Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier: LaScycgRME0q7B51gKCgqLZI9wB7sl16XkYZSnKtuiU=
Subject key identifier: 47:A3:44:C0:4E:F5:A3:2D:6F:EA:92:8E:F7:B6:F7:3D:6A:9E:BF:92
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial: 01A0CFA4A2D862597BE8458E2F6041D5A110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number: 19F9
Signing time: Wed 23 Sep 2026 19:01:08 +0000
Manifest this update: Wed 23 Sep 2026 19:01:08 +0000
Manifest next update: Thu 24 Sep 2026 19:01:08 +0000
Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: UxruA9N0cn+I+nxMOcumoLAY5fK1NGijtmgefEhVcJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:a2:d8:62:59:7b:e8:45:8e:2f:60:41:d5:a1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Validity
Not Before: Sep 23 19:01:08 2026 GMT
Not After : Sep 24 19:01:08 2026 GMT
Subject: CN=47a344c04ef5a32d6fea928ef7b6f73d6a9ebf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:2d:d5:75:c8:19:e6:cd:70:8d:48:4f:7d:
e0:f7:6e:2f:df:7f:6e:21:6c:e1:27:b4:5c:23:01:
e7:99:91:32:4b:b0:92:e4:27:db:c4:7d:f8:c5:4b:
a5:6a:05:9c:c6:bd:ae:e6:fa:17:a5:4b:4e:d5:03:
62:b5:b6:73:70:43:19:59:7b:48:b0:bd:43:52:f8:
93:fd:63:0e:da:b7:b9:60:ba:27:21:a3:8f:b2:0f:
8a:9d:75:e2:dc:ee:c8:17:73:5c:35:cb:64:98:48:
7f:ec:88:e2:28:53:87:84:6d:c8:e1:d4:b8:f0:16:
2e:75:b8:dd:54:14:7b:aa:54:20:6c:c4:57:74:77:
bf:a7:87:d6:95:e9:ba:73:32:41:35:ea:b8:b0:0c:
b3:ea:b3:c5:79:e7:a0:7e:f8:7b:37:5d:30:b2:5f:
b9:98:fc:62:73:2e:26:f7:db:33:80:87:ef:e6:38:
a9:3c:65:b8:7f:4e:eb:ee:c1:c1:96:e7:3a:0c:7b:
e5:c8:9b:f1:e7:c6:23:ca:c0:7d:c0:02:80:37:31:
13:28:c9:5c:b0:ef:9f:29:70:89:17:76:20:de:a9:
10:4e:81:a7:a3:1d:58:0a:7d:56:e6:f6:90:e0:c1:
f5:88:53:b6:32:d4:75:1e:5c:e5:91:4e:c8:80:cf:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A3:44:C0:4E:F5:A3:2D:6F:EA:92:8E:F7:B6:F7:3D:6A:9E:BF:92
X509v3 Authority Key Identifier:
keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:94:89:14:11:a2:82:9c:6f:0b:16:97:dd:e6:54:4c:5c:7b:
63:d3:1d:ac:03:ea:2a:77:4a:4a:69:ea:ab:92:11:08:e7:bd:
d0:f5:b8:31:46:a0:6d:c9:68:7e:7d:f4:a7:e3:66:ea:d2:f4:
1b:8b:5e:18:43:0a:7f:8c:3d:eb:11:4a:32:19:cd:47:1b:93:
84:3e:ac:6c:76:2f:dc:99:2e:44:a4:e2:00:ab:d0:19:2f:5b:
b5:e5:f0:42:20:ca:e7:85:ab:b8:16:87:f5:ee:65:f4:d1:43:
87:39:3a:ed:d2:5e:1b:4b:c5:ba:8f:b2:b7:30:7d:ef:49:8e:
35:08:dd:d5:87:4d:ed:b2:81:35:aa:64:d4:ae:5b:5a:f0:2a:
74:25:b6:9a:10:7b:df:29:51:c7:42:bb:5f:06:da:26:30:0c:
80:a9:4a:68:b2:d5:30:cc:00:bb:0f:81:e0:76:3a:71:97:05:
59:51:b5:16:eb:86:bf:0d:ae:24:0c:47:5c:c9:92:ee:4f:0d:
3a:ea:4a:5d:66:e4:b5:f0:95:56:07:7c:ef:1a:2f:45:d8:78:
60:57:b6:af:9d:1a:83:24:18:7d:1a:fd:91:78:a8:d3:c3:99:
d7:1c:d6:e5:e7:88:5e:d2:a4:15:27:f8:b9:ca:4f:b8:9c:0a:
f0:fb:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:25:08 2026 by rpki-client