Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
File: 5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft (raw, json)
Hash identifier: h707DqM38il7s3LegAr1yubUYHfX83cKnZSmFckQ9Hs=
Subject key identifier: 28:98:4A:DB:56:3C:CD:14:D4:90:8F:99:9B:56:8D:39:50:21:66:C9
Authority key identifier: E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C
Certificate issuer: /CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
Certificate serial: 01A0E1E23AB7CB8A03CBE5FF32F179EDA244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
Manifest number: CC
Signing time: Sun 27 Sep 2026 08:01:34 +0000
Manifest this update: Sun 27 Sep 2026 08:01:34 +0000
Manifest next update: Mon 28 Sep 2026 08:01:34 +0000
Files and hashes: 1: 0DosBvc1nYTBnk-k7-9MkqoJuso.roa (hash: HpDjKyJ1RrZFlilOHlA6dkNWt1QM+OdtMilpqKGSWkQ=)
2: 5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl (hash: 9TVWasD7eVAHdoN8iplwMqwsVFIo9LCCGT/GBMn/XpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:3a:b7:cb:8a:03:cb:e5:ff:32:f1:79:ed:a2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
Validity
Not Before: Sep 27 08:01:34 2026 GMT
Not After : Sep 28 08:01:34 2026 GMT
Subject: CN=28984adb563ccd14d4908f999b568d39502166c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:9f:af:e6:99:f1:3b:5c:42:b3:25:a7:c1:
ad:1c:0e:e0:46:2e:4e:90:e4:c1:bc:6b:9f:22:fb:
42:ff:96:a6:f7:57:f1:6d:d2:76:db:a8:bb:c6:6f:
66:5f:9d:16:da:d8:78:23:63:08:db:1b:73:62:30:
2d:4c:9d:49:1b:f8:d9:20:83:25:b6:a9:34:86:bb:
fe:d2:78:7f:89:17:00:50:5b:5d:e1:77:02:aa:20:
88:2a:fe:48:d5:84:aa:21:ef:4e:bc:53:c0:05:53:
d6:5a:14:6d:cc:a2:c8:53:d2:a1:eb:45:7d:b5:cd:
91:9b:94:49:f0:46:58:64:06:8c:03:ca:4e:9b:6a:
b9:48:9d:d7:15:1a:97:43:9b:64:e0:8f:fd:57:91:
27:b2:92:cf:95:7c:04:3e:29:6e:83:76:71:23:d2:
0f:1f:3c:bd:cd:a8:87:e4:ce:db:ef:76:a2:1f:12:
b7:c9:67:6c:06:9d:da:9d:64:85:2e:c8:87:48:86:
bf:e7:0f:2d:cd:25:b0:f2:32:47:eb:9c:df:20:f3:
98:3f:3a:bb:29:f4:a1:99:1d:d9:ff:97:f7:6e:1d:
9b:e0:df:ad:80:e9:3e:ad:12:b9:70:41:43:37:6d:
c3:d6:46:ce:57:01:64:7f:81:71:13:09:8b:d3:c3:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:4A:DB:56:3C:CD:14:D4:90:8F:99:9B:56:8D:39:50:21:66:C9
X509v3 Authority Key Identifier:
keyid:E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:11:47:de:e6:c7:fa:d8:b4:fb:ac:57:af:93:0f:e5:2a:2f:
ec:2b:4d:aa:fb:c8:9b:38:b3:c0:36:6d:5f:29:54:0b:c0:21:
ea:15:c7:b9:dc:15:8c:d0:f4:b0:d5:88:54:24:a2:54:06:68:
6f:67:fe:65:31:e3:2b:18:a4:18:7e:15:05:6c:82:82:3d:67:
c9:d2:d3:07:c3:f2:ae:91:22:1f:47:68:4d:8b:3d:04:3f:3f:
3b:57:76:a1:05:11:b1:1c:ba:81:79:8d:34:47:fa:31:9c:57:
6b:d6:b5:b2:7c:e5:a4:c8:8e:8a:3b:81:09:76:f4:b2:51:a5:
2a:f9:cc:39:db:a3:0f:51:80:3c:83:53:53:d1:e5:21:71:a7:
7b:2d:01:dd:a4:b0:e4:b1:fd:9c:92:14:23:19:ec:6f:98:c1:
52:46:c5:de:70:30:be:54:f0:7b:08:50:0f:08:a4:64:49:7a:
d5:34:df:4a:3b:1d:c9:be:3c:3a:44:9b:af:eb:00:0e:3f:5a:
4b:51:4e:7a:9a:69:34:81:51:a5:81:28:57:cf:49:df:ce:d5:
b3:32:7f:6a:70:1d:35:cb:b6:a7:c3:29:dd:04:d1:9f:95:87:
bd:6b:5b:37:46:65:fd:ea:3f:05:e4:24:26:78:97:be:7c:ec:
7a:71:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:56:09 2026 by rpki-client