Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: q8OFbgMG0iz4x0a9dAnMFKecKqkirkFpE/kB/v0Eqsc=
Subject key identifier: 9B:27:57:0D:2E:45:E8:16:ED:1A:E0:85:18:47:6F:FE:5E:74:33:3F
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 01A001DD414ABA160B96B781A80C5F7D2D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 06A4
Signing time: Fri 14 Aug 2026 20:01:12 +0000
Manifest this update: Fri 14 Aug 2026 20:01:12 +0000
Manifest next update: Sat 15 Aug 2026 20:01:12 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: n91XG55UcQcT6uMOWrb/jZW9Q1qY0UA8Es+7Y+T9QWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:41:4a:ba:16:0b:96:b7:81:a8:0c:5f:7d:2d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Aug 14 20:01:12 2026 GMT
Not After : Aug 15 20:01:12 2026 GMT
Subject: CN=9b27570d2e45e816ed1ae08518476ffe5e74333f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:20:4b:69:5b:15:4a:22:3d:ea:23:f6:e7:
83:05:32:10:83:a5:44:2f:d1:73:56:4c:aa:3b:f9:
cb:7b:df:0e:32:f1:8e:9b:82:06:ac:30:44:97:c9:
8e:bb:8d:81:09:74:2f:11:a3:88:0a:73:4a:61:d0:
3f:0b:ea:4c:ec:8c:f1:85:02:7f:f3:8a:41:2b:60:
36:d9:53:be:7e:dd:e9:1c:8b:29:79:c4:e1:d5:ca:
c0:f8:3f:02:40:a1:6c:41:93:7f:61:cc:ce:02:6c:
cd:07:28:2e:02:c2:8e:7d:74:68:52:a7:a7:fc:09:
52:cc:3f:ec:84:9c:97:1e:12:8f:a2:b1:91:54:5e:
ab:db:b0:b6:88:42:f2:ce:30:92:be:e0:22:52:6c:
5b:a0:3d:4b:f4:ca:2b:29:03:2a:99:c6:67:ab:36:
13:24:24:01:6d:3d:ac:a7:03:47:94:6d:42:d5:b6:
45:e3:db:cd:63:3c:0d:1a:15:2f:8b:29:40:da:8f:
04:bc:60:14:b5:25:df:d2:e4:59:38:28:df:0a:3e:
59:81:44:96:80:76:c4:fd:f9:e4:b9:ea:34:af:d5:
ae:7b:d0:c3:cc:ed:e4:3c:96:6b:b1:3d:2d:65:d4:
1f:9e:1d:e4:a8:8d:18:a2:a6:25:60:3c:b7:44:96:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:57:0D:2E:45:E8:16:ED:1A:E0:85:18:47:6F:FE:5E:74:33:3F
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:80:cd:f4:01:c0:80:6e:ca:9b:19:1e:c8:fd:0d:d6:05:45:
57:30:19:81:c2:2e:4b:93:99:16:b3:73:4a:3f:0b:68:f5:3d:
20:4f:5b:e5:22:4e:3d:43:18:1e:b9:0e:52:61:2c:89:b7:8b:
63:d8:81:36:ad:61:64:79:82:d4:5b:60:cb:d4:2c:7f:53:aa:
6b:5a:49:c7:2d:b1:d0:75:ae:49:ff:78:4d:bc:9e:7d:76:03:
14:fd:a1:0d:98:b1:39:6d:eb:8a:1b:96:30:bf:ba:2d:3c:b2:
b5:48:3a:9d:18:b1:d9:5f:5a:ce:c8:ba:84:9d:02:77:a1:b9:
44:7b:c7:1f:23:50:eb:fa:96:f3:ee:0d:86:b1:11:e4:b0:28:
a4:e9:0e:55:09:57:46:88:d6:23:0b:5a:b7:04:74:b4:fa:a4:
9d:cc:d9:b8:ba:7e:c3:3f:b6:17:9b:73:fd:dc:bf:ad:48:1d:
1a:5a:4a:4b:7b:05:b9:c1:32:e0:ac:3a:e5:f2:1c:92:26:aa:
7b:5f:0b:1d:ec:d1:08:d7:74:91:92:4b:87:61:1e:40:39:45:
31:d6:9b:34:5d:6a:a3:39:2b:e9:3e:80:fd:79:49:ab:e5:6b:
ac:f1:ab:24:3e:07:d5:35:c5:0a:59:6c:d4:6a:3a:06:77:f2:
44:da:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:24 2026 by rpki-client