Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier: 3jmSGi5dUiQ6t+UPgaB3pjxsnB3iXbdoYQM636gj5v8=
Subject key identifier: 2C:C3:86:B6:95:44:72:6E:C2:2A:1B:05:8E:58:2B:5B:7A:AA:D4:2D
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 01A0D8049EA7AD54DE34C392BE6FC2D4EC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 10:02:56 +0000
Manifest this update: Fri 25 Sep 2026 10:02:56 +0000
Manifest next update: Sat 26 Sep 2026 10:02:56 +0000
Files and hashes: 1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: Cw7zDMfOxJD5y52D7wvVPEqmUOzyw/znxZ8/3pmQNhI=)
2: ko2j8hnKnRa6XfeSySN88cJHiqc.roa (hash: MyMKVgwxSjCpWrh/r1qz4ah1FabN79izJ21lx/qGswk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:9e:a7:ad:54:de:34:c3:92:be:6f:c2:d4:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: Sep 25 10:02:56 2026 GMT
Not After : Sep 26 10:02:56 2026 GMT
Subject: CN=2cc386b69544726ec22a1b058e582b5b7aaad42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:60:b8:e9:72:1f:6d:76:62:2c:84:07:cf:
13:1b:b9:cc:60:03:48:7f:0c:5a:7e:66:3c:de:b7:
5f:ba:d1:74:3a:ed:e3:5b:85:44:e3:7c:8b:f9:71:
ca:ad:0b:dc:6e:0c:0c:e5:4c:ee:f0:80:c0:8f:ab:
a6:9b:a9:d4:f2:97:08:ea:17:5e:0f:07:e5:09:ec:
89:e2:36:76:ba:9d:ce:be:fc:0c:d9:8b:97:66:b5:
3d:04:a3:80:0d:54:2d:f4:27:a4:29:5b:8d:63:c6:
ac:b1:b9:ce:78:fe:84:61:4f:4e:dd:fa:39:15:c2:
18:8e:cf:3e:44:19:41:4e:c5:26:a7:d4:bf:51:b1:
65:18:c4:b9:32:31:8d:f2:f7:75:28:bf:64:32:bd:
74:81:58:af:d6:b9:bf:71:df:e6:cb:88:e8:f0:0b:
a7:5f:b8:49:8d:e1:19:51:07:8e:8f:18:22:ea:ff:
3a:34:f2:cb:85:5e:02:a3:ef:f7:01:d1:30:7b:b4:
9e:e4:6b:e0:9f:af:6d:6a:2a:9f:4d:a6:1b:53:8b:
fc:6b:93:47:66:38:8f:5d:24:82:2b:a5:9a:31:51:
7e:37:6a:82:1c:54:1f:f1:91:a9:f9:74:6f:34:5c:
95:5e:df:c9:e4:ec:38:79:63:2f:04:54:98:7a:17:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:86:B6:95:44:72:6E:C2:2A:1B:05:8E:58:2B:5B:7A:AA:D4:2D
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2d:e3:b8:87:ef:e0:fb:bd:e2:92:9d:45:41:5b:1f:8e:cc:
9f:c6:3c:32:74:41:9b:13:e7:32:c1:cf:47:90:0d:d9:ab:c1:
82:68:04:cf:c9:45:c1:cd:19:0a:9a:21:99:06:e3:15:0c:ee:
e8:19:e9:ce:77:d3:43:38:40:d6:75:99:06:35:39:3b:f8:08:
ac:3a:d5:ad:aa:e2:77:1d:4a:c9:73:ec:69:5a:74:da:2d:3d:
1a:84:4e:b0:45:05:68:79:42:5a:2d:37:52:fe:89:9a:85:c9:
58:95:be:8a:db:3d:0b:48:54:65:d6:ae:f0:89:c4:ef:c1:1c:
09:74:27:b1:b2:9e:36:40:1d:9e:9b:03:88:c1:da:08:b9:33:
86:70:57:40:68:c2:0e:c2:de:7f:0f:9f:33:b8:a9:e2:5a:4b:
68:c9:2a:97:26:fe:6a:4e:be:2d:1e:a7:46:ca:bd:96:af:07:
55:35:36:a9:b8:64:dc:b8:fc:70:1d:56:c1:17:f9:76:86:ec:
5a:71:03:51:4b:58:3f:b0:ca:73:c1:8a:67:ac:f7:6d:1c:9f:
86:69:bf:7a:7a:1e:a5:a7:71:a5:e9:04:63:50:92:79:06:06:
61:07:f3:2b:d0:34:8d:7e:8b:81:ac:df:64:b0:56:9f:57:46:
01:6b:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:58:59 2026 by rpki-client