Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: EJv2Wr+Slj/oWxUFTLYoXIP4J5GMAPUXIDLp1bAgC2Q=
Subject key identifier: 80:5A:8F:5B:01:7E:C6:FD:05:77:C8:D9:D7:33:1E:84:BB:5C:A5:71
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 01A1212FAA1D2601C24995FEAF504ED61D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 114F
Signing time: Fri 09 Oct 2026 15:02:14 +0000
Manifest this update: Fri 09 Oct 2026 15:02:14 +0000
Manifest next update: Sat 10 Oct 2026 15:02:14 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: 7o/jDQIfzGYA2IxFdqVFrq9u7m2zGwtC/YWYIGW4lVQ=)
2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:aa:1d:26:01:c2:49:95:fe:af:50:4e:d6:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Oct 9 15:02:14 2026 GMT
Not After : Oct 10 15:02:14 2026 GMT
Subject: CN=805a8f5b017ec6fd0577c8d9d7331e84bb5ca571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:05:ee:55:60:a9:e6:dd:ae:9f:b8:e0:87:
b6:8c:cb:17:73:38:85:66:99:2f:35:e2:7f:6c:d4:
bd:30:bd:f0:90:a6:d3:8d:75:5b:19:2e:94:ca:56:
08:79:9a:10:7e:23:cd:c0:1a:5c:71:50:08:d3:a5:
2c:6e:14:09:8a:30:ab:63:6d:0b:53:df:95:2d:52:
c1:21:57:3d:9c:b0:ac:e9:75:ef:3e:8e:86:ac:55:
1f:5d:7b:fa:1d:19:ac:63:7f:cd:39:a6:b8:d0:2e:
35:ae:a4:9b:78:1d:c1:65:54:a2:63:86:21:9e:09:
a7:10:1c:49:38:b1:2b:fc:79:29:42:df:35:84:0c:
fd:d0:11:ae:f7:60:3b:75:1e:5f:a5:d3:43:db:bb:
2b:9f:12:e6:90:62:5e:7f:27:bd:df:97:93:53:27:
a0:2a:17:c6:a4:0f:2f:c6:10:1c:97:a0:c8:ff:8d:
ae:8e:9b:1a:ac:30:93:92:8c:8d:75:44:72:ab:a7:
0c:62:38:12:51:79:b7:23:97:f4:e9:e7:25:4d:65:
55:81:bb:87:33:32:b1:ff:cd:d3:7c:09:3e:c3:86:
23:86:07:0c:fe:14:34:ad:76:90:86:1f:d8:53:2f:
02:3e:7a:e3:40:e0:bf:4c:d0:f3:d0:5c:68:9d:ea:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:8F:5B:01:7E:C6:FD:05:77:C8:D9:D7:33:1E:84:BB:5C:A5:71
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:16:e9:82:08:19:33:98:11:8f:93:82:e8:79:18:69:c8:6f:
e2:67:6a:bb:89:5a:b1:23:42:57:c6:20:be:14:3f:f1:b3:8e:
d8:43:68:0e:7d:d7:58:bc:a1:7f:43:bf:42:22:04:70:cc:cf:
e8:bc:5d:f1:5d:88:ee:28:95:89:64:99:6e:89:f7:8e:81:5c:
a7:04:4e:c8:5b:76:29:10:61:fa:85:a2:35:a5:e6:39:0a:46:
ae:b3:f8:33:80:93:ba:31:33:42:eb:e2:89:96:6d:71:a7:16:
1c:5b:c1:bf:68:bf:bc:48:7c:47:4b:f6:ba:35:ae:df:27:40:
30:0f:22:c2:ac:8e:75:15:21:a2:69:db:94:57:eb:07:30:66:
34:62:51:9b:b8:d2:76:44:3a:29:3b:20:ee:7e:88:02:9f:6f:
de:98:74:61:cd:41:96:b0:82:24:1a:f4:56:46:99:ad:fa:ae:
81:c4:6c:2f:5d:7f:8e:5e:31:c4:1f:0e:9a:65:21:ec:da:b9:
00:2c:74:d1:45:4b:e9:16:bf:28:02:73:9b:c6:29:97:5d:a2:
27:83:ea:28:63:58:46:8b:74:cc:b1:43:a7:e9:f3:2f:c2:f3:
a3:20:19:df:12:67:62:ed:d1:1a:f5:2c:90:a9:dd:b0:9e:3a:
72:5c:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:12:57 2026 by rpki-client