Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File: 5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier: CWzqcdytnfINlqo+Z0gQvZoCknN4qq8RbTQoZy/pUfY=
Subject key identifier: 28:C1:FC:16:A2:78:71:C5:E7:C8:FC:53:CD:5D:05:B0:BA:0E:C6:7E
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer: /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial: 01A0D5A71439331500C0FD2ED0B5040A636F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 23:01:31 +0000
Manifest this update: Thu 24 Sep 2026 23:01:31 +0000
Manifest next update: Fri 25 Sep 2026 23:01:31 +0000
Files and hashes: 1: 0w4XcBQywwl1teApjX6VHSPuvgg.roa (hash: /EcXOS7UzKKs89buMydMe2QfoMOWxkfJCW82u93ztaw=)
2: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: r57CTRuaPtuwDqzyBkefB3+TGCELpe5m56qkHLirOlU=)
3: av_HZf6EAwlDsvNiqOK233RQvoM.roa (hash: GY5qM+O2sWQRx1EcDLewr4LGFVQxjYE9jkUci4HJmic=)
4: ullWMQMNWNs2m-qavM2ZaH0wLLY.asa (hash: Hs+EUjaBHhmBRRhyoMI5LyzKTqwRJd2HGRT6RAN80K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:14:39:33:15:00:c0:fd:2e:d0:b5:04:0a:63:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Validity
Not Before: Sep 24 23:01:31 2026 GMT
Not After : Sep 25 23:01:31 2026 GMT
Subject: CN=28c1fc16a27871c5e7c8fc53cd5d05b0ba0ec67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:43:fa:98:8b:54:b8:3d:bf:f4:f9:53:bd:
c6:35:b6:67:3d:c9:55:fe:28:a0:99:30:f4:38:bb:
a9:70:09:02:8d:da:ab:d0:a9:82:6a:45:5a:8f:f3:
45:97:90:39:17:c2:2b:46:ae:ce:e7:9c:15:ac:ec:
a8:cc:b3:c5:bd:07:23:7a:16:5b:1c:31:ca:4f:9e:
98:82:7a:f9:72:4d:c7:af:a8:f4:61:6c:39:db:ec:
fa:0f:51:e9:a8:93:ac:11:66:bb:9c:7c:0f:15:ef:
b2:f6:eb:73:22:43:91:4c:a2:77:1c:bc:87:54:38:
65:d6:76:7e:51:ee:93:14:76:71:d6:f6:2e:89:e2:
3f:da:40:1f:a0:85:43:79:fa:05:b5:c4:67:4e:0e:
43:2c:bf:18:86:7c:75:1d:24:1a:20:bb:df:7b:88:
71:ab:97:bd:9f:d0:e1:62:be:56:0a:d1:23:c7:a7:
8f:30:d2:84:2f:c2:73:83:80:f1:a4:85:93:b9:03:
21:0e:49:4c:72:9f:7b:81:a5:01:20:87:22:0d:04:
c7:94:92:fa:38:d2:f4:76:d6:4e:d9:0a:02:21:64:
81:17:50:88:9a:7f:3c:ed:9a:9c:39:e6:1b:f7:ea:
b2:93:a0:5c:4c:23:91:10:3f:6b:d3:f7:b8:47:c2:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C1:FC:16:A2:78:71:C5:E7:C8:FC:53:CD:5D:05:B0:BA:0E:C6:7E
X509v3 Authority Key Identifier:
keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cf:d3:3b:24:4b:c2:34:54:7c:91:6a:7c:e2:a1:2b:57:d5:
3b:60:a0:bc:a6:cc:54:0a:74:22:97:ab:1e:22:9a:a5:24:5b:
03:e4:c8:6f:78:e4:7f:3d:32:2d:b1:3b:21:00:3c:f4:93:b1:
fa:4f:79:ef:a1:a3:42:d4:8c:a8:ca:62:47:19:9f:2f:cf:da:
d1:69:63:ee:02:cc:d9:33:ad:85:ae:5a:8f:ea:8c:6e:2d:5f:
a7:8d:88:bb:d9:f7:2c:bb:4a:21:8a:18:5f:c1:c3:89:8a:33:
9b:fa:b1:ff:0d:c2:88:c5:06:b8:6e:0c:fd:c6:67:20:4f:e4:
6e:f0:81:fb:7f:7f:15:de:7c:df:fc:ff:46:ac:9e:02:33:31:
f9:d2:ac:9c:00:3a:f2:a4:58:22:e0:23:ef:fa:f2:09:80:59:
78:b0:67:25:c2:47:c1:32:4f:cd:c0:86:84:d0:10:6b:57:7c:
9f:89:ef:cf:ae:3b:f3:12:ce:aa:27:b3:ef:bb:e1:a2:93:24:
17:5d:15:93:34:77:f1:9c:28:09:80:01:b6:7c:f1:87:e4:f7:
d1:c4:be:24:9e:89:71:4a:a4:25:d0:76:f0:1e:ab:ef:7a:5d:
71:db:2b:66:a3:72:c6:74:33:26:f5:53:d1:fc:63:ad:90:b6:
26:8e:44:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:21:18 2026 by rpki-client