Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: TNsJ0XR0zF4uITJxpKn21nItgWYrpuzySzxsCFiwESc=
Subject key identifier: 58:E9:79:CD:54:F0:01:BF:B5:0F:76:4A:0F:FC:FB:B8:46:2B:D7:B4
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 01A0D20165DE5669482F2FAF66D001D0AF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 174A
Signing time: Thu 24 Sep 2026 06:01:42 +0000
Manifest this update: Thu 24 Sep 2026 06:01:42 +0000
Manifest next update: Fri 25 Sep 2026 06:01:42 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: OOmvGXqOGJ5RM4ovdqV6m1wp24pJrrYnJeivwtusjjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:65:de:56:69:48:2f:2f:af:66:d0:01:d0:af:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Sep 24 06:01:42 2026 GMT
Not After : Sep 25 06:01:42 2026 GMT
Subject: CN=58e979cd54f001bfb50f764a0ffcfbb8462bd7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:f0:41:db:72:94:f6:97:44:69:23:e1:26:
a8:e0:6c:d6:e5:22:ac:9a:69:24:03:10:27:3f:4b:
31:70:94:a8:e7:81:1f:af:db:13:55:3b:a4:3b:c5:
b5:0c:ae:97:65:19:fe:d2:38:27:7c:a4:40:9b:c1:
26:26:21:24:e4:01:a4:bc:ae:bd:1d:06:f6:6b:db:
52:6d:f5:26:02:59:29:da:55:62:67:58:c1:4f:c0:
cb:47:9e:fc:e8:77:0f:6d:01:cb:3c:d2:d3:20:ff:
68:40:7e:c4:fb:a5:27:98:0a:a0:d7:47:f9:ad:b0:
67:73:22:c1:b6:de:0f:76:ac:7f:9c:8a:dc:10:6f:
30:ed:22:d2:cc:46:8b:92:a8:4e:c6:35:71:0d:26:
61:a6:71:01:e7:c3:75:83:61:1c:23:3d:6a:c9:75:
1e:78:ae:7f:bc:92:d4:13:85:ed:42:4f:93:e6:f0:
6e:58:6c:6d:21:f9:27:3b:76:f2:3e:d9:05:64:ce:
27:eb:d1:1b:e7:fe:78:be:0c:f9:78:a2:05:be:d3:
97:e5:91:52:f9:eb:5f:e5:99:f5:d0:8a:de:d5:78:
83:49:d8:24:65:a8:57:90:40:d0:39:8e:5a:63:c9:
b8:15:af:fb:77:aa:9f:d9:60:d6:27:c9:42:12:a7:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E9:79:CD:54:F0:01:BF:B5:0F:76:4A:0F:FC:FB:B8:46:2B:D7:B4
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c1:e5:fa:50:01:3d:99:21:ee:3e:5b:f2:b4:a0:91:f8:0d:
28:3b:2a:16:c0:aa:8d:44:25:64:de:33:14:fb:f1:ba:c3:11:
47:d8:91:d9:41:68:b4:c6:b4:06:1c:86:56:33:78:47:c9:2b:
b5:0c:82:42:ef:b1:a7:ca:05:42:d5:85:e8:9c:81:a9:f6:d2:
12:8a:2c:b5:b2:37:10:f5:13:bb:53:e8:24:e9:cd:66:34:c5:
ec:dc:ee:94:29:10:10:e4:ed:64:02:80:7b:22:80:80:92:32:
40:6a:c1:dd:49:25:74:ff:a5:17:1e:ca:af:29:71:30:18:a4:
6d:51:2e:4f:8c:ef:92:41:20:50:8e:2d:9d:6e:a7:7d:f5:b3:
cc:c0:e4:59:db:f7:cc:a8:2e:b8:26:9b:d6:37:d1:94:9e:c4:
10:91:04:27:11:9f:0e:04:a0:12:d9:fb:6c:43:e0:3a:7d:d9:
50:b9:43:89:44:80:bf:17:d2:4d:bc:f9:6e:13:d6:5f:5a:fd:
9c:2c:2c:ae:39:25:54:ee:c9:e4:4e:27:4f:63:d2:60:87:44:
28:06:f5:6f:f6:9e:2e:f1:4f:f6:0a:4e:ce:66:11:d5:e3:0d:
a1:d2:5f:47:e2:ed:1e:79:a3:0a:c0:06:fd:55:01:93:22:00:
31:e0:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:26:25 2026 by rpki-client