Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: R60LETnMwix3gM2klklYaDkbbJ2/D4aaZqaBCtBE7tk=
Subject key identifier: 93:D9:05:0A:84:A7:FD:FC:E3:18:30:8F:E8:86:85:1A:FC:94:3C:DB
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 01A0D3EF8F29538730415B5E60DFBA3E418C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 15:01:27 +0000
Manifest this update: Thu 24 Sep 2026 15:01:27 +0000
Manifest next update: Fri 25 Sep 2026 15:01:27 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: Gra1audrwX9Rtpdo5oOY6ghZxfxeznHhjM9h8q4prz4=)
2: Y53-K6eCcM2LGOvi8Fn2PE_O8Hs.roa (hash: epaNlilaUn33+8n2mw835ikIL/eJJhBznXtCVWydLWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:8f:29:53:87:30:41:5b:5e:60:df:ba:3e:41:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Sep 24 15:01:27 2026 GMT
Not After : Sep 25 15:01:27 2026 GMT
Subject: CN=93d9050a84a7fdfce318308fe886851afc943cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:36:bd:f2:2b:de:85:3a:96:ec:32:05:63:
cb:99:a6:cd:5d:df:cd:f8:47:25:10:33:56:17:63:
97:61:6e:94:db:32:08:14:a4:68:24:2f:1e:32:d0:
7c:67:b9:50:cf:a5:e6:86:44:a2:7a:f5:da:95:57:
13:7e:69:2d:10:b2:ab:2c:0f:ed:b1:02:71:0c:bc:
37:23:4f:ef:25:a1:5d:34:cf:56:23:a0:f1:b6:b3:
be:bd:5c:1e:8f:d2:4e:2c:27:9d:98:68:2a:e9:94:
b1:4c:02:9e:88:21:ec:7d:47:39:28:ca:62:c0:6a:
e2:18:0d:83:da:05:d6:2d:7f:ca:c0:fa:43:ff:1b:
db:86:9e:2b:4c:34:21:e6:5f:cd:6d:fe:b4:2f:66:
c3:af:0b:0a:0b:91:f7:bd:0c:6d:99:64:9d:b0:23:
13:2a:b3:1b:02:fb:ac:fd:89:7a:46:67:54:2e:ea:
24:48:9b:14:a1:dd:b2:8b:21:9b:ca:69:8e:4e:6a:
2b:a8:f3:93:29:13:a6:fd:f9:51:c5:a7:e9:57:b7:
d6:0b:ad:22:ca:e8:07:83:48:2b:af:a4:f9:3f:3e:
35:c0:0c:10:57:28:18:d1:58:ad:cc:b3:21:b6:d0:
c1:33:49:5c:29:ae:b0:b9:8c:9f:f5:52:4c:f6:ca:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:05:0A:84:A7:FD:FC:E3:18:30:8F:E8:86:85:1A:FC:94:3C:DB
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b3:19:f4:ce:bb:9c:24:7a:45:23:25:ae:00:91:3d:d6:25:
5c:14:3f:ed:74:0b:04:e0:df:67:6f:c0:cf:ae:e6:a0:6d:f9:
db:5e:c8:26:36:9c:c4:a2:b8:79:34:87:0b:28:27:67:b3:0f:
ca:cd:9e:8b:23:50:c3:d8:cf:1b:d6:58:d7:a4:6f:61:5d:79:
a0:a4:39:00:ee:32:14:d4:d0:f9:ae:a1:d9:04:75:c9:ea:8f:
c2:11:31:cc:3e:3e:45:04:b1:75:b8:08:41:38:dc:79:4f:3b:
6b:11:36:70:33:08:ed:79:d5:71:03:e4:9f:bd:f6:27:77:5b:
36:bd:60:92:76:ba:dc:3b:fd:85:24:03:18:7d:73:64:61:b6:
8c:25:ac:7b:ed:85:19:f0:59:26:8d:ea:e2:0e:69:6d:7b:10:
8a:04:91:99:83:16:df:2e:ac:76:91:31:cc:41:aa:32:4c:aa:
58:fb:17:f1:93:95:d6:4b:e6:89:d6:fd:59:8e:0a:8c:71:e5:
a5:0f:db:7c:87:81:a7:07:04:89:72:ad:3e:a0:54:c4:88:16:
16:ee:06:94:68:a3:dc:31:34:94:bc:6b:a4:17:2f:53:5d:6f:
e9:9f:b7:6f:9a:3e:a6:2f:85:ca:85:ed:f2:3a:05:8b:ac:2e:
7c:ef:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:10:02 2026 by rpki-client