Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: oetgok+kp9r7z4V1K0hzAHSRcO74FXaWVECSHT7Q5k8=
Subject key identifier: F3:41:C2:D4:4B:60:77:45:59:37:36:90:DB:CA:B2:A2:5D:AE:4E:48
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 01A0D011BE19021F4E0138674431635092FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 21:00:18 +0000
Manifest this update: Wed 23 Sep 2026 21:00:18 +0000
Manifest next update: Thu 24 Sep 2026 21:00:18 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: N3JADKAWu+SboUZNoEO3wDuXmf66HKJG3QcGmRt52Ig=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:be:19:02:1f:4e:01:38:67:44:31:63:50:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Sep 23 21:00:18 2026 GMT
Not After : Sep 24 21:00:18 2026 GMT
Subject: CN=f341c2d44b60774559373690dbcab2a25dae4e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5c:a3:3d:7f:88:23:0c:26:fb:33:2d:a2:a1:
3f:03:2f:19:cf:00:33:70:17:7f:d4:23:38:b2:13:
cf:4f:3d:23:1a:90:74:36:a4:0a:00:33:fa:d5:ef:
5c:87:bd:30:ae:11:c3:fc:fe:99:63:52:1b:08:f4:
ab:1f:d7:f7:f8:f5:42:68:8b:6c:29:3c:4c:85:c5:
e9:25:23:7f:e3:37:85:2b:6f:20:f3:60:11:6d:fd:
6a:71:9a:8f:13:e2:2f:a1:88:e4:04:93:f6:3a:27:
19:37:39:f4:f0:29:b2:d4:8a:8a:dd:f0:8d:d8:3d:
e5:1d:1a:9a:f2:74:a3:b6:ad:34:c4:0b:17:28:0b:
3c:66:9c:66:0d:01:38:0e:74:c6:64:06:f4:3b:81:
ad:66:4d:31:79:fe:ee:05:84:4f:8b:0c:b8:38:8c:
d6:5c:5e:7c:fc:50:0b:13:c8:9c:91:07:ed:4a:54:
ae:f8:cb:30:90:96:03:99:a1:58:33:7c:ab:1f:39:
25:32:e2:b4:94:61:28:b1:94:d4:3e:eb:9b:1a:a0:
c8:1b:3e:6f:cb:c5:fe:b2:6e:c2:7b:2c:f0:e4:b7:
d4:b8:77:02:f0:a4:95:85:ec:98:5b:ae:6e:63:22:
a7:8b:06:7b:fc:7a:dc:a8:48:5d:63:62:47:31:aa:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:C2:D4:4B:60:77:45:59:37:36:90:DB:CA:B2:A2:5D:AE:4E:48
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c1:f6:99:c5:16:50:94:c2:58:13:b6:de:14:57:bb:8d:5d:
19:76:ce:f9:5e:20:de:94:cd:9f:19:89:ff:fb:35:4d:dd:65:
9d:6d:96:a6:ce:1d:ca:64:14:06:5e:9b:6a:ab:4e:ca:36:fe:
d4:dc:d3:0c:55:6c:03:18:e6:83:ab:af:62:89:a7:6c:af:9f:
ed:e4:99:7a:82:1d:f8:e9:cd:67:dc:81:bd:33:12:2c:5b:c5:
4c:ad:99:2d:58:5e:57:1f:7f:0a:4a:d1:17:6e:eb:f2:ea:a2:
54:8b:b8:b0:29:e0:fd:ec:1b:e9:5a:3d:e0:2a:61:01:dd:21:
19:26:f0:5f:4b:87:b8:5b:4e:ad:49:aa:65:9e:da:cb:3e:0d:
d5:4b:37:7e:26:1f:04:c8:4e:bb:1d:1c:14:a0:90:2b:d7:d4:
e1:fc:7d:41:ca:49:44:91:99:78:11:a1:75:68:e5:0d:0c:b0:
57:5a:85:a0:24:01:d4:d0:72:02:6d:82:3d:48:33:68:a3:53:
cb:80:12:1a:d0:20:5e:a2:e2:64:71:20:63:57:62:80:01:99:
b4:ca:18:e4:5c:eb:7d:c4:3d:f3:9d:ff:cd:d6:aa:e8:e1:63:
b0:ab:03:a5:7e:6e:71:a5:05:4a:ab:33:f5:c0:9d:74:76:2d:
06:0a:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:19 2026 by rpki-client