Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json)
Hash identifier: 0oJ3avd9N+lR/2Rf/YFkJPm4vg1PdeKQvDIaTPIVXys=
Subject key identifier: E6:2F:1F:01:58:00:9C:73:E1:9D:66:C0:0F:F5:8E:F4:18:94:DC:BF
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 01A0E7AF47C31FCE6B1F82B3DDAD933969BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
Manifest number: 02C6
Signing time: Mon 28 Sep 2026 11:03:39 +0000
Manifest this update: Mon 28 Sep 2026 11:03:39 +0000
Manifest next update: Tue 29 Sep 2026 11:03:39 +0000
Files and hashes: 1: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: kf10X3kg6mHFccASST6DV1CDyDSxJ8KrXG7cMv9ba58=)
2: Cdg-XL0zdHAzVrXI1UKniF1NxrU.asa (hash: oCxXm5PJ/tcVHgZif1qOHjXdRM54N8FVZ24RsEa01xM=)
3: ayeAuK6AHwJljOw6TVN3S1sed2E.roa (hash: iOPQ2GWcRYReaL6j28AmLWw1MVXLLjYyFBov2MAEJCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:47:c3:1f:ce:6b:1f:82:b3:dd:ad:93:39:69:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: Sep 28 11:03:39 2026 GMT
Not After : Sep 29 11:03:39 2026 GMT
Subject: CN=e62f1f0158009c73e19d66c00ff58ef41894dcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:95:1e:52:62:2c:e2:18:02:a5:22:ef:71:
fb:da:cf:02:ed:e9:56:3b:9f:39:99:a2:50:d5:05:
a4:08:ae:16:5f:dd:f2:a3:71:8b:93:09:38:65:52:
79:8f:bf:9c:e2:a2:55:6f:1c:c9:a8:dd:3f:e1:5f:
6b:c1:ee:8d:39:49:a9:8e:dd:6a:38:83:3e:56:24:
0d:cf:03:1e:98:63:81:32:67:cb:9b:0c:f1:ff:96:
92:36:d5:9a:d1:cf:da:64:07:75:42:a1:59:7a:90:
a6:d1:51:19:07:5b:51:e3:26:44:00:21:51:dc:ef:
bd:6a:98:bb:10:ce:bc:90:5f:f9:09:86:9b:85:e6:
ea:1d:9d:30:0b:7e:1c:9c:00:6a:72:c6:d3:ec:d5:
7c:6f:77:68:5a:47:84:1f:29:41:15:c8:f8:07:c6:
8e:3e:ee:64:07:80:64:86:fe:f0:56:4c:03:55:ef:
f4:ad:18:4c:e9:9b:43:77:bf:17:54:4f:d6:f8:b4:
9d:0c:e2:40:ec:91:b5:47:7d:11:de:15:e9:ab:3e:
a5:75:e2:69:3c:c8:3a:7e:98:a6:96:13:6d:3e:98:
a3:c1:df:7e:0e:62:10:1c:5f:0b:5c:58:9f:1f:07:
6a:de:2a:7b:47:97:00:c9:01:e5:49:6e:a1:b6:75:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:1F:01:58:00:9C:73:E1:9D:66:C0:0F:F5:8E:F4:18:94:DC:BF
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:12:ba:4e:f0:78:be:22:78:03:99:a6:d6:8c:35:91:5c:
44:76:d2:56:18:e5:f6:1a:8d:ba:a4:6a:da:a4:bc:39:b9:a8:
b9:c9:78:8a:2d:ab:35:45:c7:bb:8e:7f:fc:5f:fe:c5:c6:e0:
ae:cf:c9:be:ca:3d:2a:f8:a7:5a:3e:7a:06:57:72:f7:aa:d5:
d3:25:46:48:bd:a9:25:55:d3:da:52:f7:b0:77:84:b4:f6:3f:
ca:8c:2f:60:25:cb:1c:cf:db:42:72:c2:8e:ae:68:91:a1:89:
fb:e4:5d:24:62:95:ec:26:e6:21:38:d0:24:b7:8d:66:23:bd:
73:42:6f:36:00:41:0b:4c:d4:24:b3:a0:7b:8f:df:47:c0:61:
a9:a1:f3:72:0a:79:f7:90:85:41:32:18:21:b5:24:3f:ff:6c:
08:40:fb:b5:7c:25:cb:d5:51:ee:9e:8c:bd:fc:05:e8:34:d2:
68:32:3c:26:b4:46:d6:09:d2:b5:7f:f3:e9:35:73:8f:ae:d6:
92:8d:f9:dc:55:9d:c4:6d:1e:f1:12:66:07:72:1f:2e:10:22:
ce:fa:35:34:b5:aa:0f:cb:db:53:bb:d7:72:86:98:d6:f1:e7:
66:6f:52:6a:94:7e:9d:cf:4c:c3:f4:10:80:ea:11:31:d5:df:
9a:f8:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:57:35 2026 by rpki-client