Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier: TieV1ObNih1cCeBJWRFwq/CEXoc5OS3eZXmJdXyy44k=
Subject key identifier: D5:62:CB:EF:DC:F4:96:42:B9:4E:0A:E8:DE:D6:39:10:BF:4B:5A:DE
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 01A0D34B28C5215ECF67F8978BE0B47C04DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number: 0DA0
Signing time: Thu 24 Sep 2026 12:01:53 +0000
Manifest this update: Thu 24 Sep 2026 12:01:53 +0000
Manifest next update: Fri 25 Sep 2026 12:01:53 +0000
Files and hashes: 1: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: O9riGqueKl69l5OZJkWxbVvZxijYq7levf+btTaWJ3s=)
2: 9MezlHXAeGWTxOc7UTvV8DR5uWo.roa (hash: n9z8Qm42I0TN2dbDtlo0CkxcfTlhf2U1vO8dzmiyccw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:28:c5:21:5e:cf:67:f8:97:8b:e0:b4:7c:04:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Sep 24 12:01:53 2026 GMT
Not After : Sep 25 12:01:53 2026 GMT
Subject: CN=d562cbefdcf49642b94e0ae8ded63910bf4b5ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:46:c9:ec:19:0f:09:d0:c1:8b:c3:d1:1f:
d9:38:f3:2d:f4:f6:53:97:7c:f3:05:85:7e:2a:43:
eb:ea:70:2b:ed:20:17:d9:8e:51:6b:ae:44:be:a5:
51:58:bc:61:da:11:50:54:cc:61:c0:db:f6:a5:ee:
35:b0:8d:06:75:f8:40:e6:6e:e6:fa:75:f1:67:5b:
fc:35:a2:a2:49:6d:c0:02:b3:d3:f3:cc:25:94:16:
ab:51:52:ae:f1:85:32:6c:92:ae:87:b4:97:ad:af:
db:23:6a:84:37:99:15:7a:7c:c9:98:a0:cc:23:84:
d0:86:49:93:c9:44:88:f0:25:39:b1:50:93:b1:ac:
6c:d6:a8:51:c7:85:a2:5c:b1:19:65:02:73:73:ef:
61:59:e5:d2:ab:a5:a9:ea:82:4a:6a:5d:9d:d5:7f:
fa:fa:d5:f7:80:ef:cb:6d:ad:56:dc:45:ab:74:11:
5f:91:00:f9:59:b6:f0:5c:0e:5d:df:3a:0a:fe:ae:
44:f2:51:fe:38:9d:da:c8:39:ff:47:0a:36:90:ab:
94:f3:7c:3a:3c:2f:2c:13:c5:27:eb:06:0a:cb:76:
b8:f7:f5:b4:98:98:3e:86:64:d4:2d:a3:a9:a7:98:
d8:47:df:27:f7:f3:5a:b4:a7:37:38:37:de:ff:7f:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:CB:EF:DC:F4:96:42:B9:4E:0A:E8:DE:D6:39:10:BF:4B:5A:DE
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:6d:58:bf:97:2c:e9:db:70:7d:54:35:25:01:8a:0e:ee:
20:e4:f2:69:81:af:24:1d:3e:98:13:3a:20:da:f3:d5:44:85:
a9:1b:9d:2d:12:39:00:ab:83:bb:aa:c5:58:e6:aa:60:56:91:
cc:e6:1d:ce:71:b2:f9:9b:22:db:19:53:be:6b:18:95:96:2a:
b4:b7:a1:58:08:32:5e:e0:bc:b2:80:df:4f:90:5b:98:ac:06:
9c:62:e9:de:3e:22:6c:ec:4b:06:90:12:f4:48:e0:f3:3f:36:
76:dd:d7:25:42:08:d9:76:54:10:00:90:4c:79:37:e5:7b:f9:
b9:15:65:6b:1b:6b:c3:89:21:65:4f:db:00:e2:7f:c9:ce:81:
60:aa:e4:e5:23:84:27:6b:f1:6e:d3:bf:6c:3c:5b:b0:a2:e0:
e8:44:1c:63:99:cb:dd:7f:70:f1:97:54:7f:1f:73:b2:66:c0:
35:4b:70:95:22:b5:5f:80:f2:fc:c1:78:ce:72:20:b0:e7:7c:
6d:73:3b:5e:75:38:11:a5:7f:f5:2a:42:b3:25:df:03:d3:65:
b4:5b:eb:9e:62:a4:c9:49:90:ce:89:03:ae:88:64:3e:f0:ea:
33:c0:b4:27:18:02:0c:f5:80:f2:22:b9:15:27:48:41:26:83:
95:0f:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:52:32 2026 by rpki-client