Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: dG2PiY+fsMzt+xMVoscQX/5ynTsU6q6anJ/3Ta91cBk=
Subject key identifier: 43:5F:83:4C:E1:F0:99:74:FB:7C:4F:C3:2E:03:3B:46:07:56:C0:2F
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 01A0ED4164CEB582097AB494E96C35A53CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 13:01:20 +0000
Manifest this update: Tue 29 Sep 2026 13:01:20 +0000
Manifest next update: Wed 30 Sep 2026 13:01:20 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: iA3Pek+YIHXDs+kapi359ilBmlJ2RwNCiAe2bs0iJ6c=)
2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:64:ce:b5:82:09:7a:b4:94:e9:6c:35:a5:3c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Sep 29 13:01:20 2026 GMT
Not After : Sep 30 13:01:20 2026 GMT
Subject: CN=435f834ce1f09974fb7c4fc32e033b460756c02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:ed:7d:0e:0d:a0:58:51:ca:f8:17:93:f2:
de:b8:5d:17:ea:5e:48:4c:fa:eb:a2:21:95:c5:f6:
04:44:a9:63:6a:c6:c4:3d:39:74:85:93:3d:c5:df:
17:7e:d3:56:76:d7:3a:66:ba:71:f4:08:eb:b2:e5:
6c:61:8f:26:b9:77:61:2b:84:69:a1:7c:65:20:93:
3b:ba:0e:ff:63:b3:de:f5:70:10:f8:46:f0:45:a5:
99:1c:af:4e:be:fb:bb:fa:fd:cb:02:df:3f:0d:e7:
ed:c1:ad:eb:f4:80:fb:8e:52:b0:b4:24:27:a2:63:
7d:72:77:a6:40:26:43:c0:a6:43:fe:ab:f8:ba:bf:
03:95:36:bb:a8:0e:95:1f:11:69:74:6c:1d:25:1a:
96:d5:bc:6b:91:09:f5:e0:db:0d:27:b1:fd:17:c9:
49:12:b7:58:e8:75:93:b0:68:74:5e:64:73:4a:5d:
bf:56:4b:e3:b7:4a:06:cf:d8:82:f5:f8:31:5e:1e:
3d:7f:7f:f9:1f:27:eb:af:6c:90:81:c2:69:20:59:
d3:88:a3:16:e7:ec:44:8b:25:e0:b4:93:f2:32:83:
2b:36:b1:36:f9:59:1d:09:69:3e:2e:b9:ff:32:fc:
97:79:cf:21:3e:d1:0c:ea:42:f2:e1:23:38:b7:58:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:83:4C:E1:F0:99:74:FB:7C:4F:C3:2E:03:3B:46:07:56:C0:2F
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:48:54:48:7e:32:95:a3:02:4f:02:50:ae:99:96:91:84:19:
51:ee:85:4f:81:f0:8c:6b:8e:58:c2:27:65:cd:46:88:dc:19:
4c:d7:21:77:9d:2d:cf:35:a0:86:9a:fe:ea:c0:60:30:38:f8:
c8:68:08:09:8d:02:ce:fe:ee:59:c6:27:53:5a:6b:a0:b6:97:
d3:f6:fd:49:75:54:6d:2d:3c:b0:f9:c0:c7:32:04:bc:ee:ba:
15:8d:bf:05:8e:e1:0c:c2:d7:ac:f3:8e:a7:a7:d1:4d:f8:a4:
e4:87:13:12:1b:bd:15:95:7b:f2:8f:dc:78:fd:51:45:e2:64:
db:b2:04:59:f7:ad:53:f4:da:b3:6f:1f:68:b6:f6:42:b6:0c:
a6:73:12:80:94:14:0c:06:13:92:78:db:fa:9e:b8:0a:f9:5e:
45:95:42:6b:84:ce:5a:70:f7:0d:a1:91:ec:a8:f4:bf:3d:b1:
d7:05:06:6b:15:82:3b:59:37:0b:5b:2a:73:1f:ed:e8:c0:ca:
57:77:bb:e6:be:18:07:79:76:a7:7d:83:4b:d1:31:3d:ea:79:
77:9b:6b:ac:de:38:7d:83:16:fd:e3:77:6b:9a:33:54:3d:0b:
a8:68:00:c3:a2:b5:20:47:11:28:79:6b:79:ba:4a:4e:01:39:
35:4b:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:06:04 2026 by rpki-client