Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: E5bCMIIf8I/zhnVwbC4Dk/mcH/izr1y92MZBqjYYSCk=
Subject key identifier: DB:35:EB:15:AE:11:07:CC:F5:80:A6:66:49:FD:35:36:93:91:64:0A
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 01A0CE5A72DB59C92A78CDDBBAF33DCDC49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 1651
Signing time: Wed 23 Sep 2026 13:00:29 +0000
Manifest this update: Wed 23 Sep 2026 13:00:29 +0000
Manifest next update: Thu 24 Sep 2026 13:00:29 +0000
Files and hashes: 1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: D1hZ6baNq9auoOYohXugJUyvQs25yC34SOL1hKLrAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:72:db:59:c9:2a:78:cd:db:ba:f3:3d:cd:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Sep 23 13:00:29 2026 GMT
Not After : Sep 24 13:00:29 2026 GMT
Subject: CN=db35eb15ae1107ccf580a66649fd35369391640a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:d2:d6:ff:81:14:e6:af:56:e2:90:5c:1f:
c6:b1:dc:0b:7c:c0:27:c2:90:5e:ce:1a:ae:c9:71:
5c:b8:a0:e1:d1:ed:3f:92:7c:86:a5:a8:57:60:76:
cc:5b:da:b3:46:0e:89:4f:b0:16:5a:4f:80:3c:07:
c0:80:90:be:fb:fe:b7:e6:38:a4:ba:e9:f3:92:1b:
34:09:0f:1d:ce:7c:f0:b2:77:26:55:ba:5f:5d:6a:
1f:23:be:2b:6c:98:84:83:fb:19:5b:f8:4b:e5:45:
19:49:4b:7a:58:9e:ec:47:a7:c6:a8:12:cc:c4:cf:
a6:a8:00:d1:80:76:ee:2d:34:81:71:55:bc:78:f2:
c5:14:ee:12:51:85:0b:88:f0:35:52:4d:48:3c:0a:
f4:fc:e7:a3:d5:e7:42:2b:6f:0c:e6:51:3d:89:db:
71:f6:fa:32:a1:fb:b4:fc:58:b0:f1:56:e0:7c:6d:
68:75:3c:b6:b5:3a:7a:37:6b:b0:18:35:46:f8:d1:
59:ad:6e:0c:c6:26:9a:ce:53:65:f0:8d:5d:e8:eb:
7f:25:ae:6b:96:e1:15:4e:34:93:23:02:a1:e4:ed:
1d:4f:89:a8:94:f4:e5:1c:81:4c:8b:29:99:3a:a2:
c3:e9:4d:eb:60:c6:38:b9:2d:82:36:a4:24:3c:c3:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:35:EB:15:AE:11:07:CC:F5:80:A6:66:49:FD:35:36:93:91:64:0A
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:22:c9:a6:20:94:88:d8:ad:ea:e2:d9:8a:19:c2:b2:8c:0d:
58:97:69:39:91:f7:c3:0d:95:a3:a7:38:96:8c:eb:d5:68:bd:
85:ac:e8:cd:26:e7:62:92:76:30:c0:c9:53:8a:be:88:7e:ae:
ba:b3:bf:ec:81:b6:5c:b9:e0:17:7e:a0:ae:a0:b4:6c:e1:13:
b5:18:6b:26:dc:b6:6f:2d:40:9a:2e:35:fe:63:5c:ee:00:81:
2a:b8:77:e1:c9:58:8e:73:6f:11:aa:5a:af:f9:d5:f5:f8:58:
3d:48:cf:7c:47:da:32:2a:e4:12:d1:24:2d:59:fb:af:ca:a3:
ea:7a:82:f3:05:c7:8d:dd:b6:40:59:af:bd:26:90:d9:be:37:
eb:7c:d4:70:7b:f5:ad:96:ab:36:0b:69:43:aa:cc:1b:05:d4:
f8:ee:1e:e2:9b:1d:45:b7:e7:b6:20:f0:6e:dc:e6:c5:0a:1e:
a1:37:b2:2c:2a:fc:36:4d:df:9c:69:b6:61:47:b6:f9:73:84:
82:1e:be:27:02:f4:78:3c:9f:52:06:5f:e7:97:47:55:43:f5:
a8:26:29:70:a8:e4:a1:5a:bf:4c:f0:75:55:a5:ad:b2:05:f4:
7c:fe:1d:01:fb:35:8a:fd:4d:4a:9d:fe:2f:79:48:30:99:32:
8a:75:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:59:36 2026 by rpki-client