Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: rfLql29yxeWOx5jSU1p+jyjsoCONk6Zho86qRUrUjns=
Subject key identifier: 7B:C0:74:DA:86:91:6A:02:A0:AC:21:13:96:9D:7C:80:08:2C:AC:5B
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 01A0E7AE3821508F7C744D7A1FC4081530BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 11:02:29 +0000
Manifest this update: Mon 28 Sep 2026 11:02:29 +0000
Manifest next update: Tue 29 Sep 2026 11:02:29 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: Qrbyq/u1q0/mWkWAP5CEY7/iC3ezLrRE/pLJNphcCyM=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:38:21:50:8f:7c:74:4d:7a:1f:c4:08:15:30:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Sep 28 11:02:29 2026 GMT
Not After : Sep 29 11:02:29 2026 GMT
Subject: CN=7bc074da86916a02a0ac2113969d7c80082cac5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:16:93:b9:2a:05:13:36:59:89:72:bc:43:
1b:c8:31:09:1b:d9:ed:73:dc:46:87:1e:24:78:17:
8a:7f:31:ff:e3:ae:63:a6:59:b9:f1:f6:74:31:5d:
fa:95:b4:3c:55:24:61:ad:7d:73:de:8d:43:41:22:
b5:2d:30:f2:fe:f4:d3:5a:6c:1d:00:5c:a3:10:9a:
af:ac:ff:f5:2c:7e:3c:dd:3a:cc:90:c6:71:d9:38:
95:9d:06:18:e1:f8:eb:6c:75:d0:f5:0e:ac:94:89:
d7:e3:db:dc:9a:bc:1c:5e:b5:51:59:ec:bb:cc:e6:
af:9c:81:75:e0:3f:fb:f4:56:e3:b3:f3:4c:3c:bc:
12:53:0e:75:b4:8f:b0:08:99:b2:9e:32:c6:fa:d4:
97:75:72:36:5e:9e:31:0c:83:a3:ea:b2:d6:39:05:
1c:d2:c4:e1:d7:14:de:87:3f:50:74:0c:e4:d1:80:
d2:5c:ca:1b:f5:3e:30:0a:24:ee:21:18:f3:e3:cb:
52:08:08:14:f8:a5:f5:0c:ac:5a:5b:86:35:d7:64:
10:0e:19:f9:33:ba:26:21:7a:9d:44:eb:ed:f0:30:
a0:7a:d9:a2:4c:d4:92:f8:55:83:30:af:3e:7a:81:
94:3d:bf:d7:71:80:b7:d8:e0:dc:70:1e:92:39:ab:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:74:DA:86:91:6A:02:A0:AC:21:13:96:9D:7C:80:08:2C:AC:5B
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dd:8d:4b:b0:e2:4c:79:fb:f2:20:bd:75:e5:d9:0b:48:71:
77:85:64:04:9b:fd:a6:0b:b7:fc:8d:1f:08:7c:02:5e:d9:0c:
6a:87:6d:91:52:73:87:91:e6:1f:50:d9:28:de:3c:c7:8c:e3:
31:03:a4:7a:c3:33:36:6b:74:0d:c9:83:27:9f:1d:b8:36:2e:
cb:f9:c3:a6:1d:f4:11:0a:89:31:aa:c4:da:68:62:1b:b6:03:
01:55:42:6e:28:8b:6f:e2:bf:6b:83:f6:9b:14:c1:d4:b5:af:
6b:3a:b6:c5:a7:5b:b0:0c:c0:27:8b:52:c9:ad:90:5d:2c:61:
a6:02:a4:80:27:71:5a:8a:93:a8:2a:b9:e8:33:23:52:79:d7:
ea:aa:bb:07:12:7a:74:55:5d:90:3e:6e:8b:66:e2:4c:4f:e6:
9c:d1:56:54:06:65:66:29:83:8c:1c:09:87:f7:fb:f0:46:9a:
35:e6:e2:55:c1:8f:fd:e1:87:19:da:51:42:e4:a1:41:92:24:
b9:57:c4:ef:6c:c7:e5:1e:22:84:40:7b:e9:24:f6:ef:dd:c2:
13:2e:b9:5f:f1:63:fc:d4:fe:ac:64:13:7b:55:71:d7:a6:8e:
cc:81:fd:9f:59:81:c1:a5:22:f1:f9:05:97:d5:cc:04:54:67:
a3:27:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:43:26 2026 by rpki-client