
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
File: 5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft (raw, json)
Hash identifier: KXIR+Gs5GXl0FAY/F5JCpZIxqKyEJYpECAGyBe2P8bY=
Subject key identifier: E5:94:CD:1A:2E:07:5B:D1:32:2A:B8:E3:DE:17:44:76:63:00:13:14
Authority key identifier: E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
Certificate issuer: /CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Certificate serial: 01A01A89FB8202336C7A94691EEB65222899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
Manifest number: 87
Signing time: Wed 19 Aug 2026 15:00:45 +0000
Manifest this update: Wed 19 Aug 2026 15:00:45 +0000
Manifest next update: Thu 20 Aug 2026 15:00:45 +0000
Files and hashes: 1: 5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl (hash: 4zkPLvROrmX4gfpqxpYEM+dvf9coav3He/LshY8J+kg=)
2: dJl8r4I9cKQfDAC67Fzamr6A4Ns.roa (hash: G49JKof/PjJ/pDTjMFk4RiR1s/uu+QqKOQDfL/6PwFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:89:fb:82:02:33:6c:7a:94:69:1e:eb:65:22:28:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Validity
Not Before: Aug 19 15:00:45 2026 GMT
Not After : Aug 20 15:00:45 2026 GMT
Subject: CN=e594cd1a2e075bd1322ab8e3de17447663001314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:d3:de:9b:fb:e4:04:8f:1c:dd:e1:25:6e:
21:cf:99:8b:2e:d4:11:43:97:7f:7e:29:9e:1f:79:
81:8a:62:5b:af:38:84:3a:5d:6f:81:48:48:40:f8:
fd:0c:d4:6a:a1:ca:c4:b6:04:8d:95:f5:fb:44:99:
a6:77:3b:99:9d:40:0f:a5:20:00:73:9e:a2:20:8f:
21:e0:e6:e8:e6:b9:6c:b6:0d:cc:72:ad:6b:ac:fd:
41:3e:1b:fb:5e:38:60:bc:bd:e8:46:22:90:a2:a1:
89:fd:76:09:7d:61:d9:44:50:91:bb:38:2f:22:74:
32:45:52:08:cb:d2:e6:24:93:79:c0:2a:7d:6b:d6:
0d:37:15:78:9a:25:51:e1:d8:be:43:e9:33:fb:00:
f4:92:85:e0:67:e9:32:72:b9:4c:99:0d:e8:dd:dc:
ca:93:6a:43:09:f6:3d:ec:bb:8d:cb:1f:fc:7e:ce:
b5:92:6d:a0:31:b1:e4:d0:89:51:21:d3:8b:d1:c9:
70:4e:4b:dd:d5:96:97:c1:e9:ad:02:c3:b9:0a:02:
02:5e:7f:84:8e:7e:c9:49:6a:ed:ee:15:3b:03:6f:
0b:d7:78:40:5e:eb:d0:ba:8d:b3:4a:ca:34:83:4d:
b5:8b:f2:1c:15:24:7d:53:e4:06:6b:1c:91:a3:ad:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:CD:1A:2E:07:5B:D1:32:2A:B8:E3:DE:17:44:76:63:00:13:14
X509v3 Authority Key Identifier:
keyid:E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:09:7c:d5:4e:03:9f:6c:e1:49:76:d2:07:79:61:36:d1:60:
7c:e1:70:3d:ea:d9:14:83:73:4c:01:1c:37:d3:05:4b:cf:7c:
13:cc:36:10:f7:02:9c:62:d9:8f:a2:26:a3:ee:9c:78:c2:8e:
fe:34:77:e6:b2:fd:33:56:6e:21:fe:18:71:d7:2f:8b:0b:55:
b5:c9:3f:14:1f:79:6d:5d:cd:e4:f1:48:3f:02:75:f9:14:8e:
8d:b2:ca:52:33:46:48:0d:e4:0f:99:51:ba:1d:2f:e4:d8:97:
2e:fd:25:d9:0f:de:70:1c:90:a9:c4:ac:8c:fe:36:dd:1c:d7:
be:85:43:19:e7:0d:96:d0:1c:ba:c2:5c:f5:e8:55:74:20:e7:
ad:fa:70:d5:3a:9e:5b:e4:ba:2b:2c:1d:0d:a2:d9:18:4d:ae:
d5:9e:25:28:43:4c:f7:6a:c5:54:67:d9:c1:8e:cd:d6:47:1c:
bf:b6:16:60:80:96:1c:74:23:ec:fd:0c:cc:c4:3b:55:7f:fc:
71:f6:23:75:fd:8e:9e:dc:d0:99:9f:e4:45:49:54:97:e8:46:
a3:26:3f:a0:41:15:a9:8b:1d:b4:c1:7d:fe:c8:32:f0:8a:95:
71:52:e1:56:03:0d:42:3d:e3:49:6d:d1:aa:cd:72:db:05:a5:
9c:7d:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:53:05 2026 by rpki-client