Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: JQWfx0tsE5YCNMUEMMqf2o4KPKxWpbeQ+Sp9V4oKT/o=
Subject key identifier: E8:E7:E0:45:D7:AF:EC:CC:90:FD:F1:E9:11:41:28:A2:A1:C6:F5:FC
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 01A0CBC80838459623B4A557D5DBCC4B1B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 15C7
Signing time: Wed 23 Sep 2026 01:01:19 +0000
Manifest this update: Wed 23 Sep 2026 01:01:19 +0000
Manifest next update: Thu 24 Sep 2026 01:01:19 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: S/a2vZ9JjOr72k+UcWn5/k7PiOrEw9pEFF8pucyHOOk=)
2: dSJYyBacKNyFWQortG0dtGxEvkA.roa (hash: 1+0WqiWKHLJ0X3R8fzF8nekZfCXXuZVvJ/QruxfaCQY=)
3: laxmMFQ70A9hbGm3vgsAxZetL8w.roa (hash: OX9ADiSLLP9cl4qIeUdloL4juSc2Kj0rzwOIr5agoQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:08:38:45:96:23:b4:a5:57:d5:db:cc:4b:1b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Sep 23 01:01:19 2026 GMT
Not After : Sep 24 01:01:19 2026 GMT
Subject: CN=e8e7e045d7afeccc90fdf1e9114128a2a1c6f5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:b8:2b:22:48:95:2f:fc:1b:57:91:c7:87:
6d:90:ee:8a:28:a1:36:0e:05:ae:a9:ba:13:6b:2b:
a0:04:97:6a:14:7d:5d:c2:09:e1:d7:34:00:f1:9d:
d2:e4:f2:d3:2a:e2:10:4a:62:69:7e:5f:20:72:42:
17:0a:0e:c9:64:60:0f:27:34:25:cc:03:f4:db:6e:
09:bb:f2:ac:bb:c1:d1:28:80:be:b5:53:39:a0:ac:
28:53:72:28:60:10:75:07:6d:74:98:e8:04:1a:1b:
2a:fc:4d:9c:d0:5a:01:91:bb:ed:ce:02:d5:d8:50:
f8:82:25:c5:be:23:57:2c:2b:60:9c:6a:be:f7:d1:
e6:c3:81:31:0c:d3:97:04:a0:81:ed:35:ae:21:b6:
ef:e2:2e:63:38:09:80:77:bb:f1:46:e8:ea:0f:15:
13:9c:bd:09:ac:c8:ee:d1:dc:e8:77:c8:e5:25:9c:
5c:2d:86:a6:77:70:75:cc:8e:e3:dd:f0:a7:b6:8d:
e6:04:09:af:b4:a8:58:d8:03:7c:53:05:ef:b4:8a:
3e:a3:3e:62:51:4e:ed:f5:59:9e:07:91:d1:9f:64:
94:a4:bc:01:9e:52:d4:4f:53:40:2d:20:e5:e2:cd:
bb:a7:78:6e:7a:9e:d8:a0:57:a3:61:9d:e3:0c:d8:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E7:E0:45:D7:AF:EC:CC:90:FD:F1:E9:11:41:28:A2:A1:C6:F5:FC
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:4e:91:c0:39:30:33:89:97:f3:19:6c:59:da:01:8c:aa:
62:f8:46:2f:7f:54:11:d1:59:69:b5:e0:10:34:08:aa:42:44:
50:ac:f4:1f:ab:b8:f2:69:f8:c6:d3:ce:49:6b:59:16:3e:31:
42:aa:be:8e:a5:f1:bb:fd:71:7c:03:41:6a:82:df:02:db:e6:
eb:4f:d8:f9:8b:f0:55:04:cc:b9:95:34:19:51:c9:38:42:74:
6f:65:77:38:f1:d3:82:93:be:4b:8c:aa:12:3b:5a:5b:9c:c7:
ca:dd:f1:3e:45:19:dc:98:e7:c6:4b:86:a7:2c:41:da:f9:9c:
d2:3e:64:d9:87:57:a3:23:c4:87:7a:c1:08:ba:00:f6:77:79:
0c:f6:44:04:5b:4c:da:34:13:a5:a8:74:bf:05:10:40:02:d0:
1d:2e:37:0c:80:8e:2c:84:41:fa:6b:7c:ff:be:6e:4c:fd:77:
83:83:ca:7d:19:e7:03:19:b0:5d:52:ae:38:f4:c4:2a:49:48:
d4:10:fa:bc:5d:31:2b:78:84:34:a6:d8:0a:e6:3b:1a:5d:c6:
d0:6f:c6:61:b6:e9:30:c0:0f:09:f2:a8:4c:26:1e:a3:fa:0c:
2e:ae:51:38:92:98:93:06:a0:24:ef:47:91:01:9b:80:b9:15:
93:8d:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:39:00 2026 by rpki-client