c6:50:47:46:
6a:f2:14:ad:2f:d2:fb:22:00:94:db:fb:a2:80:81:
f8:73:e9:03:3d:e1:d0:4f:9a:20:08:6c:84:ab:2f:
1a:45:d7:22:84:71:97:49:ad:d2:ad:06:ec:ad:52:
a0:3c:96:f2:1e:c7:c7:0c:4e:17:50:07:7e:51:77:
eb:a3:7f:b8:18:ee:5a:4d:15:72:f2:36:bb:dc:3e:
07:92:b1:b9:fa:ee:5b:5a:03:c2:c0:dd:a1:a7:0a:
64:32:84:33:9d:b8:bf:d3:ef:f3:62:4a:00:5a:f7:
6d:4f:56:e0:10:89:3b:cf:41:d0:c0:f6:fe:8f:29:
7d:f5:d9:f8:e2:34:ce:ae:0d:ff:41:67:d1:78:bf:
00:48:df:5b:b2:a9:9f:73:d3:32:76:a0:ac:c6:7c:
e5:9f:39:28:81:ff:bf:56:bf:16:22:4b:7a:5c:e7:
01:a6:76:0c:a9:f6:77:6e:f8:ee:30:2d:47:72:e5:
34:35:36:c7:15:cc:ba:7b:15:68:99:2a:34:71:cf:
01:74:1b:8a:bc:1b:db:d2:73:e4:1a:7b:81:d8:17:
c0:85:bc:43:1b:9b:5d:dd:70:a6:a5:dc:8e:b3:31:
c1:45:e2:7a:f7:5e:de:9b:1e:01:57:f0:13:a0:2e:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:75:80:FC:4D:93:A2:24:49:16:43:8E:6C:CF:EA:FF:1B:78:F9
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f3:56:74:ff:c7:86:30:86:9d:6e:37:17:bb:97:6f:4f:d2:
e8:10:ef:b4:f8:64:3d:c7:db:1e:5a:30:d7:ea:a9:5b:44:be:
8d:f6:8e:1f:d3:ee:70:ea:c0:c3:95:33:b0:86:bc:1f:08:90:
ea:ce:a0:2b:4e:bf:e5:08:92:73:ea:76:dd:1e:91:ce:3d:31:
87:2a:04:da:f8:57:48:ff:62:dc:6f:90:34:9b:da:4f:2a:1f:
58:a5:df:96:98:2f:f6:32:8d:b7:e8:2c:b4:18:df:26:a3:49:
84:34:46:f9:12:86:21:43:52:00:bd:b8:7e:df:d1:04:65:ce:
fc:0d:ae:a4:30:74:49:1b:da:ff:a1:0a:ca:21:36:4e:8b:eb:
49:67:0a:8b:ce:ae:03:5e:88:45:12:50:ed:e8:68:41:b6:e6:
b3:7e:3a:a9:64:7c:07:30:a5:b7:65:bc:79:7b:9f:25:60:72:
da:bd:af:fb:7c:05:71:1d:7e:01:a5:b7:12:f0:cd:ed:c4:a3:
76:a4:a7:e7:79:73:17:0b:62:cd:1d:da:3a:e0:b1:85:54:bb:
fa:4c:ce:c3:0a:ce:56:f1:db:10:62:33:55:2b:8b:1a:f7:b1:
fb:aa:45:30:7f:74:83:41:67:1a:9d:b8:da:22:09:d1:86:3c:
7a:a2:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:45:25 2026 by rpki-client