Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File: 5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier: lVZbKwSDlT+2TqjC9ccO9TdQAYx9hIr2G8XEbD3rXDs=
Subject key identifier: BF:6F:A4:28:1C:84:C9:77:D9:1D:78:6E:1B:4E:E3:7C:49:0F:41:BA
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer: /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial: 01A0CAEB8BA593326D4D8EA8685AA08EA9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number: 09C9
Signing time: Tue 22 Sep 2026 21:00:29 +0000
Manifest this update: Tue 22 Sep 2026 21:00:29 +0000
Manifest next update: Wed 23 Sep 2026 21:00:29 +0000
Files and hashes: 1: 1bqNsOJJ8fekiGjNmHIxOifScpk.roa (hash: awuwmLZI74s+JrAhvYcfSETsMAtPOVKMZXnh9sFIapk=)
2: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: 1OJ2NneP2W9x6CoIEVJX26DWfL8D4xe7EcYq/MkvMV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:8b:a5:93:32:6d:4d:8e:a8:68:5a:a0:8e:a9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
Validity
Not Before: Sep 22 21:00:29 2026 GMT
Not After : Sep 23 21:00:29 2026 GMT
Subject: CN=bf6fa4281c84c977d91d786e1b4ee37c490f41ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:a7:1b:a1:f3:3e:d5:64:62:63:8d:4f:d4:
1f:ff:55:ba:46:0c:ce:f3:bb:34:11:4a:62:e7:a0:
bc:28:cf:b0:dd:fa:7f:04:96:23:5f:5b:ba:24:0c:
77:cf:8f:6a:f3:26:8d:59:ef:81:f1:55:b7:bf:75:
30:88:80:b9:e0:74:33:99:c1:a0:b9:e5:6d:b3:48:
05:46:a8:26:a9:87:15:8f:a5:52:ff:56:16:16:7b:
f7:66:8a:1b:f1:71:2d:35:40:56:5d:e9:f3:4d:a7:
dd:ed:ea:d0:c4:82:7c:e2:6e:e5:c5:60:08:59:0a:
d5:84:b1:c0:1f:13:ab:d3:7f:14:ae:36:08:3a:57:
04:e2:6f:7b:b1:8f:56:47:ed:b7:5f:49:5b:ca:69:
25:86:9e:9f:ff:b6:a4:dc:9c:6e:fb:ca:0a:f7:97:
00:4a:56:53:32:49:08:1f:39:6c:8b:ef:d0:bd:81:
51:6c:fc:77:f4:36:25:bd:43:92:40:c8:19:39:10:
4c:c5:c9:6e:bd:02:1f:f3:95:db:fe:cb:1b:76:99:
42:36:03:b3:14:43:b2:2a:d2:73:c2:19:9b:86:47:
1d:21:de:ae:b5:45:37:a0:bb:b9:4f:85:1d:ac:23:
7d:00:2b:16:a3:13:7c:08:62:15:5f:b6:7f:fd:2b:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6F:A4:28:1C:84:C9:77:D9:1D:78:6E:1B:4E:E3:7C:49:0F:41:BA
X509v3 Authority Key Identifier:
keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cb:17:cf:ee:6d:e5:19:fe:03:45:36:e1:41:33:e3:b6:53:
4b:0d:85:19:3f:3f:11:82:62:6a:d0:ee:b2:6f:43:f6:8a:a2:
eb:63:3e:7e:42:df:fe:ff:e0:af:fe:41:83:93:b9:9a:ae:0b:
5c:a0:75:98:7d:65:a7:30:7f:34:3a:4f:88:2d:43:bf:d9:bb:
27:23:fc:b6:a3:f0:7e:37:97:50:18:d8:2f:93:5a:95:bf:b2:
f6:53:d1:40:c2:27:3c:fe:b3:45:e2:40:20:a1:ec:b9:2f:60:
95:ca:65:95:2d:bb:23:95:0a:2a:6c:28:cc:5a:71:9b:7c:15:
6a:5c:70:81:23:bc:e9:96:ca:61:e5:9d:a9:96:f3:d7:46:3d:
0c:49:62:83:39:e4:f6:8c:6e:9e:1c:4b:57:92:f4:93:68:b2:
30:ac:d0:d1:6b:40:01:9c:e9:62:ba:80:68:f3:9a:ac:f7:d5:
44:24:d8:5e:b2:1d:6f:e4:35:13:43:7b:e0:17:32:22:8a:fd:
91:ca:72:0e:40:97:ee:01:ec:d4:cc:00:9e:5f:28:11:a2:a5:
76:8a:74:b6:37:40:0a:ff:31:16:2e:07:21:90:a7:25:09:3f:
ec:1b:27:a2:cc:92:14:5e:a8:9f:ec:b6:5d:8c:81:ed:c7:9e:
d9:b9:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:46:33 2026 by rpki-client