Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: zmG5+a+GuW+Br5IjTWgz9v55OpcVJ/ZqlgU91f3ZEOI=
Subject key identifier: 9D:7B:1F:0D:EE:8D:33:54:77:0C:B6:B6:7E:BA:25:34:BC:1E:59:93
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 01A0D9BBCCEA5AAB456D6B912CBFAB31E8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 112A
Signing time: Fri 25 Sep 2026 18:02:38 +0000
Manifest this update: Fri 25 Sep 2026 18:02:38 +0000
Manifest next update: Sat 26 Sep 2026 18:02:38 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: Ifs8avn4rqtEW9zF6KJkLYwstxG8loY8J3h4HI7vd8w=)
2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:cc:ea:5a:ab:45:6d:6b:91:2c:bf:ab:31:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Sep 25 18:02:38 2026 GMT
Not After : Sep 26 18:02:38 2026 GMT
Subject: CN=9d7b1f0dee8d3354770cb6b67eba2534bc1e5993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:10:5f:66:0d:bf:6f:ce:36:37:78:ad:d6:
b5:a1:ae:0a:40:14:38:1b:26:f1:74:04:7a:36:8c:
6f:e4:35:c4:aa:1a:47:f8:99:96:bc:54:d6:54:12:
8e:73:c1:57:83:ec:58:a4:ad:ab:20:a0:86:25:32:
75:6a:bd:7b:c9:fc:03:11:66:0d:84:b2:15:69:6a:
f2:dd:72:39:39:fe:7e:90:5a:ba:60:a2:bd:9e:86:
53:59:4b:06:74:e2:1d:2e:4c:b6:d2:d1:56:fd:b0:
0f:0a:9f:5f:23:58:9e:88:6b:50:fd:2c:ad:68:2c:
98:12:ae:14:e9:d1:cc:7a:81:fa:c2:5d:53:f2:7c:
20:3e:f9:99:d1:86:fe:f5:7f:22:62:6a:ff:62:37:
f0:63:9f:24:84:af:af:35:6f:ee:bf:4c:00:c2:9d:
c0:a9:74:41:50:a3:8f:77:49:fe:1b:c4:a1:29:83:
79:9a:49:7b:d9:b5:95:9d:06:bd:16:be:cb:61:f8:
e8:3d:0d:09:44:3e:2c:a9:fd:53:c7:a0:ac:e2:a4:
3b:bf:b2:5f:34:8a:6e:50:77:af:6e:e6:f9:ac:92:
e7:9b:19:db:94:56:2e:fd:ef:47:8b:4f:30:ba:08:
7c:0e:03:7a:30:40:b3:fb:ab:79:9c:8a:7e:7e:c4:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7B:1F:0D:EE:8D:33:54:77:0C:B6:B6:7E:BA:25:34:BC:1E:59:93
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d8:1a:1f:9f:df:f8:af:ab:12:d8:19:27:35:cf:f8:a5:e6:
fa:33:85:66:2c:28:6f:34:1b:19:92:67:19:f9:20:54:a9:78:
c6:f7:96:35:5d:9d:e6:2f:3f:4a:ac:1c:34:f2:fe:b3:89:a8:
81:1d:6c:71:ee:ed:4a:c6:0f:fd:d6:31:e4:a6:e1:c8:55:0d:
a7:71:19:49:2e:46:11:48:d5:44:14:bf:50:fb:08:6f:b0:ef:
35:b7:78:9c:75:a6:a9:d2:43:d3:d9:93:ff:4f:17:f1:fa:55:
9a:d6:d9:3f:c8:fb:f8:db:97:46:d5:d3:b6:50:2b:ff:a9:c3:
48:d5:63:94:e6:45:1e:c8:3e:d6:db:ca:9d:00:80:50:56:fd:
c1:fa:a7:d6:8b:be:fa:a3:cc:13:16:6e:e4:ac:1d:43:08:34:
aa:d6:f4:b8:aa:32:aa:b0:7c:c7:eb:31:35:28:75:a7:87:34:
91:9f:b9:2d:db:97:fa:30:70:2f:a7:f3:0e:89:46:70:13:44:
28:f0:8b:b5:07:15:ab:4b:3a:8c:e2:52:a8:5c:75:9b:c9:a0:
c5:29:83:51:e7:72:54:53:18:e9:d6:24:e7:73:71:ca:34:e7:
79:36:21:c4:4c:f5:78:f0:41:55:6e:90:16:f0:e5:2f:c0:78:
2e:95:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:44:07 2026 by rpki-client