Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: +gLp0upF+Yc1h/t750c+8pq5DhBmwWYg3ghkZuY5TPE=
Subject key identifier: D0:7A:DB:68:19:90:3F:3F:EC:64:05:28:04:37:55:C9:6F:F8:66:E2
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 01A0D0489BE853589104A1C4DFF50681E128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 0789
Signing time: Wed 23 Sep 2026 22:00:14 +0000
Manifest this update: Wed 23 Sep 2026 22:00:14 +0000
Manifest next update: Thu 24 Sep 2026 22:00:14 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: 1ZIOlyexasHsmXlcJBp/y/1LbF2CrirhaKJC0cZmYlI=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:9b:e8:53:58:91:04:a1:c4:df:f5:06:81:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Sep 23 22:00:14 2026 GMT
Not After : Sep 24 22:00:14 2026 GMT
Subject: CN=d07adb6819903f3fec640528043755c96ff866e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:c0:8c:e3:c7:c1:23:47:69:ef:8c:3c:21:
ba:03:4a:91:ba:3f:73:f9:8f:2c:24:76:67:11:40:
97:fe:25:ac:1a:76:ea:a4:d2:66:05:5d:3c:d2:24:
dc:a4:34:d9:7f:46:5f:02:17:24:7f:24:3b:97:90:
cf:2d:55:07:03:e0:e9:1a:ba:3a:65:57:df:6f:a7:
a1:ee:c2:04:ad:83:44:66:f9:4d:0a:4f:81:a9:f0:
2e:54:90:f2:9b:12:ed:4b:17:fb:b0:b0:57:8c:e0:
31:f8:6d:e9:98:2a:de:f6:f8:2b:19:72:db:c2:10:
ac:c6:23:24:56:ba:01:a6:45:79:75:e6:00:20:dc:
76:f9:aa:bd:2e:c7:4b:a1:fc:0e:2e:bb:99:bd:da:
90:1f:66:f1:96:c6:5b:c7:61:38:93:18:b3:e7:0e:
61:d4:6c:98:c1:15:6e:f1:1c:47:f9:09:83:eb:27:
d2:31:03:44:e7:11:cb:fa:23:77:16:09:a5:00:4c:
21:29:7b:f6:ee:fb:5a:58:a3:ee:e7:ce:f8:05:97:
b7:df:91:cd:d5:e5:3c:37:5a:52:38:61:f9:da:5d:
d5:8d:67:10:fe:18:41:16:70:48:9b:8a:79:d3:f4:
50:63:b9:4c:e6:21:74:a2:6c:b1:96:b2:e1:3c:df:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:DB:68:19:90:3F:3F:EC:64:05:28:04:37:55:C9:6F:F8:66:E2
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:94:6c:25:78:da:6f:d8:03:d7:dd:e5:fe:ca:aa:11:3d:2e:
56:23:42:5e:0b:1d:5d:07:54:e8:42:56:d7:63:ed:76:da:d0:
7c:ab:73:71:2f:ae:e5:18:fa:73:77:d0:82:70:4f:63:1e:44:
c0:da:9e:c4:b2:55:f7:6e:5d:4e:8e:38:e2:d9:9d:82:ce:42:
d4:ba:a1:c7:ad:dc:c1:71:cf:28:01:46:69:8a:a0:5d:82:a7:
c6:46:14:9d:1c:e8:ee:be:99:80:16:b4:ac:a0:c5:4b:b3:3e:
3d:4c:e5:24:1d:ec:10:75:b4:d3:2d:bc:55:01:17:a1:8b:72:
4b:37:fd:a3:63:ea:15:69:c2:26:2c:d3:34:07:5b:36:28:7e:
b5:1a:16:35:e3:1e:86:4a:2a:08:af:d3:03:39:31:11:d2:1c:
fe:eb:be:dc:d4:0d:28:df:e7:48:1f:78:66:8b:ad:7c:ac:e0:
b8:f4:87:9d:bd:e9:41:50:46:07:c2:f3:c8:e7:a4:d4:80:f8:
4c:43:47:0e:1f:6c:de:4b:b3:c0:b4:df:3b:6a:03:29:c8:f1:
3c:17:c6:bd:9a:23:32:e4:f3:8e:da:79:ec:a6:d6:65:d1:4f:
a1:98:29:82:5a:90:8a:65:8a:41:51:78:a6:23:11:92:cd:f9:
09:b3:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:13:21 2026 by rpki-client