Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
File: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft (raw, json)
Hash identifier: rFTb9QRNeqXFt4ZaNtMLi4x7lMrokpZslOApXkJdmG0=
Subject key identifier: E6:F0:A0:2A:A5:94:E3:72:B4:61:80:05:23:67:D6:D3:CE:D9:7B:84
Authority key identifier: E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
Certificate issuer: /CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Certificate serial: 01A0DF17DEE57CC4F329C1C44CE72CE7898B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
Manifest number: 03FD
Signing time: Sat 26 Sep 2026 19:01:18 +0000
Manifest this update: Sat 26 Sep 2026 19:01:18 +0000
Manifest next update: Sun 27 Sep 2026 19:01:18 +0000
Files and hashes: 1: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl (hash: 6ZzSBivZHfjKG5uAsKJHaHKYj/wQ7rdGPGtgg8JPYRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:de:e5:7c:c4:f3:29:c1:c4:4c:e7:2c:e7:89:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Validity
Not Before: Sep 26 19:01:18 2026 GMT
Not After : Sep 27 19:01:18 2026 GMT
Subject: CN=e6f0a02aa594e372b46180052367d6d3ced97b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:6e:83:ac:d5:7d:48:eb:9c:6a:2e:aa:81:
aa:03:e5:87:1c:17:0a:6f:3b:4d:0a:6d:c6:bb:3a:
b3:f0:bc:42:b3:93:c7:a6:3c:54:72:8f:d6:60:0d:
a6:be:dc:89:3a:c2:ee:d9:e0:c8:b2:e5:16:b3:e2:
2b:6a:5d:50:f8:46:8d:c7:6e:e3:33:2f:08:ea:58:
fe:a2:d6:4a:14:20:d6:34:f2:35:cd:e0:db:8f:b4:
b4:c2:f6:b1:0b:56:4c:35:a4:a9:64:4c:ed:34:66:
3c:d3:35:66:d9:f0:a4:3c:7f:de:ac:7f:23:87:10:
db:c9:00:b3:ec:08:7f:7c:9a:a1:c9:0e:7e:33:31:
68:a3:70:70:93:ee:21:84:77:b3:ca:ff:d4:72:7a:
08:2f:26:55:21:f8:f5:1d:75:c3:ff:f0:27:d2:60:
28:e3:1d:cf:20:48:73:60:2a:e8:e8:cc:c7:93:48:
1f:cb:42:d3:55:a1:37:94:38:66:c8:39:47:7d:1d:
4f:77:6b:4d:96:78:d4:23:20:d8:4f:02:9c:8e:a8:
be:e5:b3:52:96:0c:23:fe:66:e4:b7:75:e0:d1:ba:
24:95:b7:ec:2e:1a:84:b0:22:26:ce:d8:2d:75:87:
d7:f6:80:32:83:8e:f9:9e:d7:60:cc:eb:73:16:b6:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:A0:2A:A5:94:E3:72:B4:61:80:05:23:67:D6:D3:CE:D9:7B:84
X509v3 Authority Key Identifier:
keyid:E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:12:03:07:43:8d:4a:25:f5:c1:03:93:4f:3a:31:94:7b:c8:
52:2e:08:24:7e:a1:f0:7a:03:dc:a5:a3:b4:0b:27:3d:0b:09:
72:8d:9d:6c:4c:1b:e5:dd:ba:b7:fd:de:1b:6f:3c:b4:7a:0b:
1b:ad:44:5f:0a:fc:7d:49:38:a7:6d:41:ec:59:95:77:fd:51:
c0:9f:93:43:07:8e:27:e1:5e:6e:a2:f8:1b:0a:e2:8b:87:20:
d9:eb:0f:09:25:90:61:cb:78:a7:37:9b:1e:f7:a0:9f:b3:a3:
56:02:18:26:49:f8:7c:8e:3e:e8:15:85:48:a9:0d:b8:f7:7f:
bb:81:fc:f6:cf:02:eb:7a:74:1a:96:53:cc:66:8b:0c:3a:09:
1f:3d:e4:e2:de:eb:bc:96:39:75:0d:49:7b:95:95:24:1d:61:
59:49:90:49:17:24:f7:6e:77:a5:9b:f3:52:ae:c8:19:40:37:
33:1a:34:0a:84:2f:b4:d0:a1:2e:32:e6:88:fe:b1:e5:a0:08:
2a:83:fd:3e:ea:6d:bc:20:56:77:7b:e7:2d:55:7d:9c:5b:f1:
71:08:7f:5f:7a:76:11:f6:12:e9:18:ae:2e:9c:9f:e0:e0:59:
e0:04:f0:57:83:8d:5d:84:10:22:c9:50:02:3c:6a:e0:f4:a9:
80:ae:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:54:35 2026 by rpki-client