Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: 0kbMprLTfeYk2TgzVhx4ZbdDLMC18eDZpGvre47xmps=
Subject key identifier: 59:4E:B9:65:F9:CE:4C:B4:6C:71:25:3A:F0:A6:BC:5C:44:67:E2:BB
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 01A0CAEB9ACE3230AA3403086D757F55236A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 1148
Signing time: Tue 22 Sep 2026 21:00:33 +0000
Manifest this update: Tue 22 Sep 2026 21:00:33 +0000
Manifest next update: Wed 23 Sep 2026 21:00:33 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: y4rcMr33asWgJRqnZdkvedNBpbhUUDU81AocCa7p4W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:9a:ce:32:30:aa:34:03:08:6d:75:7f:55:23:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Sep 22 21:00:33 2026 GMT
Not After : Sep 23 21:00:33 2026 GMT
Subject: CN=594eb965f9ce4cb46c71253af0a6bc5c4467e2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:28:dd:a5:31:45:97:6b:ab:3c:55:3e:0e:
17:f9:e8:c8:3c:48:86:f3:2e:5b:af:db:b6:5c:b2:
63:43:d4:46:e2:4f:e0:02:ce:60:80:f6:a3:cd:85:
09:53:0c:19:10:a8:ce:25:88:59:aa:f9:e5:45:05:
ca:fb:8c:32:e6:ea:43:3a:f1:e0:36:2a:14:61:f0:
50:33:d2:73:2c:4d:5f:da:e3:34:3c:56:79:4c:64:
1f:23:99:ad:ed:49:b9:d7:ae:96:01:c8:0a:2c:5a:
d0:07:fe:7f:a8:80:ec:57:e5:d3:02:f9:38:61:3f:
83:db:f4:93:27:01:9d:5c:10:10:99:dc:62:09:2a:
41:e7:5c:65:22:16:5c:82:48:96:e3:5f:c4:c8:f9:
89:d3:43:0f:7c:48:ab:4b:6f:c3:94:5c:03:bc:ab:
74:f0:a1:cc:5a:3e:46:b4:1e:28:ab:32:38:b0:f3:
e6:f5:42:c5:52:7b:bb:bd:c5:d6:88:cc:cf:d0:96:
88:8f:7d:ac:e1:9b:dd:8f:48:13:0a:2d:b5:5e:49:
34:6d:4e:23:de:aa:35:fc:16:4a:82:d2:1d:0a:6f:
25:10:1f:c7:65:9e:98:ed:1f:30:c6:36:4c:0c:2e:
3c:7b:05:25:7c:90:09:c3:72:73:e8:40:e7:41:5b:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4E:B9:65:F9:CE:4C:B4:6C:71:25:3A:F0:A6:BC:5C:44:67:E2:BB
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:af:28:80:76:1e:62:21:e4:90:7f:88:94:26:31:bd:1b:
83:81:36:09:76:d4:89:94:c4:86:96:33:22:79:dc:4a:a8:87:
7d:9e:f0:90:32:41:80:a1:5d:1c:40:94:30:0f:37:1a:b2:13:
14:18:2d:7d:b1:fc:3e:23:03:22:40:ef:f3:7e:00:1f:c9:c5:
d0:d4:cb:27:ab:de:48:ac:4e:41:f5:7c:d5:9d:f8:57:18:55:
89:46:12:32:14:7e:f7:8a:25:02:22:82:2d:ce:57:21:df:c6:
05:aa:a6:da:13:ac:17:68:9a:7f:b9:3a:15:90:b3:ab:e0:19:
34:1b:ed:c9:20:c0:ca:6a:00:4e:d8:84:28:1d:2e:46:2c:3a:
ce:e8:85:ca:1f:e1:04:e9:e9:a0:0c:b4:26:7f:0f:c7:55:2e:
af:3d:3b:b0:06:e6:10:ea:01:da:be:2b:51:fb:7e:d4:bf:25:
61:5f:02:3a:d6:c1:e6:46:ff:b1:b9:8f:df:79:e7:de:6a:04:
14:96:d5:c4:d9:5b:ce:01:5d:0a:67:17:bc:c8:74:cf:b6:9a:
c8:43:2e:65:2c:cd:0a:43:7e:98:75:51:93:c5:12:d4:a4:5a:
d9:92:48:3f:56:61:fe:1a:0c:98:e7:18:9a:3c:cf:23:a4:8b:
5b:05:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:24 2026 by rpki-client