Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: QNh/tHRSQk0NJT9Xm7qGqm1UOvLvMT/FIv9Ut/dVsPM=
Subject key identifier: 83:64:A4:F1:2B:DB:C7:30:38:29:C8:78:73:B3:3E:E8:A0:2F:AB:17
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 01A0D192CFA3C51E2C6C77A0022CD601CCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 04:00:54 +0000
Manifest this update: Thu 24 Sep 2026 04:00:54 +0000
Manifest next update: Fri 25 Sep 2026 04:00:54 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: hpifOC2Gsbe4JehfOQEbmA82MFDxDPTyJbzRNVAql3Y=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:cf:a3:c5:1e:2c:6c:77:a0:02:2c:d6:01:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Sep 24 04:00:54 2026 GMT
Not After : Sep 25 04:00:54 2026 GMT
Subject: CN=8364a4f12bdbc7303829c87873b33ee8a02fab17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:93:4b:99:7d:6c:6c:37:b2:f0:e3:cd:7f:
73:26:a9:90:9f:36:47:58:6b:da:ce:d7:02:35:05:
4c:f7:2f:3f:13:f8:12:76:5f:28:d8:58:87:7c:40:
e5:1f:2b:04:71:0d:92:c2:b0:82:34:30:de:6f:98:
2c:10:73:fe:98:c6:e6:05:af:8e:bb:0d:c3:5a:e1:
53:09:cf:32:a4:70:db:f1:16:98:98:aa:3a:13:a0:
b6:f4:c3:9a:f3:66:cc:39:98:06:85:03:f5:8c:50:
a9:b2:7c:e4:b7:8d:b3:24:d4:c8:cc:4e:61:71:e7:
d6:b7:43:49:77:a5:3a:1c:d6:92:a5:65:ad:06:74:
d9:46:f7:e3:66:ef:34:1d:c2:e7:2d:24:10:dc:9f:
13:cf:fc:45:57:26:42:0c:c6:e8:89:af:80:6a:fd:
49:b3:a5:64:f7:eb:83:b1:a0:3b:a2:70:3a:52:66:
4a:4b:e0:45:73:72:93:20:b8:23:ea:b2:1a:ff:ed:
8f:9a:02:86:f8:23:6c:c7:79:8c:ff:07:2e:42:c0:
de:e7:b8:3c:0b:65:1d:ee:42:fe:6a:dc:fe:61:5e:
c1:77:e9:8d:49:75:b1:f7:a0:71:d4:6f:7e:bf:af:
96:b8:c0:1d:0f:b1:df:ad:36:23:8b:78:7d:97:9e:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:A4:F1:2B:DB:C7:30:38:29:C8:78:73:B3:3E:E8:A0:2F:AB:17
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:65:a2:66:e0:d1:3c:5b:dc:20:15:10:c8:d0:f1:1a:3b:b3:
e7:9b:c5:c0:e9:b4:3a:dc:fd:e2:0c:32:de:cc:1f:f5:2b:aa:
a5:16:c6:fd:ae:cb:76:c1:07:d5:92:0f:d8:e9:66:4c:99:0f:
07:43:99:13:d8:5b:d9:c8:6c:24:b4:f3:e4:1a:c7:0d:23:d4:
c4:0a:7b:71:5e:ef:40:db:76:e4:b1:52:78:7b:c2:27:d9:ac:
85:ae:62:71:78:8d:e1:22:8e:95:c3:45:b7:1e:3d:00:98:f5:
53:08:c3:e9:51:3d:51:d7:2b:74:af:1e:db:4c:fb:92:f3:93:
93:4c:f1:49:98:84:60:71:72:12:fc:4c:76:8a:b2:f3:d4:fa:
dc:c2:96:c3:21:7a:cc:f2:0d:1c:e3:3c:90:62:e6:e6:b5:c1:
c3:3f:29:84:ab:f2:16:9f:c3:6d:23:db:22:7a:e9:e2:3e:77:
1f:3c:7e:70:c5:99:d2:eb:15:e4:fe:6b:5f:ea:de:16:0b:0b:
fd:11:d6:83:6b:7e:ee:33:37:a5:8a:e1:30:fb:86:74:4c:d2:
d0:00:eb:2c:aa:35:1c:e8:b5:b3:3b:fb:b8:77:9f:8a:bc:38:
e7:39:0a:8a:41:a6:05:96:62:21:52:23:57:28:46:75:49:d0:
62:ed:bd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:51:40 2026 by rpki-client