Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: s/lhqp7pYRi64Gp4P9vz8P2izqg1v/VXegenCvWk71E=
Subject key identifier: A1:E5:0D:82:20:77:9F:72:FD:F1:8B:2A:D2:FF:A8:2F:D8:21:1B:73
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 01A0CA102DD1BBA2C165653EBB96AD90A99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0DA8
Signing time: Tue 22 Sep 2026 17:00:52 +0000
Manifest this update: Tue 22 Sep 2026 17:00:52 +0000
Manifest next update: Wed 23 Sep 2026 17:00:52 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: ABurAUjhDVSEVoZ+G7bPcR3gKl+IrqRo9WUSpDyJnlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:2d:d1:bb:a2:c1:65:65:3e:bb:96:ad:90:a9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Sep 22 17:00:52 2026 GMT
Not After : Sep 23 17:00:52 2026 GMT
Subject: CN=a1e50d8220779f72fdf18b2ad2ffa82fd8211b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:60:8d:4a:46:69:27:f0:7e:31:53:e2:71:
99:9f:cd:ca:71:74:06:0c:54:00:b9:27:ec:ba:e2:
45:0b:01:90:07:36:12:95:33:73:59:bd:4f:d1:e5:
96:fe:66:79:a3:69:95:b9:98:06:f8:5b:59:ae:fc:
40:dd:0c:bd:a5:fd:61:39:8a:d5:0c:0c:af:ae:1c:
d6:4e:81:0e:55:b6:0f:7a:46:f5:aa:80:bf:35:90:
3d:44:64:0a:e1:61:5e:12:9d:f9:e3:fb:86:ef:85:
35:48:9a:9c:0d:ba:27:38:f0:fe:5e:9c:84:8b:ce:
51:ca:6c:d5:0f:c0:cf:de:c6:f5:86:fa:03:7c:3e:
a2:4a:0f:73:3d:04:47:46:1c:41:db:49:86:49:13:
ab:9c:2f:95:0b:bf:15:bc:08:06:46:6d:c1:44:37:
8b:b9:cc:c7:fb:9a:28:75:2b:39:2e:6e:26:60:1f:
e6:93:a1:bb:3c:b6:90:56:da:cd:e5:88:0b:d1:8f:
25:a5:5c:af:2b:aa:52:2a:4e:b2:77:2f:60:d1:a8:
29:7b:3b:ca:7f:52:03:cb:5f:58:17:43:d0:83:a8:
90:a9:12:a4:c1:e8:88:e8:86:98:84:d7:6d:26:a2:
08:2a:f5:d1:06:52:f9:b8:59:46:0d:66:35:27:91:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:0D:82:20:77:9F:72:FD:F1:8B:2A:D2:FF:A8:2F:D8:21:1B:73
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c4:b0:fc:1f:63:93:91:bf:94:fb:58:4a:f8:f9:d5:d3:65:
fb:98:17:41:2c:db:87:dc:8f:69:82:b8:ae:9b:ac:9a:5d:0f:
1e:b2:38:22:76:7d:ee:7e:58:62:af:80:fb:4d:9e:04:ac:92:
5e:db:e4:8b:15:c6:e5:54:00:2d:81:46:0e:c6:45:8d:f7:a9:
ae:c3:bd:91:ce:48:9d:e5:fe:9b:5c:65:2a:15:d3:b9:ff:59:
ab:3b:ce:02:96:22:8b:da:34:f0:ac:4a:92:24:ce:b7:07:1a:
c3:7e:ab:8d:ad:c0:ef:58:e6:2b:00:25:d7:32:0f:54:3b:a0:
9d:82:25:e9:42:50:14:fa:1d:27:3f:51:73:10:a1:45:7a:fa:
78:ad:8a:86:a3:c6:ae:51:c2:ed:1b:8b:ae:7a:6b:0d:3d:78:
33:38:a6:7b:80:7b:3e:b7:76:74:e5:26:f5:83:1d:e8:25:34:
76:30:ea:52:4f:5a:61:b3:56:96:b4:33:a7:74:f5:a3:f8:07:
ed:82:dd:52:41:35:23:53:72:c2:86:60:08:49:7d:fa:49:35:
93:47:58:2a:27:0d:eb:0e:81:af:0f:88:c3:69:85:da:c4:14:
99:b1:6e:a2:5b:7d:2e:e2:39:53:64:d6:06:44:4f:3a:dc:29:
e5:95:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:37 2026 by rpki-client