Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
File: 5YknkmnMNjptouYK7T8ahQMQFp8.mft (raw, json)
Hash identifier: H/GVs1RzbI6SsGMj9RrMo7jp6we8UOekSG2wtHQWnek=
Subject key identifier: F9:E4:F8:3B:36:FF:69:D8:F3:11:39:9B:88:47:A7:82:DC:30:C9:FA
Authority key identifier: E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
Certificate issuer: /CN=e589279269cc363a6da2e60aed3f1a850310169f
Certificate serial: 01A04160D397DDC3F9D39B8F4D332C89EA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
Manifest number: 0172
Signing time: Thu 27 Aug 2026 04:00:59 +0000
Manifest this update: Thu 27 Aug 2026 04:00:59 +0000
Manifest next update: Fri 28 Aug 2026 04:00:59 +0000
Files and hashes: 1: 5YknkmnMNjptouYK7T8ahQMQFp8.crl (hash: PvQdYDapZrwaaFF41RRlf1gHeGXAI0IdTMIdHhmQk9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:d3:97:dd:c3:f9:d3:9b:8f:4d:33:2c:89:ea:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e589279269cc363a6da2e60aed3f1a850310169f
Validity
Not Before: Aug 27 04:00:59 2026 GMT
Not After : Aug 28 04:00:59 2026 GMT
Subject: CN=f9e4f83b36ff69d8f311399b8847a782dc30c9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:8c:52:69:53:1f:83:45:d4:43:d2:ed:77:
df:d4:97:51:09:a3:8e:70:32:ba:b6:89:2e:6b:3d:
35:4d:a8:bd:b6:f5:6c:69:6a:7d:37:af:9e:29:48:
80:41:13:87:fe:43:6f:6a:36:80:32:ab:19:44:62:
ed:76:10:28:1d:7b:ce:25:22:b3:03:78:a4:01:af:
80:a0:38:8b:03:90:4d:b3:74:e6:cf:7e:65:0c:40:
fd:2d:c1:35:a5:42:70:fa:67:6b:a4:db:1d:2f:50:
0d:34:dc:65:56:9e:9d:7a:91:f6:39:22:4b:4b:59:
ab:b5:98:08:6a:79:7f:08:4f:a4:47:0e:e9:9a:ed:
87:ff:73:a8:bf:dc:eb:2b:ce:6a:89:00:7e:a7:cc:
94:b1:25:16:58:86:38:f9:3d:22:40:e0:8b:41:ef:
e9:36:ae:ba:64:4b:6c:cc:5d:3e:fa:b4:a0:84:64:
5d:81:28:ed:5c:31:55:16:68:d3:d0:ac:c9:12:c5:
50:35:32:a5:b5:4f:83:21:80:fa:86:69:1e:07:fd:
69:67:45:fc:f7:d2:39:a4:c3:b2:98:0b:f3:57:d6:
87:9c:56:cf:bf:26:0f:40:df:ca:65:ff:f3:5f:7d:
76:1a:d5:49:51:01:6f:3a:b5:c6:a3:4c:45:0b:42:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:F8:3B:36:FF:69:D8:F3:11:39:9B:88:47:A7:82:DC:30:C9:FA
X509v3 Authority Key Identifier:
keyid:E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:28:f7:7d:c5:e0:96:24:4b:d5:0a:f3:62:a8:b7:a8:1b:f8:
fe:d1:b4:56:b2:c9:1b:69:3b:2f:34:b5:2a:07:95:ed:f3:51:
50:9a:62:ec:f5:a3:ae:22:a1:e2:bf:2b:38:57:cc:41:96:a2:
73:40:16:fe:a5:ea:16:a7:11:29:13:b5:6b:41:69:c4:44:91:
b2:f0:29:24:04:f6:d4:02:d1:07:1b:cd:2b:cd:b7:09:bf:55:
0d:fa:e8:59:c2:ed:7c:77:b3:42:87:1d:f0:51:79:39:c1:d0:
10:6e:f1:85:ef:d8:e4:23:7b:c9:e9:ba:3e:63:f0:3a:2b:f7:
6c:e5:91:ea:23:ff:88:13:80:aa:3a:1e:34:43:b4:90:5c:38:
fb:f1:43:4d:4a:95:2d:38:d4:9c:19:b5:89:33:a4:49:34:2a:
ad:b5:89:da:19:f6:53:76:df:72:26:88:c2:ea:49:83:ae:a0:
94:67:c1:98:76:b5:5f:d9:26:7b:97:8b:34:fa:47:4a:18:df:
da:cb:45:57:1e:74:84:17:b3:b5:a4:b2:d9:de:94:b4:5e:23:
63:fe:ac:a1:97:d7:c9:f4:34:47:bc:0d:9f:c3:6d:a1:87:28:
70:e8:c3:7b:45:02:97:74:09:13:4c:81:19:9f:08:6c:0f:ea:
69:3a:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:48:20 2026 by rpki-client