Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier: 0ma8teVKAP79ILVu6Y4t+bNSX33zOU7RX27ha8nFtcM=
Subject key identifier: B6:E2:23:75:AD:B3:53:A7:A1:BE:A8:EF:70:DB:BD:F5:49:F4:C4:CC
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 01A0DC16FAD41A3A451CDE873AC762EDEFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 05:01:28 +0000
Manifest this update: Sat 26 Sep 2026 05:01:28 +0000
Manifest next update: Sun 27 Sep 2026 05:01:28 +0000
Files and hashes: 1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: uPL6S6NII/b+MRLXXb1l2wxeP/f14FE4Ni1d2rhXT6Y=)
2: P39ugDcLvRSRgxyi-0KZpHQEqhs.roa (hash: hvw+iWajh4kVRMPbjAFg3SlmXwK5dhZKnwTAvA/Phbc=)
3: RutY2PEzNNQaSoLjnZ05mYIop5Q.roa (hash: XzQEjLEwEdF5fa58iJ8ASdj8lsvXpmYLt3uKDH2dqwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:fa:d4:1a:3a:45:1c:de:87:3a:c7:62:ed:ef:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Sep 26 05:01:28 2026 GMT
Not After : Sep 27 05:01:28 2026 GMT
Subject: CN=b6e22375adb353a7a1bea8ef70dbbdf549f4c4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:e5:72:ba:4d:9d:aa:55:e1:b1:df:5f:26:
8c:5e:cb:09:e7:10:72:44:47:ad:e1:e2:76:7d:55:
85:4b:ae:87:2e:00:8e:75:52:c6:59:a1:bf:6c:5b:
cc:df:02:f9:d2:90:ea:bf:17:0e:c8:4c:cc:1c:5b:
76:07:36:c5:c4:5d:de:60:3d:c2:a5:b6:a3:d6:5a:
5f:1c:70:76:fa:17:79:2c:be:98:49:b8:9b:e6:de:
dd:6b:94:c1:f7:fb:28:e3:b9:dd:d2:b1:02:40:9d:
85:c5:e1:82:08:29:53:5d:24:30:c5:c3:4b:11:3b:
bf:25:c2:38:ad:29:60:27:c7:e9:06:eb:ec:31:5f:
59:aa:3b:70:53:89:aa:41:a3:5a:4b:4b:99:ad:cf:
c5:08:4d:83:8e:ae:bb:72:79:4d:a1:b2:46:7f:0e:
17:3c:ee:29:13:e2:41:b7:e8:bd:64:13:4a:ff:57:
47:07:69:af:05:19:3a:08:ce:2f:24:18:87:f5:66:
b2:1e:db:89:ad:ac:a3:22:81:65:1a:87:28:89:f3:
23:7b:31:33:32:69:d6:98:93:b3:f9:9d:db:76:40:
b5:54:96:e2:7a:9f:7d:26:bf:dd:ab:7b:42:02:aa:
87:9e:2b:c1:a1:7e:25:b2:29:cf:f4:9b:3d:0b:f2:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E2:23:75:AD:B3:53:A7:A1:BE:A8:EF:70:DB:BD:F5:49:F4:C4:CC
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:94:fc:eb:85:64:7b:bf:c4:a6:ff:b6:8e:aa:18:a8:15:1e:
54:34:2b:21:6e:00:a7:10:24:55:f9:e3:dc:bd:34:f0:6d:a1:
e0:00:06:75:f1:ba:92:9a:25:4d:f6:d7:c3:7f:66:01:31:19:
18:07:10:7a:00:39:4f:63:44:9a:7c:1d:ec:98:63:0f:30:01:
b4:b8:91:7f:e7:5e:7d:46:3b:c7:81:c8:31:7c:0e:ad:82:72:
38:4a:48:89:36:d9:ff:a7:10:db:6f:63:b3:17:d1:e6:9b:55:
76:bf:72:34:02:c8:65:21:a1:e9:c7:8e:2b:a9:8c:74:0e:e8:
e7:99:28:49:07:8e:3f:fb:45:9c:9e:34:49:52:57:bf:93:e2:
86:01:e7:48:fc:07:f0:0a:ac:62:b6:d1:f2:c1:ae:7a:42:0b:
92:57:dc:ef:19:34:51:8f:71:ad:09:45:61:fd:c7:c1:c4:22:
92:d0:87:78:9d:22:3f:e5:8e:91:e6:f3:ce:9b:19:b4:8d:7e:
90:64:6a:50:1d:dc:a8:c7:5f:6f:f4:c0:b0:5e:5b:81:2e:4f:
fe:20:18:a0:ee:ad:bf:18:91:bb:5d:16:1e:8f:5f:b9:13:3d:
b5:69:60:b3:f9:fd:4a:ef:17:af:d2:5a:fa:e9:48:80:32:d3:
05:00:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:33:06 2026 by rpki-client