Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
File: 5cfDmlkS3cIen2tRmJZyV2ISeDM.mft (raw, json)
Hash identifier: kCbKvp+LBL9neRw7UEhKXPlMDDGeKYcpum6WVQUQwgs=
Subject key identifier: 83:6B:42:A2:6A:16:8C:80:88:2B:01:B3:B7:E2:B7:7F:01:9B:03:63
Authority key identifier: E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
Certificate issuer: /CN=e5c7c39a5912ddc21e9f6b519896725762127833
Certificate serial: 01A040BBE0F76CB0C1701669E6E75BC9F787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
Manifest number: 059B
Signing time: Thu 27 Aug 2026 01:00:49 +0000
Manifest this update: Thu 27 Aug 2026 01:00:49 +0000
Manifest next update: Fri 28 Aug 2026 01:00:49 +0000
Files and hashes: 1: 5cfDmlkS3cIen2tRmJZyV2ISeDM.crl (hash: Wq3eHbnhBBemk0SQEyFo3u8d2Plmm89CaIJNN+j91x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:e0:f7:6c:b0:c1:70:16:69:e6:e7:5b:c9:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c7c39a5912ddc21e9f6b519896725762127833
Validity
Not Before: Aug 27 01:00:49 2026 GMT
Not After : Aug 28 01:00:49 2026 GMT
Subject: CN=836b42a26a168c80882b01b3b7e2b77f019b0363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:6d:f6:8e:fa:06:ec:74:29:fb:60:8f:dc:
e1:4f:4f:dd:cc:92:e2:74:0a:7e:c4:99:a4:32:8c:
4b:bb:5c:27:5f:1c:af:ca:6d:16:37:f3:8e:74:9d:
22:ec:7a:b9:03:38:a4:d8:d1:1a:f4:c7:b1:ff:f6:
7f:64:fa:26:76:be:c5:8c:5f:d8:00:ea:e4:1e:5a:
e2:00:29:0f:10:4a:70:71:4d:91:9a:18:b8:32:d0:
00:a6:67:5c:e2:57:d3:90:05:af:d5:6d:9d:01:f9:
d9:a3:60:7a:79:c0:3f:ca:5e:60:5c:48:a3:e2:b8:
f8:2e:74:85:56:0f:a1:e5:a6:5f:ec:40:db:4f:7a:
70:4c:c7:e1:f7:36:dc:8d:69:de:b2:ed:bd:49:fe:
e3:14:97:36:01:e1:ca:e1:94:d7:bd:18:7f:20:95:
80:3f:2e:f6:92:01:f7:06:1b:43:39:c1:85:07:69:
d2:15:1a:b3:5a:ab:6a:28:f1:3f:82:79:57:f7:20:
51:86:5a:60:20:72:51:c7:15:f2:fa:c4:d9:40:63:
ea:8e:0a:a3:db:bc:ad:c2:a3:8b:49:b9:fa:61:f4:
7d:f5:8d:f8:04:82:fd:3f:11:02:4a:e2:1a:8a:f6:
20:34:6c:ea:ae:42:92:f8:46:2c:2f:69:f2:6b:4a:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:42:A2:6A:16:8C:80:88:2B:01:B3:B7:E2:B7:7F:01:9B:03:63
X509v3 Authority Key Identifier:
keyid:E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:47:77:0d:99:c0:9a:a7:6e:47:2b:69:18:8e:2a:cd:7e:fb:
df:67:78:79:dd:b0:28:2d:cc:6d:cb:59:12:24:ae:cd:7d:3c:
d7:51:76:d0:da:70:a6:f0:46:8f:c5:2d:00:a9:df:da:fd:62:
63:4c:59:7f:80:2b:ce:35:77:82:9e:1e:aa:92:84:ae:f0:e2:
d2:d3:36:5d:8d:31:5e:9d:62:f3:48:2f:72:e1:98:84:5d:f1:
d0:f3:11:ba:db:20:41:43:b2:a6:42:e5:d3:b7:cc:0f:06:10:
d1:6f:a3:d6:04:31:21:f0:e5:23:b6:71:a5:fa:73:40:77:7f:
8a:30:6f:42:e2:6b:50:d5:d1:c5:50:d7:44:e0:c6:06:69:7a:
5b:f2:a5:7a:61:bc:89:a1:58:5c:18:ac:5d:f8:3d:39:4d:7e:
f4:3d:e0:bc:ff:e8:f1:e6:bc:b5:c8:20:f2:94:97:9f:d2:d3:
18:4c:22:a2:f5:1e:7e:73:1a:b9:ba:a1:e6:fb:d4:30:1f:0c:
e4:b0:01:f6:ea:bf:2d:ab:91:2b:dc:fb:a7:24:88:66:08:79:
7c:1e:f4:10:ac:d7:44:ea:36:27:38:6e:b6:b6:52:d1:2b:84:
e8:61:03:60:7c:d7:85:72:a0:43:af:b2:c7:ae:68:74:1c:0a:
d2:ac:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:55:44 2026 by rpki-client