Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: uUbiV7Orl79wM5LRtb7dalX3LiUUWoHP0W+UHYrdM8s=
Subject key identifier: 21:22:98:32:E7:44:3E:28:6A:CC:E6:DD:1C:30:D0:71:9A:D3:85:FE
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 01A0D26E8CACAA562DAF5300E9BED40F4D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 08:00:55 +0000
Manifest this update: Thu 24 Sep 2026 08:00:55 +0000
Manifest next update: Fri 25 Sep 2026 08:00:55 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: KKwozg/WB+/Ktyf7qJgJxPI+gs9bu4Q4jzPpUPBZUyQ=)
2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:8c:ac:aa:56:2d:af:53:00:e9:be:d4:0f:4d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Sep 24 08:00:55 2026 GMT
Not After : Sep 25 08:00:55 2026 GMT
Subject: CN=21229832e7443e286acce6dd1c30d0719ad385fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:5d:b5:26:18:14:45:07:e1:2b:d7:bc:0d:
b9:61:7a:be:6c:a5:b4:34:57:2f:f3:e8:a3:36:94:
2c:c8:c9:cf:b6:ee:a8:e3:8b:62:54:8e:93:ed:e4:
6d:84:4b:cd:c7:bb:04:cd:b7:33:45:05:a1:3c:11:
5a:f0:6b:40:4a:eb:cf:b6:04:e0:6c:df:1f:9c:46:
11:24:f0:63:e4:d2:9b:ca:14:cc:6a:3f:3f:95:50:
ec:35:fc:3b:8d:3c:d7:06:5f:e3:53:a5:36:69:99:
ea:b7:42:fa:1d:fc:45:e3:d2:6d:87:36:20:0a:ac:
c4:02:78:ac:6f:d2:bb:c3:5b:f3:d3:95:3d:a3:f6:
7b:1c:6b:26:ef:22:2a:4d:98:2e:da:30:45:6a:5b:
0c:88:e2:a2:ef:6c:66:7f:77:4e:ec:8b:64:11:6b:
fa:38:bf:69:5c:ac:d4:f8:2f:38:d9:e7:99:50:71:
c2:70:0f:f8:42:7b:be:40:51:85:01:0b:4a:78:23:
3e:2a:b0:b0:00:79:90:32:56:27:fd:b0:72:37:80:
e5:b0:6d:2e:9b:e7:ed:33:76:fc:53:bc:a9:94:32:
d9:95:c1:3a:df:07:3b:59:7d:d7:57:25:a2:17:22:
96:ad:5b:14:c0:e3:58:25:90:ad:54:57:39:98:6d:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:98:32:E7:44:3E:28:6A:CC:E6:DD:1C:30:D0:71:9A:D3:85:FE
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1f:7b:fb:4e:50:34:49:f4:e7:84:43:12:72:04:0a:ad:94:
33:3c:30:8a:6e:7b:14:1d:bc:4d:61:8a:06:66:8a:48:2c:03:
f6:e9:77:ed:63:da:16:0f:73:1b:65:30:38:11:3b:53:9a:d4:
28:8f:7f:a1:9f:be:c2:ab:71:56:d4:11:03:0a:48:d0:0c:58:
83:49:ab:82:bb:97:13:4b:f6:d1:33:35:ff:f8:10:7c:fb:3d:
50:b9:a9:e6:33:d8:d8:d6:cb:d3:d0:d2:10:fa:c5:c9:32:0d:
ad:b6:06:64:32:5e:35:11:af:b2:1c:9b:86:04:f2:c1:8c:13:
03:c9:e1:85:35:89:47:81:80:62:86:26:85:91:f9:db:8d:24:
da:3d:32:e5:62:b8:7e:84:18:33:4e:0a:87:62:cc:bc:15:7a:
fb:e7:38:af:4a:0e:f3:a7:90:56:05:c2:53:a4:06:84:03:6a:
53:4b:22:80:41:45:46:03:fc:1c:b0:13:8a:01:45:a4:b9:83:
2d:ef:6a:3a:8a:ab:c0:1e:75:86:6d:1b:86:1d:e7:7a:bf:97:
dc:4d:a4:f1:3b:c3:a4:bf:3d:9f:c1:f2:58:ad:48:10:53:42:
57:e2:de:75:74:19:e5:ee:28:6f:d1:3d:4a:0c:72:46:44:3d:
78:c4:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:30:20 2026 by rpki-client