Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
File: 5jAbF0RrPssIF-QA6YL3Km2AHTE.mft (raw, json)
Hash identifier: 9erybCHCvtSdPe7RXASoSLPncH1U5C7XhWBGr7/9duI=
Subject key identifier: BC:6C:5D:A8:5A:53:37:77:74:D0:10:C1:AD:7A:0A:84:77:AF:69:5D
Authority key identifier: E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
Certificate issuer: /CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Certificate serial: 01A08B9F9873F6C68C3958B568B3C5A66184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
Manifest number: F8
Signing time: Thu 10 Sep 2026 14:01:27 +0000
Manifest this update: Thu 10 Sep 2026 14:01:27 +0000
Manifest next update: Fri 11 Sep 2026 14:01:27 +0000
Files and hashes: 1: 5jAbF0RrPssIF-QA6YL3Km2AHTE.crl (hash: +SK9AaN81jcyexlshVvRKKa3vIS/TdzxMw0+AJqTsNs=)
2: y8-zYgb68sCKmok28fSORVZTV7k.roa (hash: kb393sHwSxydXSQ1l80qzXOkKVqcGzDmY/nU6zerbuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:98:73:f6:c6:8c:39:58:b5:68:b3:c5:a6:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Validity
Not Before: Sep 10 14:01:27 2026 GMT
Not After : Sep 11 14:01:27 2026 GMT
Subject: CN=bc6c5da85a53377774d010c1ad7a0a8477af695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:bb:0c:a4:a9:f4:67:ef:a9:59:02:60:9f:
d3:9b:c3:e4:ed:20:80:88:d3:36:87:3b:69:28:f0:
73:c6:1c:7a:cf:89:a3:e2:12:87:9f:53:ad:83:51:
67:fa:fb:8b:a2:31:98:d2:87:1d:94:ae:69:fa:a3:
be:53:80:f4:d0:f7:ca:af:f0:63:52:ea:bf:f8:10:
58:ec:70:83:17:2e:27:12:68:44:ad:01:5f:05:43:
f9:cf:bd:87:ce:f3:ff:59:b6:50:56:62:2d:bb:13:
f8:cd:c1:a9:8b:d5:17:9e:2a:c8:38:d6:41:57:0d:
a4:53:87:80:e9:02:56:cd:e3:aa:c6:6c:20:0c:ea:
be:67:ab:8f:f6:62:13:e6:c6:99:de:03:af:a1:1b:
44:d9:4a:ec:31:60:95:82:26:ea:74:30:27:c0:72:
d9:d7:82:85:58:b7:7e:ab:7b:a9:73:83:15:84:18:
c1:70:8c:08:b3:11:f2:4e:70:2d:db:33:d9:f7:ee:
53:89:d6:01:d7:78:73:5d:72:24:1f:fa:56:74:a0:
82:72:e7:f7:bc:c9:48:9b:c7:09:d8:d8:0b:cb:34:
0e:20:ae:b0:96:e8:93:50:84:1b:a8:64:87:8a:d6:
f0:b3:e7:fe:a8:20:55:ec:04:b4:0f:db:5e:25:cd:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:5D:A8:5A:53:37:77:74:D0:10:C1:AD:7A:0A:84:77:AF:69:5D
X509v3 Authority Key Identifier:
keyid:E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:01:6f:14:3a:d9:ee:22:67:3c:32:d4:1d:5f:01:dc:3b:
17:4b:4d:27:bd:76:7c:da:50:43:65:73:9b:a0:95:40:6c:c2:
49:9b:d7:d0:c7:0f:2d:cc:49:c4:ed:4f:a9:df:b2:bf:de:00:
3c:3d:f7:39:24:c7:b6:73:f5:da:75:12:60:84:d4:4a:37:1c:
2a:4f:28:e4:34:00:da:a7:b4:47:a5:04:aa:bc:f1:6c:dd:c4:
db:ef:2c:d4:5b:18:a1:9f:6d:e9:bd:8b:e6:d5:d7:fe:14:0c:
98:40:bd:e8:e6:fc:f2:b4:04:51:91:33:8f:3e:38:f1:10:d4:
f0:c7:d8:31:45:f1:e6:fb:90:0c:a7:97:3c:38:d2:7f:ec:5e:
16:39:4d:5f:ab:12:7b:85:c5:ae:6c:38:56:0f:0b:6c:40:6f:
10:22:36:4c:7e:f2:c1:60:65:59:31:8a:aa:94:14:65:b9:5b:
8b:ce:a0:59:17:d6:cf:77:df:bd:8a:56:9f:26:9b:01:e9:3d:
1d:6a:b2:4c:ed:4c:21:c6:98:6a:9b:88:6a:ae:08:2f:93:0d:
d7:48:03:6e:f1:62:88:4f:eb:2b:8f:3b:46:b7:4b:de:a8:f7:
9e:a0:d5:b7:2a:c1:0f:a8:df:88:7d:fb:92:92:68:f2:1c:b0:
b2:7d:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:20 2026 by rpki-client