Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: iTfu5F+yjD2Bfz0RLy08awVKxqs0HHsyQObjHFziuBY=
Subject key identifier: F3:69:33:8A:D5:68:BE:97:9D:08:07:C2:E2:CB:59:C2:CB:BA:3F:32
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 01A1423AC40BE61E86A49BAE0DBAE32E7B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 1A36
Signing time: Fri 16 Oct 2026 01:01:49 +0000
Manifest this update: Fri 16 Oct 2026 01:01:49 +0000
Manifest next update: Sat 17 Oct 2026 01:01:49 +0000
Files and hashes: 1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: nb4xHrRWHKWosRA30lvzHac2uboEuQQ5M5/pwL3cY9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:c4:0b:e6:1e:86:a4:9b:ae:0d:ba:e3:2e:7b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Oct 16 01:01:49 2026 GMT
Not After : Oct 17 01:01:49 2026 GMT
Subject: CN=f369338ad568be979d0807c2e2cb59c2cbba3f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:eb:11:47:53:b4:f9:d0:7a:2a:de:5e:f5:
91:5f:23:30:28:a9:05:70:4f:13:0c:f3:13:c5:43:
a5:b2:67:b0:f7:ef:18:81:df:dd:ac:6f:66:d6:e2:
3c:f8:15:81:2a:7e:71:02:1c:9a:e4:ca:34:bf:a3:
3a:bc:01:35:80:85:21:7f:36:a2:ba:9d:ae:4f:bb:
5a:08:9c:22:18:71:73:7c:5c:07:a4:c5:f5:9d:ad:
bc:f5:5b:85:c9:23:97:dd:1c:e0:d5:61:81:7f:a6:
a5:a6:76:f0:2e:e2:10:f6:71:f9:a4:e4:29:74:4c:
da:69:59:7d:65:27:b6:2a:2e:58:72:87:7b:ee:d6:
04:e4:16:7a:2b:89:ff:74:c0:0e:31:cb:c7:e1:e7:
57:46:4c:e2:bd:38:9f:a2:11:3e:ca:15:a1:ea:a2:
21:5d:ce:7c:43:d5:6e:65:a1:ba:b0:eb:17:1e:44:
db:3d:92:c6:56:cb:ff:1f:59:fb:03:6f:c0:8e:e3:
8a:34:b7:43:e9:e0:94:8d:3c:68:59:6c:fe:5e:38:
cc:90:9e:db:0b:ba:2d:ea:85:e8:9c:96:2c:65:bf:
4a:9e:2d:bb:0f:f7:76:14:c3:ee:1b:57:76:dd:f6:
c7:17:fe:7c:c5:f1:ee:3a:e5:30:a2:90:d9:2b:0d:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:69:33:8A:D5:68:BE:97:9D:08:07:C2:E2:CB:59:C2:CB:BA:3F:32
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:52:e5:08:31:b0:94:55:57:44:0f:27:d9:0f:f9:ba:7e:d0:
42:41:95:77:c6:1e:f5:82:9a:9a:df:74:dc:28:a9:94:a2:0e:
ef:a2:f4:b7:c2:00:31:b7:26:44:fd:7c:61:f4:c8:e3:aa:d1:
91:5e:22:70:6c:3b:3b:67:4a:63:28:cb:02:50:0e:db:64:ff:
c2:6e:7c:fa:f6:ab:5b:36:c3:02:13:89:7b:c2:25:7b:bb:ff:
4f:cf:01:30:f1:59:25:90:29:ee:99:a2:63:95:43:7e:18:29:
fa:24:24:78:26:96:20:53:15:5d:95:72:b3:4e:89:3e:ce:f2:
ad:1b:5a:23:a1:80:1e:ba:23:81:7a:e7:e4:95:65:bd:b0:d3:
28:0b:b4:11:14:78:ee:8f:b7:c9:79:8a:77:90:1e:64:9a:73:
c4:6c:e4:42:64:b9:a6:ee:e4:ac:55:9c:f7:7a:6d:bc:17:b5:
60:56:58:b4:25:67:ff:fc:c0:ac:81:42:29:47:45:d9:57:46:
5e:70:5f:a5:97:1c:1d:37:59:c1:74:91:0a:c4:69:2a:c2:26:
34:f6:90:3b:ec:0b:aa:90:2a:19:2c:f1:5b:0c:e0:d0:82:17:
b4:14:34:dd:0f:bd:c2:bd:90:03:57:77:66:43:81:3b:24:ea:
0d:35:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:08:52 2026 by rpki-client