Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: LJEONBHhg9R1QY/0AvCivHmQISe0DMo/aXjb69vErYo=
Subject key identifier: 47:16:56:67:EC:AB:BC:FB:C1:48:74:22:DC:20:50:01:AD:EF:DE:33
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 01A0D5DE582A33403B96A93376CACE4BA39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 00:01:53 +0000
Manifest this update: Fri 25 Sep 2026 00:01:53 +0000
Manifest next update: Sat 26 Sep 2026 00:01:53 +0000
Files and hashes: 1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: Qr3dAuUNkFlXLcTG2CFgvddgRo7CJY8CeAWmhDxrehI=)
2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:58:2a:33:40:3b:96:a9:33:76:ca:ce:4b:a3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Sep 25 00:01:53 2026 GMT
Not After : Sep 26 00:01:53 2026 GMT
Subject: CN=47165667ecabbcfbc1487422dc205001adefde33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:d8:7e:43:9e:03:1c:b0:79:db:8c:d0:05:
64:fd:5f:bc:06:63:90:a4:34:89:c1:1a:33:d3:fa:
5c:ce:a5:be:df:ea:70:98:54:74:f4:60:65:46:3b:
7a:80:f9:8c:f1:28:59:e2:86:bc:f2:e5:c9:e2:86:
28:56:72:bd:f9:39:75:8e:e2:e0:f8:62:80:42:c8:
41:2d:eb:94:de:ae:5a:56:0a:9d:87:cf:5d:4c:6a:
72:d9:a9:e3:c9:d5:24:d1:1a:a4:e0:35:88:17:ab:
71:90:19:eb:48:ac:84:2d:6b:3a:c3:2e:b2:74:81:
73:63:c1:f0:41:24:48:67:33:9b:aa:6d:7f:0c:06:
df:e0:13:d8:37:cc:0e:53:05:59:3a:8e:ae:df:35:
f5:47:38:23:4c:74:be:56:ce:4d:02:00:f0:57:35:
d9:bd:46:eb:4a:42:8a:eb:d7:ac:d3:6f:9d:e8:30:
2d:6e:32:1f:08:48:37:4e:c7:ee:3c:bf:a7:0b:01:
3f:0b:67:58:b3:1b:fc:6e:b0:ad:69:26:f9:e0:39:
f9:83:44:0e:39:f4:ec:bf:24:40:37:84:20:85:26:
57:47:8e:40:47:fd:34:b4:e4:ed:2e:db:9d:7c:ad:
8c:06:e8:4f:28:79:fa:f5:bf:b6:3c:85:e5:7d:9a:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:56:67:EC:AB:BC:FB:C1:48:74:22:DC:20:50:01:AD:EF:DE:33
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f3:77:f2:cf:2a:5a:79:ff:4b:18:0a:54:82:94:39:2e:ea:
a5:3a:d5:23:99:95:d5:6d:a8:90:bc:60:b3:6b:b8:d3:ce:9e:
be:a7:4b:99:98:80:c2:48:76:b5:6d:12:34:c4:4d:bf:91:16:
2c:ec:1d:e3:ae:2b:15:69:3a:e0:21:e5:15:bc:2b:26:09:d0:
d6:7e:8b:1e:76:5a:a3:28:b8:e3:34:c9:da:45:03:14:cc:b4:
8f:90:1d:9f:1a:99:a7:88:80:2f:84:32:b3:f3:ba:8d:35:1e:
c4:11:2a:1b:89:18:01:c3:01:b0:d1:21:d9:05:bd:9f:15:0a:
5d:8c:35:7e:a3:8b:e5:15:bd:29:fd:d1:9a:87:a1:1b:4d:b0:
0b:a4:d4:4a:a6:4e:ca:52:2d:a4:fe:5c:ec:79:2b:41:3a:38:
64:b7:12:f0:99:89:8e:56:0e:33:d3:b4:d6:7a:02:16:a6:d6:
1f:cb:ad:44:e2:b4:e4:83:47:16:3c:45:e9:96:b0:00:2e:c2:
14:a2:1d:45:0e:8a:ee:68:2b:b4:d3:7c:50:34:2b:32:87:f7:
fe:ea:f6:ac:f3:4d:bb:1e:7d:4b:79:e5:ba:7a:29:e7:08:79:
cd:81:67:32:ad:64:ee:da:c4:73:e0:29:00:85:ec:4d:79:54:
aa:d9:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:06:24 2026 by rpki-client