Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
File: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft (raw, json)
Hash identifier: BiZe0tuDGLRYxpKepUsRgNPnfujxd3kve940/TP8Z+I=
Subject key identifier: 42:9C:DB:09:71:43:56:E5:3F:AA:3D:AC:27:A4:03:D5:5F:91:C9:CF
Authority key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
Certificate issuer: /CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Certificate serial: 01A17C9732A7F0260FB8437C9894C520C06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
Manifest number: 02EC
Signing time: Tue 27 Oct 2026 09:00:45 +0000
Manifest this update: Tue 27 Oct 2026 09:00:45 +0000
Manifest next update: Wed 28 Oct 2026 09:00:45 +0000
Files and hashes: 1: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl (hash: plCiX2/1s5XrWEs/MOZdNvIu+aHQxAR/dPR9GpQu2Q0=)
2: A72vNYtrAqZwGwVdWSRVIoELlNU.roa (hash: HjnhtlX3seiaGTReSxKDFImzMbn8Z77fXG9LnqCmXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:32:a7:f0:26:0f:b8:43:7c:98:94:c5:20:c0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Validity
Not Before: Oct 27 09:00:45 2026 GMT
Not After : Oct 28 09:00:45 2026 GMT
Subject: CN=429cdb09714356e53faa3dac27a403d55f91c9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:4b:bf:7c:0e:97:aa:b5:9a:61:88:35:ad:
20:2c:4f:0e:3d:1b:de:3e:c6:f7:1f:0c:51:03:1c:
cc:f4:9b:7c:1a:6d:76:0a:3e:65:8d:df:4b:95:39:
16:a7:c9:54:fc:76:eb:c7:f4:4d:8f:ff:2f:8a:1a:
a2:19:6a:0c:e0:cf:47:18:94:8d:7a:3e:31:20:84:
a1:b8:ec:d6:b8:1c:e1:58:93:cb:13:b6:96:95:b1:
2b:eb:de:93:08:2c:07:1f:93:c9:34:88:d6:80:a0:
23:a3:21:f4:16:2f:3b:eb:ce:cb:be:b7:91:25:1f:
ed:a4:4a:ca:d6:9b:10:13:0a:c2:c5:d5:18:7e:e5:
d1:ec:59:90:d8:8e:a2:63:39:a7:f1:29:44:12:c6:
d2:61:0f:6b:c5:0f:7d:87:21:95:a1:a3:b1:97:c5:
74:ab:4a:81:71:4d:7c:7a:b6:61:05:99:aa:83:fe:
c0:78:8f:b5:2b:db:de:45:d9:d0:7a:77:c3:1a:88:
95:66:6b:8f:4f:d4:15:95:e0:d8:81:62:bc:96:b4:
ea:1c:e3:f5:4d:23:1c:e6:4b:e4:e4:01:b6:04:1f:
5f:5a:b3:26:b6:5c:71:36:10:27:4f:d2:e4:97:7f:
39:f1:5f:e8:11:18:0f:01:10:85:9a:14:ea:e9:da:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:DB:09:71:43:56:E5:3F:AA:3D:AC:27:A4:03:D5:5F:91:C9:CF
X509v3 Authority Key Identifier:
keyid:E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e2:8d:7e:b6:92:f3:43:01:d6:17:18:fb:34:78:a9:2c:7f:
7f:b2:c5:71:eb:3b:52:e0:fb:f5:33:53:e2:c8:8b:1f:fd:11:
3a:57:be:ee:78:b2:20:db:9a:e5:10:90:c3:19:fe:6e:eb:73:
57:b7:31:ea:80:d3:51:45:bb:d6:af:58:b1:8b:a4:42:83:78:
1e:5e:89:29:80:e1:e4:5f:6c:2e:5b:39:45:3e:f9:b6:39:ef:
99:2f:ce:04:aa:02:06:62:5c:4a:26:aa:72:5f:cf:01:05:3e:
27:db:64:55:de:c5:fd:49:a6:13:8f:ea:f3:25:4c:cd:1e:f5:
b9:b6:c5:cd:4c:03:d5:bf:7b:37:00:8a:30:6d:15:7a:a1:27:
bf:f8:e5:59:dc:47:0d:36:81:d0:47:e1:ac:91:f7:96:21:c4:
6c:8b:56:ce:08:54:1b:70:f4:79:0a:fe:20:8b:96:86:a8:13:
27:a1:9a:67:41:cd:8d:c4:b2:4b:9e:c2:cd:f6:f6:6c:bf:ea:
a9:5d:19:c6:8c:ce:fb:91:d7:12:77:a0:c9:41:7d:d8:c9:d7:
1e:dc:d6:f4:c3:7c:eb:5a:8f:c3:26:d2:f1:10:c1:a0:95:57:
f9:13:f8:a5:24:fc:94:57:7a:f2:ca:9e:2e:c6:27:cf:86:ba:
ff:11:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:35:14 2026 by rpki-client