Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: zs16eMKubWmJL3MWvb1jror4DrPW9hXdC7ys+dX3u+w=
Subject key identifier: 79:BC:E6:6C:FA:D7:29:A9:28:91:2B:A6:5D:BC:B5:E5:72:6A:DA:AB
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 01A13DB83A21A4CD68EDB46F0F31C43CE840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:00:46 +0000
Manifest this update: Thu 15 Oct 2026 04:00:46 +0000
Manifest next update: Fri 16 Oct 2026 04:00:46 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: 2qmkl6eEuAMrRNduxalVwHah6m0TenztyLUEmlaVpjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:3a:21:a4:cd:68:ed:b4:6f:0f:31:c4:3c:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Oct 15 04:00:46 2026 GMT
Not After : Oct 16 04:00:46 2026 GMT
Subject: CN=79bce66cfad729a928912ba65dbcb5e5726adaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:69:cb:a1:c1:d0:b5:b0:10:b9:cf:38:7c:
aa:e4:77:6e:cd:1e:9c:04:19:eb:15:13:57:c7:f3:
f9:0c:7f:63:92:7c:e1:e5:b7:cc:28:15:58:7a:ba:
4c:32:eb:44:c7:e8:e3:63:5b:be:bb:15:d3:9b:7f:
f0:13:0f:45:1c:f3:7e:2f:a6:d5:40:09:4b:aa:68:
91:fc:44:b8:45:92:3a:7a:3a:0f:cb:3b:9f:7f:14:
f5:3b:81:ea:68:30:44:d0:b7:fe:72:c5:85:ba:f9:
12:1a:d7:fb:05:11:1f:4e:80:01:6a:6d:42:a9:44:
66:34:d2:d0:6b:29:f3:89:c2:ce:ff:f3:b2:82:a4:
bb:5f:83:08:5c:4b:41:d3:a2:62:d1:89:b7:23:40:
6e:49:98:d9:6d:3e:01:cc:45:8c:1f:d6:e9:e6:6d:
7b:f0:11:ea:4c:70:27:da:50:21:9e:56:47:ed:58:
fc:5a:dd:41:7e:16:de:c2:6e:a2:63:f6:ab:30:1a:
18:7f:2a:51:76:b7:64:4e:4f:49:b2:83:f3:a6:d1:
e3:53:d0:67:f4:19:d6:dd:04:94:b4:83:8e:96:93:
4b:e5:ed:85:cb:ea:62:e4:1e:56:ad:e9:ff:3b:24:
b2:d1:ce:a9:d9:bf:4c:4b:8a:d8:6d:3b:2b:e2:e9:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BC:E6:6C:FA:D7:29:A9:28:91:2B:A6:5D:BC:B5:E5:72:6A:DA:AB
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:a5:da:99:29:2c:84:37:bd:da:7e:ad:1c:eb:7e:8c:c6:
f5:7c:b5:e5:21:b9:44:2f:8f:a4:df:7d:0c:bf:3a:41:ff:32:
9d:16:29:40:89:ca:59:85:90:99:42:9b:8e:95:ca:ed:36:b5:
e9:4d:1e:ff:43:3e:5f:8c:ec:a6:a0:51:0b:de:62:8e:98:5b:
23:ee:00:83:83:5e:13:a3:20:a5:30:2f:0a:2c:57:0a:97:83:
17:76:bb:1f:99:08:a4:d8:65:5c:f1:f7:e9:29:33:ae:66:8e:
20:5a:9c:46:dd:51:ed:7d:72:6d:8b:04:61:6a:a4:06:5f:4c:
d0:60:52:d8:b8:4c:b8:b2:b0:c3:1c:75:4a:cc:55:e3:80:ee:
69:e2:61:b8:f5:c9:46:89:1d:07:3f:5b:9b:9a:3a:b8:9d:93:
cc:90:be:10:c0:0c:02:cc:81:64:98:f5:f2:82:2c:4f:b4:05:
98:1b:16:30:d3:35:80:e4:58:a3:3a:3b:a0:05:34:e0:47:85:
be:56:cb:d3:8d:e6:24:1d:bf:2e:b0:9a:14:7a:67:2b:2b:b5:
58:96:79:1a:3e:2f:ed:a8:0d:b1:84:fe:6e:fd:25:99:13:a1:
21:f8:21:07:d7:e5:bb:43:50:77:06:8f:92:77:c6:f5:c5:5e:
43:e9:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:20 2026 by rpki-client