Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
File: 5QkPYoTNm-1eNlwJf33tcQZVj1k.mft (raw, json)
Hash identifier: JP1vRvMNTVHnskMyNCE8bTeaGLXLAVoIZfooEH5WupY=
Subject key identifier: C8:28:E3:26:76:2F:13:4D:6E:32:E1:B2:D3:E4:F8:AE:ED:91:5A:44
Authority key identifier: E5:09:0F:62:84:CD:9B:ED:5E:36:5C:09:7F:7D:ED:71:06:55:8F:59
Certificate issuer: /CN=e5090f6284cd9bed5e365c097f7ded7106558f59
Certificate serial: 01A0D0EE0875167881C82429B802DF81D684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
Manifest number: 01A4
Signing time: Thu 24 Sep 2026 01:00:55 +0000
Manifest this update: Thu 24 Sep 2026 01:00:55 +0000
Manifest next update: Fri 25 Sep 2026 01:00:55 +0000
Files and hashes: 1: 5QkPYoTNm-1eNlwJf33tcQZVj1k.crl (hash: 9XduqsTQeYSMM1nhhdz8QG+pOd/Dao7uRRV1krrjU+c=)
2: T-nFUADDOe_gVl6vpCX2jmb_ysw.roa (hash: AOWlKIZZ81Ea4+CdSRVuTl2Mle2x0FskHzHQS5873EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:08:75:16:78:81:c8:24:29:b8:02:df:81:d6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5090f6284cd9bed5e365c097f7ded7106558f59
Validity
Not Before: Sep 24 01:00:55 2026 GMT
Not After : Sep 25 01:00:55 2026 GMT
Subject: CN=c828e326762f134d6e32e1b2d3e4f8aeed915a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:5d:f0:0c:dc:5f:be:5b:9b:84:0e:3c:d3:
1b:24:81:96:b1:3f:ce:95:02:0a:d4:89:df:0e:fd:
ce:18:52:54:83:28:a4:72:c0:0a:a7:7a:c2:b5:a2:
81:5f:25:da:e6:ca:d7:ca:0b:6a:8c:ab:dd:05:ce:
03:bc:64:fe:d5:95:3f:c1:bf:3b:b2:e9:32:3a:53:
b1:57:2b:90:ea:52:02:89:fe:b8:e0:02:87:8a:f6:
96:bf:24:df:76:23:81:2b:44:88:d6:12:a7:94:50:
2a:76:10:9f:50:0d:ab:fc:81:94:aa:9f:4c:37:d3:
49:0b:db:06:e0:94:7e:42:c3:cf:3b:63:ca:5f:65:
b5:be:ac:e1:ac:6c:e3:5c:3f:f3:ff:13:ec:1f:eb:
c4:cf:32:ec:6c:80:09:a7:06:e4:9d:ee:20:22:71:
73:4b:6f:9a:d3:6d:9d:6d:e6:3d:3c:87:62:39:a6:
a0:db:31:47:f0:a1:71:8d:6d:31:64:ac:05:0c:4b:
2e:41:a2:13:22:4e:41:00:8b:ae:83:e4:34:a6:63:
c6:a0:3a:f8:45:d4:e2:48:45:cf:c2:9b:c8:34:d9:
42:39:86:11:95:35:13:dd:e9:1b:62:ec:a7:4f:4f:
43:1f:71:af:53:ad:0c:ef:83:95:af:e7:f9:bc:5c:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:E3:26:76:2F:13:4D:6E:32:E1:B2:D3:E4:F8:AE:ED:91:5A:44
X509v3 Authority Key Identifier:
keyid:E5:09:0F:62:84:CD:9B:ED:5E:36:5C:09:7F:7D:ED:71:06:55:8F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:92:c9:5b:d9:ae:0d:2b:0a:d7:d4:4c:c5:a4:a0:5e:19:85:
07:d1:33:51:bd:d7:da:ff:30:05:81:89:d4:5b:dd:63:be:fe:
26:2c:7e:12:3c:92:46:80:2e:22:66:40:28:c1:b9:9e:81:ae:
7e:f8:b5:1b:de:05:d2:56:97:ef:33:1c:75:59:3b:28:8d:1f:
ab:93:42:20:93:ab:2c:41:d4:98:94:b9:93:ec:24:41:83:41:
a8:18:d4:ab:cc:b0:ea:75:1f:3c:58:40:e7:8c:83:ac:24:ab:
48:db:43:56:32:d5:40:ab:1c:a4:9c:46:64:a7:c3:44:fe:8c:
93:04:d4:d3:ff:07:71:5e:64:f4:ad:a5:10:c5:70:64:ce:fb:
93:50:06:01:0e:18:87:f0:11:ed:d1:df:d7:48:93:69:f7:ff:
f1:e3:5b:5c:96:24:a5:73:c0:20:64:68:2a:ff:4b:e4:35:b6:
f8:b7:3b:c0:f8:26:e4:a8:d8:1d:0b:e9:ae:55:54:89:45:dc:
d2:5b:a8:f6:30:91:fc:80:52:b8:05:77:b5:3b:8e:c7:cc:9f:
5f:71:9a:cf:4d:52:13:e7:c3:33:31:63:4f:a4:c5:a1:a5:2f:
9b:90:45:5f:78:c4:50:a6:e2:a6:22:31:7d:87:14:5c:2c:42:
12:26:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:07:50 2026 by rpki-client