Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: kgP86vw3CzWt9y1cQBf5jcaLm9ZnL+HoFiINp2HQYpM=
Subject key identifier: 32:DB:B9:A8:75:22:F6:F5:FB:20:F1:12:09:A9:23:86:CD:68:11:74
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 01A0D0B676908E61A1A38429A4228ED14ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 14DD
Signing time: Thu 24 Sep 2026 00:00:13 +0000
Manifest this update: Thu 24 Sep 2026 00:00:13 +0000
Manifest next update: Fri 25 Sep 2026 00:00:13 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: LsN6RcyBrJ8wYGFanxIkJs02BztLW8cHaWO7oo7k1yk=)
2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:76:90:8e:61:a1:a3:84:29:a4:22:8e:d1:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Sep 24 00:00:13 2026 GMT
Not After : Sep 25 00:00:13 2026 GMT
Subject: CN=32dbb9a87522f6f5fb20f11209a92386cd681174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:9b:80:ca:56:cd:a0:7d:52:20:a0:8d:1f:
4a:45:68:21:e6:01:16:34:e8:5b:39:84:37:b0:e6:
f6:f3:96:36:29:6c:62:92:ea:ff:13:a4:a9:71:df:
fd:22:61:02:6a:3f:1c:72:3a:b9:2d:02:de:5e:af:
e7:06:d3:4f:28:9b:44:a9:d9:db:cc:15:2e:c0:18:
97:c7:e1:ef:fb:d9:8c:5d:e1:ea:cc:f6:9b:f6:36:
87:14:42:97:9a:5c:48:31:37:59:a6:ff:0a:ec:9d:
c8:e9:da:55:c7:15:31:e4:4b:0b:93:c5:fc:f8:47:
92:5a:e2:04:0c:ba:5d:84:94:f0:42:d3:5d:ef:86:
6e:53:84:7c:0e:40:38:04:35:13:13:f9:93:e4:be:
07:c5:f5:16:9f:82:94:93:40:21:87:5e:87:16:6b:
44:1b:fa:6e:c7:27:31:e2:8a:1f:ce:d2:ba:51:5d:
b6:29:98:3c:cd:9e:1f:23:5a:68:24:10:24:54:05:
58:73:81:13:ff:a6:53:67:23:2a:38:e8:5f:7b:77:
62:81:cc:fa:71:ef:9d:5e:5f:26:4b:88:7f:67:5d:
a3:5c:ca:4a:0a:90:ae:e1:3f:7c:2f:80:45:00:63:
2e:32:38:35:51:e7:01:16:07:f5:54:f7:f7:a4:a9:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DB:B9:A8:75:22:F6:F5:FB:20:F1:12:09:A9:23:86:CD:68:11:74
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d7:fd:99:9c:98:d9:a5:e0:2e:92:72:a8:7e:f6:59:cb:a2:
5c:14:80:b8:cc:2d:4c:06:08:a5:ec:92:d7:30:15:0b:b7:91:
41:9a:d9:5b:48:06:9e:bc:28:9a:e9:dc:0f:60:36:b5:94:f0:
c8:ed:6a:5e:cb:f4:79:ea:15:71:e9:19:39:3f:d9:ec:a1:62:
58:9b:be:f5:63:a0:57:f0:b7:f0:a0:99:6b:b1:da:cc:0d:c8:
e8:59:22:69:62:aa:a2:b6:fb:fb:b0:d0:fd:94:1d:d5:e5:33:
f5:ff:25:82:54:66:de:8c:aa:ab:57:4f:fc:2e:ca:25:e6:66:
b5:7b:60:d6:39:98:45:2f:cc:c9:5d:a7:fa:5b:5b:08:95:3a:
d0:8c:f1:83:c0:ee:0a:65:7b:15:41:c0:f1:15:42:94:48:af:
13:e9:00:c0:c2:41:7b:87:a3:85:5d:9e:03:5f:18:2e:cc:4a:
fd:09:62:ec:1c:46:b9:9c:b5:b8:4a:34:9e:f2:0a:1b:45:79:
0a:5b:55:4e:f1:14:e3:a6:c8:62:f0:ea:44:2a:e5:b1:52:a5:
e4:26:c9:05:d1:01:74:5c:38:36:71:80:5a:b1:0b:8a:d5:0b:
41:62:1a:7b:c7:28:85:1d:8e:ca:13:33:e4:c5:5c:a6:40:b1:
45:4e:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:11 2026 by rpki-client