
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
File: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft (raw, json)
Hash identifier: F760BTLXlU8lJh34ND5hIJ2ldzYPNLGtbxw0ihxreJ8=
Subject key identifier: 2F:DA:69:14:8E:7E:FA:CE:C1:13:06:D3:3A:49:ED:04:C2:FD:6F:D1
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Certificate issuer: /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial: 01A1479744BDC26CA23F8B74108385521EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
Manifest number: 112E
Signing time: Sat 17 Oct 2026 02:00:58 +0000
Manifest this update: Sat 17 Oct 2026 02:00:58 +0000
Manifest next update: Sun 18 Oct 2026 02:00:58 +0000
Files and hashes: 1: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl (hash: tsdrIAuCvz7p1CcHtxQ8ibt0syv/9JnzMJ9CCZ3CaaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:97:44:bd:c2:6c:a2:3f:8b:74:10:83:85:52:1e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Validity
Not Before: Oct 17 02:00:58 2026 GMT
Not After : Oct 18 02:00:58 2026 GMT
Subject: CN=2fda69148e7efacec11306d33a49ed04c2fd6fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:5a:5b:68:8e:71:b3:f5:88:37:dd:a4:db:
28:82:d6:ab:c7:5c:c3:42:0a:ec:15:46:e0:05:0e:
39:ee:42:22:34:2a:78:49:20:fb:9f:c1:28:bf:d6:
f4:35:51:fc:d9:5b:79:a1:4e:06:7f:d9:49:f6:cc:
2e:c2:51:63:d5:0b:a3:22:19:9e:ea:04:c9:c5:f3:
3b:9e:01:db:f4:81:da:4b:85:67:97:39:1d:12:ed:
7a:ba:e0:bc:19:15:32:aa:18:df:83:08:85:d2:34:
03:3e:3f:e4:cf:82:a9:f2:a1:17:74:9b:1c:c9:b7:
b2:f8:91:75:c8:90:63:8a:d7:fd:db:c9:b9:f5:75:
48:76:8c:6a:09:05:fd:03:36:5d:ce:58:7d:4e:bf:
aa:df:73:30:aa:cf:0a:65:50:ea:a6:db:54:d1:ac:
5d:dc:23:c0:ee:61:c3:99:6a:f6:4c:7d:fb:6f:dd:
cc:d7:77:1a:72:b2:d9:31:78:78:d3:25:5c:29:a6:
23:1c:75:d4:04:74:20:03:dc:d1:b1:ff:8b:c8:ff:
48:39:9c:7b:ce:22:32:b5:5f:61:c1:7b:a6:c6:3a:
23:66:6b:d6:b4:5c:89:c6:f7:9a:bf:b1:9e:8b:64:
ec:a5:d3:b4:15:40:34:d9:5b:69:ad:21:1d:5e:93:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:69:14:8E:7E:FA:CE:C1:13:06:D3:3A:49:ED:04:C2:FD:6F:D1
X509v3 Authority Key Identifier:
keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:93:10:c9:42:bf:35:4a:89:9a:70:8f:8d:ba:44:61:7a:64:
6d:f6:5f:20:f0:71:ba:fb:be:96:02:45:f9:4d:bd:c1:63:7e:
4f:1e:91:ca:d8:00:64:11:3e:7f:7c:dc:8c:1b:57:76:2a:e3:
e3:72:9a:b2:ea:8a:a0:d6:46:3b:25:20:e3:76:69:1f:d3:f5:
00:d0:ec:64:43:29:43:48:a4:a4:cb:ae:ba:a3:73:f4:a0:10:
7d:86:1f:8e:e4:8f:87:81:46:7a:b2:7e:14:98:b9:f0:f3:1e:
2a:7f:8f:fa:05:58:10:72:dc:5a:e3:41:b1:e1:d8:39:4e:9e:
b1:d6:53:ae:d0:2b:82:8f:b6:79:31:c6:69:02:62:5f:fd:3b:
da:fc:dd:c1:71:73:db:06:b5:95:4e:66:55:63:d6:fe:2e:26:
65:41:14:3a:bb:c4:96:c6:aa:bb:8f:e4:5e:de:13:53:02:b1:
8a:b6:ef:87:38:12:b1:7f:5c:07:0c:2a:fd:b8:a4:62:8a:d6:
e9:cf:af:04:a3:3d:29:33:65:95:64:2a:2d:76:b5:48:5e:66:
ee:f8:dd:63:93:e4:eb:31:d2:00:73:46:d8:99:bc:76:80:f8:
1e:cd:51:fc:52:f3:26:ed:47:fe:47:3e:05:b1:47:99:2c:3f:
2d:4c:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:58:06 2026 by rpki-client