Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: 5BCHG827DuH7F2rUDf16HHdpaM8gJwfOTS/twvR8Gs4=
Subject key identifier: FF:73:8F:9E:00:0C:20:8A:33:81:F3:6D:60:89:B9:02:50:BA:AC:CE
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 01A142DF9340BFBC1A3201C6B130151DB2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 1227
Signing time: Fri 16 Oct 2026 04:01:50 +0000
Manifest this update: Fri 16 Oct 2026 04:01:50 +0000
Manifest next update: Sat 17 Oct 2026 04:01:50 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: Z4YWdOKVFfNBtdVO4pY9RHC7ffO24fhHOmKhcLeG7AI=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:df:93:40:bf:bc:1a:32:01:c6:b1:30:15:1d:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Oct 16 04:01:50 2026 GMT
Not After : Oct 17 04:01:50 2026 GMT
Subject: CN=ff738f9e000c208a3381f36d6089b90250baacce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:76:9e:d3:e9:46:2b:8f:92:f5:31:98:fe:
7d:a2:e2:6d:c5:f1:46:50:eb:6c:ff:06:fa:9c:be:
10:d1:23:9b:7e:f4:64:cd:64:48:e4:ca:db:61:1a:
e7:bd:98:c3:71:5e:d0:e4:64:56:89:28:64:44:2f:
e6:f5:3d:55:40:57:4c:47:7c:9d:cc:ad:8d:24:7a:
ad:1b:16:a3:c9:e8:4f:02:5e:7a:1b:14:9d:61:b1:
57:55:6b:31:5b:65:59:93:5a:14:76:62:eb:4d:75:
5c:5c:ba:5e:94:98:16:d9:a4:e0:bc:a5:f5:63:af:
14:f8:4d:c5:42:82:6c:ec:d3:0b:28:8f:02:ab:87:
35:c1:3c:1f:d4:a5:a1:34:f2:f4:c5:bf:9a:74:09:
f3:d3:fe:f3:d8:b2:9f:94:33:5f:d7:23:87:5f:7a:
c4:f8:74:4d:ba:00:ef:bb:1a:01:0f:8c:85:3d:37:
6b:df:b4:23:87:74:c6:a5:69:5f:be:b4:bc:3f:34:
8f:09:4c:b9:94:90:26:37:47:3a:f6:cf:e5:4f:cf:
79:ca:04:fc:50:ad:5c:b3:e7:cc:39:33:79:bd:59:
20:ba:3d:85:9f:ab:b4:0b:c1:65:1b:07:65:7a:e2:
c8:a7:f4:b5:1f:a2:de:fe:54:aa:e2:fc:3b:b3:ef:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:8F:9E:00:0C:20:8A:33:81:F3:6D:60:89:B9:02:50:BA:AC:CE
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:8c:dd:3f:4f:1d:43:2a:8e:d8:ab:44:52:9b:de:81:1a:
0f:e9:af:f1:48:22:0b:5a:dc:8e:d7:bc:41:5e:f1:5f:4e:da:
55:1b:52:8f:f2:1f:1e:73:c8:ec:7c:f9:24:15:4b:89:83:00:
86:dc:48:1e:83:99:69:89:e8:b4:3a:ad:95:59:7b:cb:a3:6d:
73:55:30:7e:db:2c:9f:a3:a8:2b:e1:7e:c5:74:c8:a8:78:20:
e4:46:4f:ba:4b:23:e4:84:c0:69:b8:ba:0e:77:d1:14:a6:9b:
cb:7c:c7:b0:f7:1c:62:01:af:53:9a:1b:bf:30:35:a2:ed:0e:
b6:21:f2:9e:c3:97:49:2f:d3:26:dd:e0:09:fc:16:48:46:52:
d3:e4:46:3c:f4:68:db:ae:33:3c:bf:6b:8f:db:eb:77:bc:48:
5f:48:60:98:83:ee:c0:7c:c4:2c:ed:ef:17:72:c5:4a:23:fb:
2c:1e:e3:96:85:a3:f0:a9:09:bd:64:1b:bf:18:0c:b5:46:e2:
e1:f8:04:3a:e1:3b:f6:e5:2e:de:ca:03:cd:38:e4:27:2f:ca:
18:d0:62:b8:fb:55:f9:db:f0:18:83:b4:eb:36:49:4a:3d:2c:
2a:0f:fa:f4:95:ee:3d:36:97:18:e2:c4:3d:46:a0:df:23:fc:
6d:80:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:51:42 2026 by rpki-client