Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier: IOcJieYYEpP/KKgtolMYRowpv0aouD/lEFSFSSzNd/0=
Subject key identifier: A9:1D:22:CA:C3:16:C6:9E:FF:C5:66:3D:4D:9E:76:72:45:27:EB:CB
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial: 01A13C6E469515CF39C6A4C996FA49A7E170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 22:00:22 +0000
Manifest this update: Wed 14 Oct 2026 22:00:22 +0000
Manifest next update: Thu 15 Oct 2026 22:00:22 +0000
Files and hashes: 1: 1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa (hash: tXskn9qxJGgIuj8H/bglOap8ueKyjcb9VQBsaau/B14=)
2: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: Tfn+Xtyc3t5lxrBzkc8lH4hklBY+eHNnyAeS0Fmw0oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:46:95:15:cf:39:c6:a4:c9:96:fa:49:a7:e1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Validity
Not Before: Oct 14 22:00:22 2026 GMT
Not After : Oct 15 22:00:22 2026 GMT
Subject: CN=a91d22cac316c69effc5663d4d9e76724527ebcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:c4:f2:2c:b1:18:ec:94:31:e1:83:f6:8d:
39:26:e6:0e:84:f3:99:77:5d:ed:7e:8c:cf:8f:c1:
9f:2a:a0:83:83:9c:6d:0a:44:3a:5e:62:23:2b:d1:
9c:a1:17:bc:05:ab:41:50:53:cd:dd:89:3b:8f:2c:
9d:24:d9:24:6f:ca:8c:6b:d4:48:8c:80:a7:fe:9f:
d2:2d:f0:57:6e:97:b0:3a:20:c3:34:ff:33:9d:a6:
29:93:f1:f3:c0:c9:1f:36:76:84:23:75:d2:c2:da:
e3:47:62:23:1c:52:c5:ce:75:49:82:08:0b:45:70:
a8:70:ed:85:e4:5e:44:9d:47:4f:7d:20:e5:0e:f0:
07:ab:a5:0d:dc:26:e3:24:69:ef:97:5b:d7:ea:bf:
0d:d8:5a:2e:04:6b:e1:ae:67:75:cb:17:2a:46:de:
09:c6:6d:4e:3e:34:09:42:6c:29:97:15:d9:e9:2b:
5a:fa:90:a8:05:a7:8d:53:a6:ed:54:34:bd:70:c6:
ae:94:97:0e:d1:ba:a5:8b:cb:05:8d:ef:11:a4:cc:
71:bb:9a:05:cc:d5:10:55:02:37:43:7b:c1:62:15:
ae:03:38:97:ba:89:06:02:21:18:8b:80:25:f7:6a:
40:84:7e:80:1e:4a:d4:95:85:00:fa:9e:fb:b7:87:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1D:22:CA:C3:16:C6:9E:FF:C5:66:3D:4D:9E:76:72:45:27:EB:CB
X509v3 Authority Key Identifier:
keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:62:99:fb:9b:c1:31:b5:fb:4f:45:df:ae:d4:a4:65:c6:30:
84:24:ea:36:b4:25:44:82:fd:60:17:d6:c4:14:91:76:9f:2a:
aa:99:5a:00:19:2e:a1:fe:f7:c2:0e:84:29:fc:29:f9:0e:47:
da:ef:a3:13:09:ca:4b:ec:c5:a2:9d:4a:7a:1c:f1:06:da:83:
76:cb:89:f9:4b:06:5b:60:a6:1c:63:d1:e0:3a:f7:a4:58:fe:
93:8d:5d:56:33:1a:da:62:d9:82:8a:2c:05:5a:e1:23:60:70:
fb:1e:cf:8f:be:d0:92:b9:b2:e7:8a:4f:cb:82:a4:f8:96:05:
ba:9b:5e:61:b4:53:53:20:2d:a9:34:7d:1c:d4:77:4a:6b:80:
f1:09:b2:94:f7:a4:01:fa:ca:49:40:47:9e:8e:63:2a:4a:2f:
d2:fa:d1:84:cf:ed:cf:df:ea:4f:c2:c4:e3:3a:47:88:a6:65:
4d:3c:2f:69:c2:62:c7:ee:43:d6:25:70:d2:78:3c:e4:1a:4a:
63:18:d3:e4:56:e1:97:99:2d:8d:b6:03:3a:fb:34:f4:7f:5a:
ef:4f:6d:ee:f6:e3:9c:d6:50:6e:46:08:7a:6e:e3:db:5f:0e:
84:24:9f:0f:fa:9c:40:42:bc:dc:bd:f7:de:e3:3a:97:af:03:
a8:5a:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:47 2026 by rpki-client