
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: iM5s6bj0E6BL7VfOsvp3Z3havl54HBMWlsj2wwHj/hk=
Subject key identifier: AC:16:BF:3A:18:2E:D4:D3:44:7F:E1:6B:93:5B:CA:8D:F7:83:FD:16
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 01A13E94EFBBFADCCB61082FF807264F4A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0A28
Signing time: Thu 15 Oct 2026 08:01:50 +0000
Manifest this update: Thu 15 Oct 2026 08:01:50 +0000
Manifest next update: Fri 16 Oct 2026 08:01:50 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: MY0WKPjG8Kmf1GMk8UXFF2bk4q42jJ7mYgiODYr7VY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:ef:bb:fa:dc:cb:61:08:2f:f8:07:26:4f:4a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Oct 15 08:01:50 2026 GMT
Not After : Oct 16 08:01:50 2026 GMT
Subject: CN=ac16bf3a182ed4d3447fe16b935bca8df783fd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:25:56:85:93:bf:c4:20:7a:00:8a:f6:81:0c:
b9:fe:1e:67:73:f3:2b:57:01:05:5c:c8:5e:4f:70:
6c:e2:16:5a:1e:3c:d0:3a:05:c1:b5:3f:11:e4:c8:
87:10:6d:7b:b8:18:99:32:2c:51:67:1f:81:53:3a:
b0:7e:ae:4e:1d:c4:e6:16:9f:f7:47:3c:b1:c0:9c:
11:a7:72:5e:91:56:6b:fb:c2:fc:62:ff:e2:d6:45:
43:5b:ff:fb:db:83:8e:cd:a0:5d:d2:87:0c:1a:7c:
c5:70:50:ae:1d:59:7e:a7:7d:70:9d:8b:30:77:a7:
47:f1:ad:8b:ad:11:ca:73:41:fa:89:bc:d4:90:0e:
a4:ea:10:84:f1:0b:57:f6:40:0b:41:01:84:42:47:
35:27:0e:e6:88:ec:7a:88:40:7a:cc:35:6d:01:2b:
3b:bc:9a:d9:c2:37:c6:24:05:b9:21:4b:b1:19:48:
5f:06:e5:b9:cf:4d:52:d7:a9:a0:ec:cf:55:83:41:
40:6e:17:cd:96:3c:76:c5:33:41:a2:ef:79:97:f7:
2b:ae:3e:50:b2:ef:9f:a6:14:12:b1:d0:6f:da:04:
2f:0a:b3:25:f0:51:87:9c:a1:24:cc:75:92:fd:f1:
c3:fe:a2:dd:9a:87:d2:f3:12:29:87:cc:43:49:86:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:16:BF:3A:18:2E:D4:D3:44:7F:E1:6B:93:5B:CA:8D:F7:83:FD:16
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:98:24:98:7c:55:8f:14:95:b7:fa:54:d7:e2:05:f7:45:4e:
89:3e:35:f9:9f:11:b9:0a:c0:a0:fe:ff:1c:75:d4:0e:c5:6e:
d9:d7:11:7b:0b:74:10:5b:51:58:38:86:f9:dd:30:04:b5:07:
d6:61:7c:ce:f9:d8:50:33:fa:e3:b0:01:32:e3:ab:75:fb:71:
af:db:21:80:52:b0:14:3f:6e:e0:b0:c2:a5:0a:20:48:95:e3:
a4:2f:e0:46:ed:e7:28:fc:0d:75:a5:d8:78:c9:60:98:a0:f9:
d2:7a:e9:ee:6b:07:b4:e6:11:08:b5:7d:c4:bc:e3:86:d2:e6:
86:38:a0:25:0a:f7:a7:48:49:31:7a:19:ed:83:77:5d:dc:61:
2c:2c:97:05:23:53:90:5d:6d:4e:e0:ff:5d:cf:db:1b:ad:f2:
aa:16:b9:76:a5:f4:15:20:8f:33:8a:dd:2b:c0:e7:e0:ab:11:
5c:20:92:ee:49:ba:61:36:7f:80:ed:9b:80:52:1f:94:72:ef:
3f:98:d4:3b:98:2e:b4:7d:35:b1:14:d8:26:01:41:60:bd:39:
17:6e:e6:f8:bc:c4:c9:90:ce:e5:a2:44:b0:b5:28:e0:bb:9a:
a3:bc:e8:e0:a5:55:d7:be:4f:40:6d:40:7e:56:ce:6c:31:b5:
09:a3:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:24 2026 by rpki-client