Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: XrCTMD/uhrdpsUwTX+EDDc+1DzXKLZEicqT14HAoGTE=
Subject key identifier: 0A:F5:45:40:64:FB:66:BE:47:CA:7A:EF:2E:E4:1B:53:1A:08:5F:82
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 01A1DCF07B5649BE7373B8C26248223663B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 02:01:50 +0000
Manifest this update: Sun 15 Nov 2026 02:01:50 +0000
Manifest next update: Mon 16 Nov 2026 02:01:50 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: QBDPNWe8jDCRWjOBrhXQGsf/V22ardREpScJPYxs0c8=)
2: l26a7R_zJZToxzZfQDSNdGwONXo.roa (hash: f6mXkllCRchDTdmRlgeark5dgGsFI7jH1YE/DCr29Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:7b:56:49:be:73:73:b8:c2:62:48:22:36:63:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Nov 15 02:01:50 2026 GMT
Not After : Nov 16 02:01:50 2026 GMT
Subject: CN=0af5454064fb66be47ca7aef2ee41b531a085f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:5f:0d:f4:78:f5:89:36:d2:d8:18:00:6b:
c6:3c:3f:30:31:c1:be:96:cd:69:e9:8b:10:63:f7:
bf:7b:7b:1f:d5:7e:84:4e:3d:19:c0:83:a5:ff:be:
7f:7f:0b:df:31:7e:af:e3:2f:96:c3:2c:b1:cb:f1:
58:05:2a:59:2d:2b:72:47:6a:63:0a:e4:32:68:6d:
c1:43:ca:28:ac:af:76:3c:92:53:9d:dd:55:82:64:
21:ec:bc:aa:ab:6c:c8:6c:4c:59:c6:66:ea:a9:f4:
db:40:73:79:39:98:ee:18:f1:d6:50:c5:e0:4b:06:
16:c8:8d:d9:c1:a8:32:3d:34:5c:37:54:33:01:78:
45:01:6b:95:31:15:e3:26:4b:b6:29:db:0b:65:41:
b4:3a:39:41:c8:23:6c:26:07:bb:ec:3a:70:e8:de:
9a:ad:fc:3c:f4:7b:8c:cb:67:8b:29:5e:4c:91:08:
c1:27:97:2f:e8:00:73:18:c5:d0:43:e2:82:5e:09:
9b:04:58:1d:42:0d:f5:ca:00:37:b6:85:f7:bd:f8:
31:e7:48:bb:9c:78:43:af:b0:8c:c0:2e:68:ae:82:
63:c1:a8:80:4c:f4:b0:2a:17:12:66:b1:1b:ff:d7:
f2:71:5c:50:b1:49:2b:fe:b5:d5:32:4f:df:b0:7f:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:45:40:64:FB:66:BE:47:CA:7A:EF:2E:E4:1B:53:1A:08:5F:82
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:39:19:b9:77:a8:4b:7b:0f:1f:2b:79:e9:a3:dc:66:f8:
d0:5f:39:54:81:20:a0:2b:25:6d:be:33:b8:1c:3f:c0:29:2b:
53:f2:4a:5d:ba:bb:95:ae:53:88:eb:cb:6b:9a:92:c7:87:8f:
f8:12:a3:9f:d7:ee:8b:3b:80:db:c9:80:4a:80:18:36:ea:91:
5f:fe:7e:f4:24:ef:e1:69:9f:56:67:13:76:7c:b4:d7:ca:ff:
6b:b2:d7:2d:39:bc:68:8a:6a:39:94:7d:4d:f1:f6:46:39:f5:
34:97:e4:ca:ba:11:ae:b2:03:88:4d:1c:0d:97:cd:3c:f7:57:
eb:9c:92:b8:6a:06:7f:cd:36:e7:e6:c2:ab:f3:b9:d0:3b:7c:
2d:51:52:d2:fd:e2:aa:92:35:e5:12:f9:4e:9a:db:d9:54:15:
d4:a4:b4:46:6f:46:79:29:d4:71:7c:14:cb:07:b7:fd:8f:64:
09:72:12:3c:65:e0:99:fb:03:7c:3a:e2:66:fc:9e:34:5b:29:
d7:c1:34:30:b5:d3:dc:19:85:0a:6b:26:a0:dc:52:65:99:aa:
be:83:06:93:6e:84:5d:a3:8e:ea:af:f4:b8:ec:ee:90:92:06:
75:c4:03:28:26:b3:f4:71:75:d6:d6:39:1c:9a:30:09:62:7a:
f1:46:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:04:04 2026 by rpki-client