Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: UhVUtItseTjUgTRBRkLJSZ1zCBNgYS3QLlFqNZTy+iw=
Subject key identifier: A7:C6:6D:4E:35:D6:A1:3E:62:B4:BB:ED:27:51:A7:A8:35:55:B3:70
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 01A001DCBDAF3FA53A04478AF80D31E238EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 15FA
Signing time: Fri 14 Aug 2026 20:00:38 +0000
Manifest this update: Fri 14 Aug 2026 20:00:38 +0000
Manifest next update: Sat 15 Aug 2026 20:00:38 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: aKI1aWOTdd/qtMjf/3XmGj9eWcuI5c6caxMKWASIR9w=)
2: Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa (hash: lv1y9n6SxRqEqaqKtDtqJfGE7WxXtWgMt7j43NvbuS8=)
3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:bd:af:3f:a5:3a:04:47:8a:f8:0d:31:e2:38:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Aug 14 20:00:38 2026 GMT
Not After : Aug 15 20:00:38 2026 GMT
Subject: CN=a7c66d4e35d6a13e62b4bbed2751a7a83555b370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:f6:84:c1:4b:6b:f6:a3:d6:ce:a1:e0:8f:
6a:83:47:5f:1b:ca:a1:d2:c6:67:fb:89:00:d6:04:
33:a2:6d:5d:9c:d0:49:c4:e1:a0:84:0f:aa:af:81:
96:5e:1d:b8:73:42:68:33:70:4b:62:46:59:28:fa:
3c:c1:dc:0f:f2:08:4d:aa:97:f4:eb:4a:93:89:6d:
da:95:09:e9:67:07:ea:cb:da:80:46:a7:28:27:27:
d0:28:d8:ee:87:f7:a9:2d:9c:ee:c2:d8:5a:9a:2c:
61:12:57:fc:45:34:55:34:e3:fa:bd:1a:fd:5e:e9:
5b:01:4d:e0:dd:43:b4:16:b6:94:71:62:c6:c2:f7:
0f:06:8e:71:d7:e5:b1:bf:a8:93:7d:71:f7:c6:5a:
9c:85:85:92:a7:5e:14:23:de:a8:c7:cb:6d:86:bc:
36:5a:3d:8a:13:57:ba:e5:41:50:f2:bd:ce:83:89:
25:08:14:7e:b1:99:2d:f7:b1:b1:91:90:34:32:88:
13:49:44:24:9d:25:c1:92:ab:9a:a3:9a:29:c8:f5:
d1:35:20:87:f5:bd:1b:16:5a:cf:62:e6:67:f8:ab:
08:fc:f3:05:0c:11:a7:cf:4a:22:73:d8:db:a5:55:
a1:b3:5a:7a:f3:cf:01:85:7c:d4:da:34:e4:fe:84:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:6D:4E:35:D6:A1:3E:62:B4:BB:ED:27:51:A7:A8:35:55:B3:70
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:19:a2:52:76:d0:b6:12:7e:fa:0b:66:ac:af:63:00:de:ee:
e7:df:d7:fb:bd:76:bd:b5:57:72:30:28:a4:09:98:16:cc:d5:
9e:5b:f8:09:52:e7:2c:f1:fb:4a:1c:5d:42:4b:dc:dd:b3:7c:
4c:28:81:f2:d7:11:34:e9:2a:93:44:01:d8:04:3f:21:93:39:
be:79:62:5b:d7:ee:ad:03:d2:5d:d6:f1:be:38:aa:d4:98:fe:
38:15:81:f9:33:a7:03:09:f2:ad:76:6e:2a:99:89:b2:6a:ad:
5d:cd:5f:ce:fe:0b:f2:2d:4e:73:a4:95:46:f8:8e:41:83:ca:
8c:42:d2:21:0c:c6:91:43:84:3a:1d:d3:90:78:c5:95:af:6e:
27:cb:c5:46:0e:60:cd:74:18:4d:3f:b6:20:e5:10:b6:ad:49:
f0:ef:9c:0e:a7:06:cf:03:12:1d:53:51:6c:16:42:1a:e2:a8:
37:eb:55:f9:c8:d0:1f:da:01:b6:2b:cb:f2:19:87:bf:da:27:
1b:a8:f3:ff:66:f1:dc:18:d2:7b:1e:2b:dc:06:c2:18:da:46:
b2:e5:49:11:ab:53:b4:b3:c6:52:9e:df:67:ea:28:4f:a9:56:
cb:a4:26:01:16:65:d5:5e:b1:00:62:b1:9c:c5:54:3a:cb:8b:
29:c6:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:23 2026 by rpki-client