Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: SlliL2E/rZVIm3SzEVv/hNWbwF0GlUbtBqG1M6wc0yk=
Subject key identifier: 2C:A1:61:DD:05:D9:9B:0D:E6:DA:FD:9C:A0:92:65:A1:18:DA:64:BA
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 01A08B9ECD2A317A20724EDA5EBA1B688D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 121B
Signing time: Thu 10 Sep 2026 14:00:35 +0000
Manifest this update: Thu 10 Sep 2026 14:00:35 +0000
Manifest next update: Fri 11 Sep 2026 14:00:35 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: cY+WItVSXCwrcN/axg91eOBjcK4aNrlh9CITuuEO5Lw=)
2: J_wTFK-Imelz3lo0EhalX7WkndE.roa (hash: LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=)
3: QE-p0DolLSe1YcERFi4pB7qqbME.roa (hash: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY=)
4: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (hash: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:cd:2a:31:7a:20:72:4e:da:5e:ba:1b:68:8d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Sep 10 14:00:35 2026 GMT
Not After : Sep 11 14:00:35 2026 GMT
Subject: CN=2ca161dd05d99b0de6dafd9ca09265a118da64ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:50:d0:6b:e0:fe:e1:c3:d1:a4:2c:7d:b1:
88:0a:99:0f:84:85:fa:60:d4:1e:e3:09:af:7f:57:
e5:48:4f:56:74:34:ef:ff:48:32:bf:6e:bd:43:06:
bc:62:4a:5e:f3:76:05:43:2a:30:c7:80:37:5a:94:
ff:15:b5:18:e7:d7:0e:d7:51:62:7a:92:af:c1:6d:
3b:78:21:79:b5:cf:82:78:26:5e:de:c1:12:9c:a6:
7f:b7:e7:06:6d:6d:d3:c4:78:86:be:ad:ca:af:0f:
dd:95:16:92:23:71:03:ee:d8:e3:e8:d0:7b:48:0c:
04:65:7a:87:e5:92:d5:0b:3e:ed:ad:dd:c0:87:f9:
06:a3:cf:b4:a1:10:fc:a5:05:e9:43:b1:ed:14:25:
bf:b9:5f:7d:03:88:08:1d:fe:44:80:f3:cf:f0:ca:
5f:3e:5a:7f:da:fd:a3:c3:45:60:18:74:91:e7:80:
af:f3:91:30:cc:ec:0c:a5:ec:ea:35:60:84:ef:1c:
38:9f:58:86:da:b2:65:2d:91:b4:b5:e1:93:a7:43:
e6:a2:68:da:51:90:f4:dc:92:7f:a0:e8:6e:a7:5c:
12:ad:99:15:ee:3f:c1:e7:f8:f8:d2:f9:69:2b:6e:
bd:02:f7:3c:dc:3f:be:81:92:da:cb:99:2d:31:4a:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:61:DD:05:D9:9B:0D:E6:DA:FD:9C:A0:92:65:A1:18:DA:64:BA
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b2:fc:f0:01:70:e5:e0:2e:44:cb:d6:4e:43:64:6d:4e:98:
e0:6f:db:d1:41:78:f3:d9:b7:85:0a:db:25:f6:e2:3e:2d:4b:
d9:9b:c1:1a:87:7a:fc:98:08:43:4f:5f:f3:7a:32:8d:df:03:
b4:56:b7:25:e4:70:84:28:9c:22:b7:d5:d9:f4:4d:1c:1d:ad:
6f:26:ca:97:40:8e:4f:5a:cb:0c:e9:1b:46:4d:d0:f4:3f:97:
86:cf:63:21:ac:1b:5e:15:a6:d9:11:ca:56:a1:4e:28:87:04:
8d:f0:6e:f4:79:f8:3f:df:bf:fa:e3:2e:4c:53:88:ca:27:6b:
43:4c:6e:fd:1e:72:c8:f5:e9:56:47:04:69:c2:74:f9:0e:2a:
87:5f:53:96:1b:24:f4:fd:34:c2:fa:ec:a9:be:de:d4:06:e5:
23:6b:5c:44:69:72:ea:ce:6b:db:6c:2b:38:34:c6:98:a9:e2:
a6:4b:dc:fd:53:4d:80:86:d3:fa:b4:3a:f6:01:18:ee:ec:88:
a7:e1:bf:ec:15:e7:b6:38:78:16:1a:f1:dd:ef:d1:e7:95:b2:
a3:e4:9b:dd:05:54:b2:84:6b:c2:a1:f9:2f:14:27:e9:9d:65:
70:07:1c:86:52:4c:9e:13:4f:79:ee:78:77:6f:4f:c1:47:48:
14:57:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:31 2026 by rpki-client