Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: kld6tTla2jc2xpoYrFvRln/X/T5kyNiKGc/JkPPgndI=
Subject key identifier: A6:D3:BC:F2:47:C9:6D:D2:25:45:01:8D:A1:6C:E3:27:CE:AD:1A:9B
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 01A0DD29E9FEB651AE708D87879FCA659DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 10:01:46 +0000
Manifest this update: Sat 26 Sep 2026 10:01:46 +0000
Manifest next update: Sun 27 Sep 2026 10:01:46 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: 4L6gXNXZtgSvJAmEX+Op2YMoGjUULR4XJCnHuYIo4vs=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:e9:fe:b6:51:ae:70:8d:87:87:9f:ca:65:9d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Sep 26 10:01:46 2026 GMT
Not After : Sep 27 10:01:46 2026 GMT
Subject: CN=a6d3bcf247c96dd22545018da16ce327cead1a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:ca:2e:b0:09:b6:ae:a9:01:d0:bb:2d:6e:
f6:f7:80:f8:5e:db:b3:9d:aa:30:ec:12:4e:52:45:
bc:c3:ca:d9:b6:17:16:92:15:44:89:3e:bc:46:46:
fd:dc:c2:7f:b3:b9:69:83:7e:5c:31:b0:fe:9f:54:
08:94:4c:ac:62:72:fd:1d:ed:ab:68:cf:ff:f3:09:
03:68:21:2a:68:5a:30:d6:95:dd:e2:93:73:81:1c:
81:d1:72:9c:8d:35:f3:82:d7:c2:d6:a6:13:82:e9:
93:6a:d2:cf:17:bc:22:7a:0d:12:18:9f:e8:03:bd:
0f:aa:27:06:76:30:4d:4e:1a:39:00:80:c5:18:f3:
9f:6e:9e:aa:97:59:12:2e:30:fa:f9:bb:fc:8a:e5:
c9:8f:77:d1:87:57:8b:f9:cc:03:5b:9c:64:4d:95:
3d:44:e2:57:f3:b9:18:f2:71:69:33:d1:b9:e6:4a:
9f:45:e5:35:d6:fd:1e:7b:a5:5c:5e:4a:6f:d7:eb:
f8:12:53:3f:34:b2:44:c7:4c:0b:ea:a1:d4:da:41:
6c:0f:fa:d4:76:dd:e9:97:b6:1a:be:a1:77:bc:96:
b1:ec:3a:99:5b:48:21:0a:e1:86:3f:44:9d:a6:36:
ec:e9:5a:36:41:8a:d2:ce:9f:e2:63:8e:92:ab:91:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:BC:F2:47:C9:6D:D2:25:45:01:8D:A1:6C:E3:27:CE:AD:1A:9B
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:81:59:55:6a:90:c1:c4:f6:97:0c:7c:55:91:48:4c:4e:
a8:ac:4d:f1:91:70:4d:21:0c:69:ee:97:64:f2:c3:70:5c:20:
58:82:99:3c:c2:ae:00:55:b2:78:84:41:78:f2:3b:6d:a9:44:
29:be:c6:7c:cd:d3:7a:46:a0:39:01:8f:c4:b4:29:f9:22:02:
45:1b:88:79:5c:fc:54:2a:c4:54:81:54:71:12:46:ba:48:16:
db:2c:ef:34:d8:67:f9:b3:4b:15:c5:c8:f1:b0:f4:c6:f1:31:
7b:9b:a7:f8:74:ce:a0:5d:dd:66:11:da:ca:6a:fd:46:06:69:
0c:c1:87:0d:93:b4:7b:40:95:5b:6e:b9:51:cc:af:21:1d:37:
bd:a6:62:1d:f2:4a:02:9b:08:06:ff:69:4e:36:c0:5a:46:ef:
1d:dc:20:bd:cf:b7:d0:5f:40:93:25:42:23:0d:ae:3e:f4:31:
05:c2:95:60:21:6d:23:27:8e:6f:10:4c:a7:6e:9d:f0:8c:c5:
22:15:5b:86:1c:b6:7f:ce:d1:ae:90:cb:c1:4c:cd:ae:89:cc:
55:20:20:03:99:18:5f:01:cf:5d:81:a4:cf:4c:06:c1:94:d9:
39:1d:ef:ab:f7:f8:ea:92:5d:d2:da:e5:ec:8f:21:e5:6a:c4:
72:9b:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:52:09 2026 by rpki-client