Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File: 5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier: orEbJ4DaiaJ8Jpm1m9s2a4nNKgSH7c54CvnEqYER7a8=
Subject key identifier: 85:32:CF:C8:8C:C0:90:32:DC:9C:93:EE:07:33:44:17:67:A9:82:A2
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer: /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial: 01A0D3839D165C74545B678ADB99D4823FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number: 0D8A
Signing time: Thu 24 Sep 2026 13:03:32 +0000
Manifest this update: Thu 24 Sep 2026 13:03:32 +0000
Manifest next update: Fri 25 Sep 2026 13:03:32 +0000
Files and hashes: 1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: XI76QJXkSP4sPuBaIsfGY3hH/d/gURqj+r+naDJ1Zos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:9d:16:5c:74:54:5b:67:8a:db:99:d4:82:3f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Validity
Not Before: Sep 24 13:03:32 2026 GMT
Not After : Sep 25 13:03:32 2026 GMT
Subject: CN=8532cfc88cc09032dc9c93ee0733441767a982a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:dc:b9:95:14:52:1b:5b:e9:d0:ff:6a:ef:
fa:a9:b6:c8:a6:a7:22:f4:66:a9:c7:eb:4b:b1:d3:
84:83:bb:2b:02:c5:41:3d:dd:88:15:50:54:b0:11:
c0:40:97:0f:9c:93:1f:fd:5c:b0:ed:f6:df:b8:d0:
7f:62:fd:72:2a:a3:15:5a:fa:1a:52:a2:ca:94:c0:
70:0d:ff:0f:b4:13:42:77:38:5c:ff:2b:ec:8d:c1:
aa:da:b1:28:19:aa:bc:1d:29:c4:0a:bf:d8:66:a1:
d1:64:7a:10:b4:94:71:c8:2a:39:18:a0:48:38:18:
d3:b2:d2:b2:1e:ae:90:e3:c3:61:0b:66:63:85:5f:
4d:d1:b8:24:1b:e9:92:70:20:c6:9f:82:33:66:74:
5b:9d:f7:51:8f:7b:b3:06:69:b1:4e:53:87:16:89:
58:7b:9b:ae:a8:d2:77:ef:84:a4:af:83:d9:d6:f0:
8b:8b:f0:61:76:be:3e:1d:59:d2:97:22:84:08:9f:
57:a0:b4:e0:6e:9c:97:f1:d7:f1:48:3a:2e:4a:15:
9a:3a:4e:fc:3d:9a:2d:ed:44:5e:c0:b8:c0:e8:de:
63:12:38:fb:59:b2:ee:ab:cf:76:86:e3:59:11:fb:
fd:40:ae:62:b9:06:02:99:56:2f:b2:af:16:b2:4a:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:CF:C8:8C:C0:90:32:DC:9C:93:EE:07:33:44:17:67:A9:82:A2
X509v3 Authority Key Identifier:
keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:4b:10:57:df:a7:87:09:7b:92:1f:ec:0c:12:1e:41:ad:
ee:1f:42:2b:ec:54:06:6b:8d:58:fc:6a:db:0b:6c:f9:8e:b8:
c2:ac:1f:fd:5a:d8:e5:b1:09:62:37:05:26:5f:a1:6d:ca:64:
3e:11:15:e6:0b:e3:a5:f7:55:dc:8b:0f:f7:04:b0:c9:21:56:
1b:6a:3e:ee:e8:db:b0:a9:a6:12:8d:77:dd:56:a2:82:c9:c1:
4f:a8:9f:8e:38:a0:52:a2:17:56:fa:51:2f:cc:f2:dc:1b:e7:
a5:9e:35:3e:00:1f:80:a7:a7:f7:be:c8:bb:de:95:3d:83:88:
cb:77:f8:13:e9:fa:1c:b1:64:2f:4f:e2:24:13:ad:9d:6c:ed:
a9:27:bd:50:f9:11:48:38:7f:67:1f:d2:a4:ef:3d:35:2c:99:
58:48:58:a3:2f:d6:96:35:3f:9b:a2:9a:83:aa:5a:41:65:4a:
a7:a2:33:00:2a:70:de:ef:9a:bc:62:7b:44:6f:32:93:82:fa:
85:3c:7c:25:ee:ec:05:80:ce:bb:d8:c7:41:c7:94:1e:98:76:
90:f9:67:22:1e:d3:9f:8d:d1:af:96:9c:10:40:7e:04:20:cf:
b8:63:f4:21:ae:0d:54:9f:33:9c:d6:ee:1f:f2:05:f6:12:f4:
f4:70:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:37:24 2026 by rpki-client