Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: fnOi6FhMWYR0Fy/r2OYxur3Fxi1lOpJsr5akeeY725E=
Subject key identifier: 34:2A:9D:C6:62:FC:0D:34:6C:CA:34:C9:90:7E:E1:37:94:AB:11:13
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 01A0CD11121EB7638BA3E03A320BC80852F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 07:00:43 +0000
Manifest this update: Wed 23 Sep 2026 07:00:43 +0000
Manifest next update: Thu 24 Sep 2026 07:00:43 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: Mo/S8/NfCGRe2hJJAVmmGXk8vWGHvKQGIpvHsIW7duA=)
2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:12:1e:b7:63:8b:a3:e0:3a:32:0b:c8:08:52:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Sep 23 07:00:43 2026 GMT
Not After : Sep 24 07:00:43 2026 GMT
Subject: CN=342a9dc662fc0d346cca34c9907ee13794ab1113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:51:64:ea:95:d9:64:6b:ab:a8:b8:02:86:
c8:99:81:67:60:31:11:04:ae:87:5d:e7:c9:ea:1a:
5c:34:4e:a7:20:e3:87:76:0f:aa:ad:e6:a3:b7:4c:
cc:5e:08:f7:e3:76:58:66:cb:fe:13:c8:49:89:db:
d3:8e:57:87:97:f4:1d:74:c4:78:69:88:73:50:0a:
33:eb:a2:8c:aa:2a:73:40:57:a2:a7:96:40:43:57:
5a:7e:c1:be:a4:ff:f4:47:8a:43:1a:6b:df:ba:46:
e9:db:dd:f2:7c:b1:61:9d:b4:41:a3:b8:ca:5c:8d:
86:e9:62:2f:53:46:4b:9c:21:4d:25:1d:69:ed:13:
01:3d:20:63:86:ca:b1:e6:5e:ca:37:2e:e2:e7:78:
9b:c0:27:ef:cf:e3:e4:46:fc:d1:32:24:af:4f:0f:
86:20:89:d4:1a:03:ab:92:4b:d7:d7:79:d7:ca:53:
08:60:b1:02:74:72:d8:4b:99:ca:b9:5b:d2:82:fc:
88:0e:e7:01:6f:14:2f:8d:28:9f:d5:28:1e:5f:18:
a8:64:61:cb:d7:d8:62:a2:61:32:0f:c7:01:24:76:
f2:2b:f0:57:f0:20:f6:35:79:15:36:05:c0:34:f0:
d2:fc:a8:e8:d3:4a:72:8e:74:90:25:06:e2:5f:7f:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2A:9D:C6:62:FC:0D:34:6C:CA:34:C9:90:7E:E1:37:94:AB:11:13
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2d:c0:79:92:67:af:e7:4d:ab:58:ca:ff:13:01:3f:eb:f2:
b8:5f:9e:d3:91:cb:77:6e:c2:cd:29:1b:1d:28:74:18:30:09:
8d:22:58:0a:85:52:48:04:a4:e1:6a:b3:ab:72:7d:78:1b:c7:
70:3e:a5:37:24:2f:24:27:01:59:e2:44:8f:1b:6a:d5:64:ea:
a7:8f:67:0a:8f:c2:52:25:8d:b1:01:07:6a:79:bb:90:63:1f:
0a:18:63:5f:fe:14:64:36:d0:90:03:71:6c:c7:e5:e1:0d:61:
e4:f4:9f:8c:cf:7d:e9:54:35:00:7d:26:4d:36:e6:6f:df:5d:
fa:f3:0f:56:f4:bb:f6:70:87:95:14:6d:9f:20:55:d8:2b:fd:
d7:aa:71:28:99:c8:b1:0b:ee:4a:63:a1:83:d3:a9:46:63:bf:
1f:59:1e:8d:b6:54:47:77:68:a8:4e:d5:93:9e:42:ca:1c:43:
14:13:ff:26:e4:a2:b0:88:39:2f:b3:1f:63:d1:1f:6e:47:42:
8c:c7:69:80:1a:5b:2b:96:7b:25:71:0b:00:fa:72:82:6b:07:
fe:5f:60:6d:92:ae:dd:90:a0:e8:87:8c:35:f6:92:ad:d5:9b:
ae:fc:80:07:f1:8a:03:83:f7:cd:f0:48:b4:61:9a:be:2a:5e:
ca:03:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:04:14 2026 by rpki-client