
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: BWhPgNw6BPFxQXsFfGtDfJxoNJqlKConC32TbTXSX60=
Subject key identifier: 69:50:40:D5:AF:4E:02:3C:A2:4E:C9:F4:BE:80:46:25:2E:25:88:71
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 01A0DD294CA507E6C7529BD925CB45AF8412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 1A6F
Signing time: Sat 26 Sep 2026 10:01:06 +0000
Manifest this update: Sat 26 Sep 2026 10:01:06 +0000
Manifest next update: Sun 27 Sep 2026 10:01:06 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: E8aiXWFjWx9Z1HkzVS5p7vG1Uyej0WwWr3bf+RG+qhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:4c:a5:07:e6:c7:52:9b:d9:25:cb:45:af:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Sep 26 10:01:06 2026 GMT
Not After : Sep 27 10:01:06 2026 GMT
Subject: CN=695040d5af4e023ca24ec9f4be8046252e258871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fe:4e:85:d7:df:9a:26:0b:cd:2c:aa:6a:10:
b1:1f:7a:c0:ca:fc:93:32:20:98:ee:e2:1d:f0:d9:
21:8d:72:0a:15:a6:f6:6b:13:c4:a2:e9:f8:6a:10:
00:04:ad:26:70:d6:68:87:2a:06:5c:92:1e:9f:dd:
f6:21:59:69:fc:cc:59:ec:10:c7:d3:3d:69:f8:e7:
d0:7f:09:cb:62:ef:ab:cc:c4:28:51:8e:c0:2b:67:
b4:ba:1e:a9:ee:b0:85:c1:0d:71:91:b3:75:21:b7:
49:a3:07:06:95:9d:d9:16:b3:2f:14:9e:46:18:58:
45:2c:a0:fd:6c:2e:28:dc:3a:a5:9d:52:3f:5e:95:
0b:2e:e0:9f:38:ed:61:20:89:7d:05:b4:f4:5b:a3:
1d:b0:22:14:27:5f:76:a1:42:1f:5f:58:f2:38:82:
9a:6e:fb:75:45:5d:25:28:05:bd:a7:8a:52:7e:41:
7c:9c:75:c2:9a:c3:86:d0:7d:8d:41:45:9b:db:6c:
73:00:80:37:50:93:49:da:96:b7:45:72:be:c4:6f:
51:75:f3:96:ae:38:89:df:34:f7:73:ee:f1:27:67:
d3:a4:4a:eb:f8:2a:7c:8b:31:21:30:56:2c:9b:d8:
ac:b7:8f:6a:df:e0:3a:99:8f:cc:90:42:06:68:52:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:40:D5:AF:4E:02:3C:A2:4E:C9:F4:BE:80:46:25:2E:25:88:71
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a9:0c:65:03:9c:6a:8d:37:d1:9f:14:d3:7a:a8:4e:e3:4d:
b6:91:cb:d2:fc:c0:8a:8f:dc:2b:db:76:6a:51:c4:75:c8:c7:
02:9a:20:1e:76:05:ab:d2:5a:38:30:f8:04:3a:d9:33:57:8b:
0b:2d:c1:e6:d9:a0:3c:b4:62:bd:1f:af:8d:94:96:9b:5a:99:
ea:b6:24:b0:4c:15:0c:b2:18:2d:97:d7:cd:fe:3e:83:f9:7a:
7a:b8:1c:53:ac:60:b5:b5:d9:5f:ff:c7:dd:0f:02:0f:6a:65:
c4:98:59:d2:eb:d7:c2:dd:16:f9:ee:c9:ff:09:f4:8b:34:4a:
b6:b0:a3:91:0a:c0:38:68:f5:5e:d3:6e:55:05:67:71:35:a3:
2f:22:a0:ae:9b:e5:ef:d8:2c:a6:96:a2:1a:ed:3c:ba:74:fd:
47:f9:fc:10:13:1d:14:9f:4d:39:0b:da:c3:59:3b:90:8a:fc:
d8:96:3e:4f:bd:c6:9d:ef:cc:29:a9:e4:ff:b2:ce:df:95:09:
17:90:71:15:22:25:2f:5d:be:68:94:f0:34:ac:5c:43:fb:e3:
b2:6b:a2:87:f8:db:c0:f1:d3:e6:42:49:b3:5f:f8:a6:d3:89:
d3:d0:0e:02:6b:cd:4e:ce:59:01:b1:2c:96:3b:46:72:b4:04:
7a:c8:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:45:55 2026 by rpki-client