Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
File: 5i-EXuHrFcTOfA3AV3I654q6olQ.mft (raw, json)
Hash identifier: XExyk7/Am1+NAAE7Wja0MF/vb8qC3g/63oD9AtN/Ejw=
Subject key identifier: D9:91:79:EF:40:08:30:AD:33:DE:26:35:26:10:30:AD:95:43:9A:E8
Authority key identifier: E6:2F:84:5E:E1:EB:15:C4:CE:7C:0D:C0:57:72:3A:E7:8A:BA:A2:54
Certificate issuer: /CN=e62f845ee1eb15c4ce7c0dc057723ae78abaa254
Certificate serial: 01A0DBE01EE9885DBD7FD5FC9BFF183BE762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5i-EXuHrFcTOfA3AV3I654q6olQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
Manifest number: 01DB
Signing time: Sat 26 Sep 2026 04:01:33 +0000
Manifest this update: Sat 26 Sep 2026 04:01:33 +0000
Manifest next update: Sun 27 Sep 2026 04:01:33 +0000
Files and hashes: 1: 5i-EXuHrFcTOfA3AV3I654q6olQ.crl (hash: l/Q3AJM5eM6QSlWxJ7rpAf05vGdYhtqRJLkel5ijGOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5i-EXuHrFcTOfA3AV3I654q6olQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:1e:e9:88:5d:bd:7f:d5:fc:9b:ff:18:3b:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62f845ee1eb15c4ce7c0dc057723ae78abaa254
Validity
Not Before: Sep 26 04:01:33 2026 GMT
Not After : Sep 27 04:01:33 2026 GMT
Subject: CN=d99179ef400830ad33de2635261030ad95439ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:61:d2:d9:18:e5:b0:09:ea:b1:c0:50:82:
e6:34:92:ac:c1:d8:d4:14:8b:8a:9e:73:fb:62:8e:
8d:f2:cb:90:fa:a3:3c:d6:99:fd:de:23:7c:3b:4a:
1e:39:2d:8e:34:1c:e7:98:21:e1:d2:d1:b2:43:4f:
39:e5:42:5d:5f:60:f5:39:85:c0:4a:fa:2b:ef:26:
06:12:bf:32:f4:4d:a4:00:54:78:41:41:05:99:4f:
a2:7c:fa:50:8d:a1:90:23:c4:9a:cd:4c:ab:53:fe:
d5:a4:9b:51:4f:c6:26:cb:1b:cd:e7:8a:e1:6d:14:
89:d7:a8:f5:54:a2:d3:2e:d4:f2:ee:73:83:87:45:
6c:96:e1:5e:6d:1a:25:75:ba:5b:5a:48:bb:21:37:
c6:73:87:cc:0e:a2:0a:51:89:07:5b:90:9a:b6:a6:
31:ba:6c:96:1c:ad:4e:b5:a7:15:67:f9:11:c6:4c:
65:f6:c3:78:35:c1:0a:d1:db:7c:06:da:91:5c:b6:
95:3f:1f:52:40:67:34:18:7f:07:17:e5:5b:fe:9b:
9a:01:c0:18:cd:b6:85:bb:c7:63:44:22:4c:50:24:
4d:9c:31:0f:78:39:21:0e:ac:ea:d1:a4:31:5b:45:
ce:9a:9d:f7:11:7b:4e:d4:04:14:cb:e2:2e:66:da:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:79:EF:40:08:30:AD:33:DE:26:35:26:10:30:AD:95:43:9A:E8
X509v3 Authority Key Identifier:
keyid:E6:2F:84:5E:E1:EB:15:C4:CE:7C:0D:C0:57:72:3A:E7:8A:BA:A2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i-EXuHrFcTOfA3AV3I654q6olQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3b:fe:5c:3e:70:a8:af:e7:95:f8:8d:5b:cf:d2:a9:39:99:
ae:41:4c:a0:36:57:ca:b9:ce:1d:23:e6:61:a0:f5:33:db:1a:
d0:73:1b:9c:da:64:9b:d2:74:fa:c0:8f:57:81:c7:cf:82:60:
ad:31:08:cc:80:65:f1:57:5c:b7:e9:06:72:6f:84:2a:7c:a7:
4d:9e:14:f6:05:22:51:08:26:ea:26:55:ac:7a:2a:87:4b:75:
f9:1a:1d:13:d1:7b:6e:20:63:68:ff:d1:f5:04:92:3a:2c:48:
ea:ed:6c:df:df:08:41:ce:ed:0f:01:10:75:17:09:eb:23:6e:
12:18:d2:e0:e6:e4:31:92:dc:24:8f:53:87:ac:8e:95:4f:1f:
5e:a0:de:a1:6b:ba:d0:6e:87:70:9a:1b:01:cb:12:d3:b3:43:
16:3b:4c:52:b3:99:a8:ce:10:0c:05:0a:dd:53:93:e5:52:cf:
ec:78:e1:20:16:21:d6:08:6a:7d:a9:98:9f:a5:62:3d:cb:77:
88:e7:a4:f5:27:6d:2b:79:40:8b:c3:80:67:c7:b8:83:a5:ff:
3c:be:e4:30:08:19:a7:4b:76:64:79:c6:df:51:fe:af:8d:58:
e6:ed:5c:3e:df:05:19:d7:9b:31:53:ea:8c:c6:f2:4f:bc:98:
af:2a:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:16:09 2026 by rpki-client