Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: PFMbujYBoMeODfEblsladD0rH8nTaCnpb+DjtjgCyAU=
Subject key identifier: AF:95:A0:86:F4:0B:38:4A:E3:F7:0E:F4:CF:01:06:21:52:93:6A:D5
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 01A13F025B19987590C39A762C6648517271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0FC7
Signing time: Thu 15 Oct 2026 10:01:21 +0000
Manifest this update: Thu 15 Oct 2026 10:01:21 +0000
Manifest next update: Fri 16 Oct 2026 10:01:21 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: dvYIZ/YsREx+u/4qzvjeIOXee9s60kv/WHGKbdj+ABQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:5b:19:98:75:90:c3:9a:76:2c:66:48:51:72:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Oct 15 10:01:21 2026 GMT
Not After : Oct 16 10:01:21 2026 GMT
Subject: CN=af95a086f40b384ae3f70ef4cf01062152936ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:e2:8d:6f:87:d7:27:24:84:9e:9d:c3:e6:
e4:2f:ef:33:56:40:50:e4:3a:8a:c9:81:8a:69:4a:
94:f6:21:4e:61:31:44:58:28:09:b3:1c:78:c6:2d:
5a:c9:23:f2:19:b9:1b:76:f1:34:4d:79:49:a3:86:
36:1e:60:f4:f1:02:3f:e7:73:91:8c:c5:74:dc:77:
ce:77:9f:da:2d:17:5e:02:e9:eb:6f:93:18:59:f7:
41:b4:35:d8:cf:77:21:ed:86:14:fe:40:bb:af:ec:
70:49:3f:4f:e6:57:cf:b7:3c:3d:17:e5:4f:9b:5c:
e0:65:a7:e1:fa:c0:5e:fc:13:e8:f0:fc:bc:62:80:
27:b8:0f:b4:c4:c2:db:74:bc:cd:0c:98:5c:ae:08:
70:3b:1c:c4:fb:ef:30:6b:d9:21:b7:cd:f0:ba:c9:
1e:72:f1:71:29:42:6f:ff:b1:a8:f4:31:82:0d:12:
11:1d:af:44:9a:53:0b:96:cf:30:82:7e:7a:65:42:
fa:52:58:0b:82:b9:14:eb:cc:25:c9:48:88:b7:c0:
8e:23:30:ad:9f:d3:de:35:8a:d3:bc:ad:ce:23:e0:
13:1f:b3:29:84:b1:b7:f0:a5:47:f2:0e:4f:34:60:
8e:d4:4b:0e:dc:6d:44:a9:bd:6b:81:d8:6f:a1:6a:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:95:A0:86:F4:0B:38:4A:E3:F7:0E:F4:CF:01:06:21:52:93:6A:D5
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:70:b1:60:f3:1a:2a:b0:85:4d:51:b8:b3:50:fd:a4:09:
6f:67:6a:06:aa:69:ef:3b:1a:9c:b5:33:00:03:94:86:9a:81:
db:bf:2e:30:8c:60:7a:0c:09:09:15:a4:11:df:71:02:84:ee:
e1:5a:dc:e5:ab:6f:25:db:ed:96:9b:3b:11:48:0e:ad:60:d8:
2b:55:61:de:18:36:4e:43:36:de:59:13:65:40:1e:50:9d:4f:
f6:33:9c:72:0b:5e:cc:cb:31:bd:3c:f5:bf:ef:0c:d1:06:9d:
75:19:7a:b3:32:ad:76:73:2d:4c:58:38:93:b8:86:e8:a6:c0:
12:7c:cb:5b:7c:7e:7b:40:ce:4f:4c:e7:22:97:58:f4:d1:0d:
85:0a:1c:58:ee:17:61:76:91:8f:35:bd:e0:55:cf:30:4f:94:
4f:b2:07:7f:23:ad:0a:32:89:eb:e7:ba:b2:c4:5e:38:e8:75:
38:38:9b:4a:a4:e6:41:d8:cd:49:d4:7e:7b:67:01:c2:92:74:
1c:70:a1:af:4c:ba:6c:32:8d:96:d3:d6:09:fb:9b:4b:2f:2a:
3d:44:7b:0c:af:ee:51:b6:19:5d:d2:00:39:0c:f8:29:ce:b6:
e1:b8:16:7c:30:d7:0d:10:bf:73:cf:70:8f:87:93:75:1b:ca:
74:08:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:09 2026 by rpki-client