Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
File: 5Kx1KYEdAQxOrpKbgmncse5gQn0.mft (raw, json)
Hash identifier: b9RnPh6qxtFGaSrBIkX8JVHamM2V/VtZqMN+BT0jus8=
Subject key identifier: 2B:5F:FA:6C:EF:FA:C2:9C:E1:47:BD:11:26:38:74:61:E6:40:C4:F3
Authority key identifier: E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
Certificate issuer: /CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Certificate serial: 01A03FA9D234005AC40AF1FD9466DC678941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
Manifest number: 016A
Signing time: Wed 26 Aug 2026 20:01:29 +0000
Manifest this update: Wed 26 Aug 2026 20:01:29 +0000
Manifest next update: Thu 27 Aug 2026 20:01:29 +0000
Files and hashes: 1: 5Kx1KYEdAQxOrpKbgmncse5gQn0.crl (hash: jCTswi/V1X0WcTsozbxkJg3Dmr7QeBPdb2KcMEioLmk=)
2: BK4arnbSQ4B25pxDRE5Ie4tBFeQ.roa (hash: Z8/iluS8EAJmrvxxHXbWJHlRH0f/X4A6MDYigcnMSGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:d2:34:00:5a:c4:0a:f1:fd:94:66:dc:67:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Validity
Not Before: Aug 26 20:01:29 2026 GMT
Not After : Aug 27 20:01:29 2026 GMT
Subject: CN=2b5ffa6ceffac29ce147bd1126387461e640c4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:31:63:4c:78:d0:82:24:f6:df:de:82:85:
b1:c3:1c:14:7c:11:ae:48:e7:9f:30:e4:95:96:32:
a8:85:6c:56:16:c0:26:97:f9:80:3e:2c:96:77:0f:
cd:0c:e5:38:6a:cc:29:ee:40:a3:aa:e5:e6:dd:17:
9d:23:1a:a8:f7:3d:d7:42:5b:1e:df:52:b4:ae:38:
72:dd:92:eb:33:b5:22:b9:c0:36:d9:77:08:c7:f8:
cd:bd:06:23:af:81:cd:bd:a9:e7:f9:93:51:bf:6c:
ae:0f:4a:af:bb:0a:b1:f5:82:17:19:d4:92:29:14:
6a:73:36:3b:be:d9:8e:f3:c9:b5:c7:c6:64:03:e9:
74:4c:56:80:e8:cf:a1:e0:0f:f9:ca:e7:8f:be:90:
f7:53:ff:c2:fd:d7:92:62:d0:3c:6f:b3:96:8b:58:
12:08:0a:55:ba:c8:f1:7d:25:6c:83:5d:99:65:fd:
65:80:e6:ce:16:38:d9:7e:24:c6:30:c4:94:97:0e:
55:ae:28:0b:69:17:c0:03:19:3d:04:18:86:4b:5a:
ae:b8:03:a8:6c:b3:12:c1:58:3d:b9:c0:86:45:cb:
f2:3f:be:90:25:1a:84:0b:44:f4:83:e8:b2:30:0e:
8e:53:d4:89:37:22:71:91:b8:bd:c1:96:d8:8f:96:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5F:FA:6C:EF:FA:C2:9C:E1:47:BD:11:26:38:74:61:E6:40:C4:F3
X509v3 Authority Key Identifier:
keyid:E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2f:ec:2a:b0:21:3f:9a:12:79:7c:3a:9c:26:0b:7d:0d:e6:
f9:65:55:10:7c:4d:72:68:30:f5:11:ae:17:26:f6:9d:ec:b4:
fa:91:32:71:44:3a:8f:ac:12:fb:6c:f0:83:c5:04:23:1f:cc:
e7:01:26:3e:0b:a6:df:bc:21:05:25:2c:1b:14:ac:0a:1c:b9:
dd:9f:38:01:a1:06:93:8f:7a:04:31:51:95:9a:a1:53:61:e5:
36:35:08:33:e5:da:8c:dc:85:3c:54:f2:72:96:f8:2f:d1:4b:
14:bc:87:fd:a2:6b:3a:73:92:8a:b8:4c:86:64:20:7f:63:02:
9b:a9:91:16:fc:7f:94:96:96:ac:be:92:bc:57:42:c7:e8:e2:
7e:65:06:05:3e:01:20:28:c7:3a:c2:bb:d3:51:29:00:5e:ff:
14:84:39:a3:95:ba:e8:52:b4:de:30:35:99:0c:41:01:2e:86:
1f:e3:2e:0f:cf:81:dc:24:9f:48:ab:3c:44:84:f7:8e:be:c6:
f8:70:2b:32:03:b2:2d:9c:e1:61:22:ae:94:32:f3:1d:18:32:
ee:0e:c9:58:3e:5b:be:c9:d4:24:4f:fd:3c:45:3f:02:b9:bd:
3a:c2:d2:4e:72:1f:80:56:5b:7d:7c:b6:ee:2a:04:9c:3e:50:
eb:fb:85:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:38 2026 by rpki-client