Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: mJ50wusai5x9UcduyQkUizGjcI1qalYZiGETVljlaIQ=
Subject key identifier: F5:80:F2:55:56:E4:D2:19:73:6B:A2:46:2B:40:3A:0D:D0:CD:51:93
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 01A0D7601901C628F0CCE9F4FD90CAE85FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 11F0
Signing time: Fri 25 Sep 2026 07:03:14 +0000
Manifest this update: Fri 25 Sep 2026 07:03:14 +0000
Manifest next update: Sat 26 Sep 2026 07:03:14 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: rDWD6TNHWA05i33z/E2drRk/eKQgMagG/YLbPiSDNOI=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:19:01:c6:28:f0:cc:e9:f4:fd:90:ca:e8:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Sep 25 07:03:14 2026 GMT
Not After : Sep 26 07:03:14 2026 GMT
Subject: CN=f580f25556e4d219736ba2462b403a0dd0cd5193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a2:1c:cc:f5:b0:bb:cb:f0:ae:1e:04:d2:6e:
12:d8:43:4f:5a:45:68:6c:35:ed:55:cd:91:f8:50:
13:1a:1c:b3:a6:fb:94:eb:4b:ca:64:eb:02:73:e7:
50:25:9e:96:69:b5:05:ca:ef:6d:5e:7a:a0:eb:79:
4d:49:80:ce:29:97:45:82:51:c3:1f:0f:8e:b3:7a:
2f:52:cf:e0:bf:d0:b8:b8:d0:75:3b:f0:98:19:24:
87:63:3c:14:e9:7b:60:79:b1:94:8d:f9:f1:08:c3:
2b:07:71:7f:1b:19:14:40:9a:ec:34:b9:f0:a8:db:
66:d9:09:25:e4:20:2c:b0:ae:25:67:50:46:55:83:
34:72:58:e0:98:25:58:69:fa:71:58:d1:3b:d4:24:
87:88:ce:57:6a:2f:b9:c6:bc:71:27:88:c9:88:1b:
b4:be:5c:98:74:dd:ca:44:d4:71:a9:96:99:2b:72:
00:35:d9:c9:4e:76:83:9d:4f:d2:d4:37:c2:62:7b:
f2:ea:be:39:2f:d2:d4:d5:e8:0b:48:5c:cc:33:61:
20:e2:2f:87:8b:fd:1f:d1:a6:2c:06:f0:ab:b1:49:
73:41:1a:ba:a8:99:11:f2:f1:b4:ff:f7:31:e9:da:
11:6c:be:4f:ff:1e:5f:13:a2:7f:0e:4d:53:04:a1:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:F2:55:56:E4:D2:19:73:6B:A2:46:2B:40:3A:0D:D0:CD:51:93
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ee:28:41:c8:69:5a:e2:a4:3b:24:6d:90:29:fa:52:61:90:
d0:cb:7a:88:55:39:04:2f:d5:e0:40:5a:94:16:c0:0d:46:93:
c2:97:64:c0:39:ca:51:f7:d5:15:79:f8:ba:2e:f7:86:70:7f:
9b:21:38:5c:da:33:ce:8c:85:b4:06:db:cf:54:ed:ed:96:0b:
6f:78:d8:ec:da:14:6b:96:3c:50:e7:d1:d6:bd:7b:8c:23:15:
00:b3:42:e1:12:0b:20:6f:d7:ea:e5:f2:af:25:4f:d9:11:19:
a0:c1:da:ca:64:a9:a8:5b:54:d5:94:aa:48:de:26:ce:61:7e:
79:eb:b5:73:b1:92:3e:9e:01:03:d6:9f:12:4b:92:22:df:dc:
6b:a9:8a:6c:bd:cb:29:44:37:fa:f6:f6:7f:d8:83:87:ca:4e:
98:96:ed:fa:fc:2c:bf:ef:3d:57:bc:f6:e9:c7:ba:3d:c2:fc:
b7:a6:f6:dc:5b:89:c2:e1:fa:97:b6:35:6a:ae:1a:3c:6e:bd:
00:fe:05:17:f5:7c:3c:10:b6:6b:33:c9:55:32:3b:6f:c9:9a:
25:a2:de:68:b8:b8:0a:41:a4:d9:d8:28:24:eb:f2:d9:50:8e:
4f:4e:f5:bd:41:c0:28:a6:14:cb:10:3e:ec:25:ef:63:da:a2:
80:30:ed:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:42:27 2026 by rpki-client