Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
File: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft (raw, json)
Hash identifier: Ei6jGPMWI1cyznCM6V5BHwgLjMmA96pZrV7e5t/LcD4=
Subject key identifier: 77:BE:DD:99:C5:BC:BB:70:62:CB:A0:D7:3F:D8:01:AF:D3:AD:A7:FC
Authority key identifier: E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
Certificate issuer: /CN=e5100a621d1fa344107325d3519467eca1145eb9
Certificate serial: 01A0D9BB39B4892977E021B60F753313FD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:00 +0000
Manifest this update: Fri 25 Sep 2026 18:02:00 +0000
Manifest next update: Sat 26 Sep 2026 18:02:00 +0000
Files and hashes: 1: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl (hash: tXgT6KbzVWt+jVe9LmQnJiTS8CzgrjoA2RAAESo+qsQ=)
2: N2hdkNTYOGqgW-2z7I2L2W726cg.roa (hash: +V63+wGYl8NMUG+4AXEpAFTMSrZt1PqBAvD4BIyWtoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:39:b4:89:29:77:e0:21:b6:0f:75:33:13:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5100a621d1fa344107325d3519467eca1145eb9
Validity
Not Before: Sep 25 18:02:00 2026 GMT
Not After : Sep 26 18:02:00 2026 GMT
Subject: CN=77bedd99c5bcbb7062cba0d73fd801afd3ada7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:44:0f:2a:82:a1:6c:d8:dc:fe:76:da:b5:
2f:15:f0:16:92:ce:a6:0c:36:37:9e:9a:b1:31:c7:
14:69:12:01:9f:75:61:6a:a5:9c:45:15:3a:a6:26:
04:63:bc:a1:b7:16:d1:a2:8b:cf:35:cd:7d:a6:0c:
a3:62:6a:39:90:a0:e3:15:14:43:4c:60:d1:9e:cb:
c1:11:2a:e2:22:9a:dd:38:20:39:d4:13:ce:a3:cb:
b8:cb:aa:10:7f:0d:0d:70:b6:85:cd:78:59:bc:55:
13:36:d3:0a:0d:bb:c4:03:46:0e:3b:32:b4:1c:49:
c7:ba:ef:ff:6d:bf:c5:43:d5:31:30:b8:d4:b6:2f:
ed:3d:21:22:dc:16:77:2f:85:41:e4:05:9e:75:e4:
69:de:24:eb:ae:23:8c:3a:3d:e5:d0:c6:12:9b:c8:
a2:9c:a6:e8:d8:d8:6d:de:50:3a:12:64:5e:9f:19:
3f:07:ab:ae:79:6e:e4:c1:81:9a:bd:f1:6d:1c:75:
ff:cc:2b:b7:c7:41:8c:99:09:c9:06:37:e0:c3:72:
d6:68:b0:28:b6:28:8b:9a:ce:e5:1e:dc:ca:22:19:
f0:96:f1:24:72:39:58:b9:1b:8a:3a:2d:e5:82:f5:
de:24:30:ed:b6:17:c4:47:26:97:b3:76:04:67:53:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:DD:99:C5:BC:BB:70:62:CB:A0:D7:3F:D8:01:AF:D3:AD:A7:FC
X509v3 Authority Key Identifier:
keyid:E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:99:0f:fd:67:4d:02:67:d3:e6:1c:a8:c0:fe:81:e2:a1:b0:
c1:b2:18:18:65:c7:bd:cb:8d:78:26:75:16:31:34:e0:86:4a:
67:90:3f:b1:d0:11:33:f8:26:44:63:2e:4f:dd:c9:c8:7e:00:
7f:35:79:df:dd:72:dd:74:57:c9:70:20:7e:a5:84:39:98:df:
3a:e0:32:9a:0b:94:02:b9:2e:07:fc:7e:39:30:10:ed:ac:a5:
2a:a3:ee:ac:08:6d:ef:e5:83:23:31:24:cf:72:8a:f5:f7:1a:
4a:26:df:ee:7b:9c:bb:8c:e4:eb:96:b8:7b:8e:31:66:ec:99:
5b:4f:d7:34:36:8d:81:11:4a:fa:fc:8d:b6:ed:10:35:16:1c:
53:e1:a4:2b:9d:e0:23:24:d0:ee:64:be:00:8b:0d:9c:71:f3:
42:80:b3:83:8a:55:0b:d8:62:78:bb:b4:86:10:c0:fe:69:e8:
ac:bf:cb:ca:d9:8b:a6:00:5c:72:3e:d7:b4:62:a8:ad:10:91:
67:ae:43:e4:ff:84:8d:a2:ea:cf:70:c6:4d:7c:8e:0e:c2:87:
c3:22:57:c8:06:e0:98:e8:ff:12:f4:10:47:76:dc:8f:3d:0a:
4e:dc:20:89:46:e5:ed:ce:aa:27:f1:7b:98:56:f5:68:bc:b0:
f3:cc:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:34:20 2026 by rpki-client