Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
File: 5CI8HxzaGbmTW0jH_c8gVcKWICg.mft (raw, json)
Hash identifier: w/8nmCrea6nFJhbq9V4SHRekerdIp3SbpbdmDgDyo2c=
Subject key identifier: F2:55:33:EB:19:9D:97:CE:D1:98:91:83:46:B9:59:26:21:84:F2:86
Authority key identifier: E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
Certificate issuer: /CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Certificate serial: 01A0404E2B2BD1DC0D0ABB16FA230DBB24A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
Manifest number: 028C
Signing time: Wed 26 Aug 2026 23:00:59 +0000
Manifest this update: Wed 26 Aug 2026 23:00:59 +0000
Manifest next update: Thu 27 Aug 2026 23:00:59 +0000
Files and hashes: 1: 5CI8HxzaGbmTW0jH_c8gVcKWICg.crl (hash: cI2sc2OpERQF8FPmBQV1M0Sd9C8Hw7lo+CdbS5s/nEw=)
2: xuYEpRaA_BbVvcRMwj6GF8dzFtk.roa (hash: +oo5HVPSdE5F0vnX0GJbLJAscp8MlST1lOFf6d/1Nz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:2b:2b:d1:dc:0d:0a:bb:16:fa:23:0d:bb:24:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Validity
Not Before: Aug 26 23:00:59 2026 GMT
Not After : Aug 27 23:00:59 2026 GMT
Subject: CN=f25533eb199d97ced198918346b959262184f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:70:6f:47:db:3e:b1:6c:16:a6:17:4a:92:
d6:bd:5e:62:17:31:77:39:94:f7:1a:35:12:50:51:
87:56:0d:52:39:1c:9a:a8:90:e8:68:51:d0:c6:89:
c9:bf:04:b7:90:fe:c0:5f:e1:12:db:c3:97:34:90:
fd:61:f4:4f:66:18:75:e2:37:05:9d:8f:81:db:a8:
f2:bb:74:40:b4:b6:51:9b:a7:4d:08:c7:59:3a:11:
6c:f3:81:61:c1:fd:db:31:b3:4d:3a:e3:63:ff:86:
c5:23:fa:cf:41:09:da:a0:31:a2:36:47:43:e7:06:
8d:c9:8c:6f:ca:49:57:d4:79:14:29:a0:33:c8:cb:
31:c6:a7:af:25:89:b6:f2:14:58:b5:d1:6f:22:71:
c4:1b:21:e2:3f:b6:08:1b:a0:bf:72:b1:b2:c2:23:
f4:80:5f:39:cc:b2:b4:fa:c3:be:f6:82:8b:f9:fb:
7f:5d:12:3a:ac:ea:21:78:78:86:92:fe:a8:be:ec:
c9:75:a4:ee:dc:24:0f:55:75:cc:46:8a:50:27:73:
91:43:88:6a:14:85:f2:85:3b:aa:8b:2e:ae:ec:cf:
af:7b:46:ce:7d:73:c8:4c:f3:8b:32:ec:11:24:6a:
90:c1:57:12:55:f7:17:d0:07:18:00:d3:eb:ee:d9:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:55:33:EB:19:9D:97:CE:D1:98:91:83:46:B9:59:26:21:84:F2:86
X509v3 Authority Key Identifier:
keyid:E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:83:82:0b:97:f3:3a:a0:72:86:fa:6f:3f:10:45:e5:5b:88:
0c:bf:6f:c5:84:82:e5:d1:ea:af:51:bd:bd:40:23:be:ac:88:
12:55:b3:d6:de:d8:65:36:a1:a7:12:7e:d4:c9:ea:fd:eb:0d:
75:49:06:79:51:aa:2a:e6:66:1b:cc:9b:72:52:d2:77:73:64:
c2:8a:b2:c9:8f:af:33:a7:a5:78:a6:24:9d:ec:60:22:63:4f:
58:d4:70:32:46:87:e6:b0:fd:1b:ea:41:93:a6:a4:dc:a2:97:
fc:e3:41:d1:15:0c:c6:d9:5f:ed:79:df:a0:18:7b:ac:93:2c:
60:a6:7c:4d:29:0e:bd:39:a8:d5:9f:64:35:d8:64:21:e8:f1:
12:33:66:dc:90:c0:58:76:6a:c1:a2:a0:04:1c:37:08:73:1c:
cf:30:24:f0:dc:84:19:28:29:22:7b:80:b9:3d:c3:66:b3:9f:
09:22:ec:02:b7:c2:4a:65:b2:ce:2f:2f:82:22:43:fd:69:0d:
d1:8f:9f:d6:62:37:1e:67:a3:09:7d:7f:43:0d:22:fb:98:59:
9f:55:6c:63:bd:22:e9:b0:5b:86:d6:09:29:0c:f2:af:57:f9:
da:e2:97:77:08:de:85:c8:10:5b:41:64:ae:b8:f7:54:3b:ad:
57:9a:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:28 2026 by rpki-client