Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: A82kGrWcUG8s/JCGKxVN8/CQi9B+72THM20ixEdVw7k=
Subject key identifier: 98:E1:75:E1:A3:4E:22:A1:20:CE:87:CA:88:DE:C8:A6:94:0A:B4:F5
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 01A00101C1B4617B0B91D4DE4BA2CF56C44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 1181
Signing time: Fri 14 Aug 2026 16:01:27 +0000
Manifest this update: Fri 14 Aug 2026 16:01:27 +0000
Manifest next update: Sat 15 Aug 2026 16:01:27 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: TuixAAXApg+Y0KTatf0NX8HOr51DzesG2URPz7vCBYU=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:c1:b4:61:7b:0b:91:d4:de:4b:a2:cf:56:c4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Aug 14 16:01:27 2026 GMT
Not After : Aug 15 16:01:27 2026 GMT
Subject: CN=98e175e1a34e22a120ce87ca88dec8a6940ab4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:90:56:67:4b:c9:98:db:95:61:44:3e:0f:
75:aa:ff:e1:e5:e4:60:98:82:7d:7a:cc:34:72:82:
55:fc:6d:9b:55:3e:74:3a:51:c3:01:f5:7f:da:01:
45:a6:c7:07:4a:ac:40:ef:a2:4a:c2:87:2d:d4:78:
97:b7:b7:51:5c:65:a9:15:b2:16:13:a0:ce:c3:37:
03:d7:7a:1a:11:63:aa:9f:65:c0:23:96:ed:83:72:
1b:e5:1a:05:dc:dc:f3:d9:a1:02:80:67:b9:3b:17:
8a:41:35:b3:67:b0:c9:a5:a3:82:f0:db:82:19:86:
68:3d:6f:11:98:3c:96:7d:4c:de:13:17:0d:63:5a:
5a:0e:9c:b9:8a:d4:9a:01:d5:99:ae:69:95:53:b6:
35:06:37:02:0b:1d:a7:eb:58:c9:e4:27:fd:bb:52:
48:94:48:94:9c:e7:3c:9c:28:40:af:41:f7:5e:82:
aa:2d:2c:9b:06:b8:31:06:36:27:18:1a:99:43:19:
6c:aa:c3:c5:d6:7c:28:ff:f0:a5:3e:22:cf:a4:c8:
93:48:52:c8:f1:15:84:61:80:a7:6d:4b:c5:f2:e3:
bc:03:61:a6:4a:46:0e:11:7e:a3:0a:23:69:15:b6:
a1:8a:a4:a2:04:df:97:03:8f:c9:21:7a:9e:7c:26:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:75:E1:A3:4E:22:A1:20:CE:87:CA:88:DE:C8:A6:94:0A:B4:F5
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:48:bd:a0:8f:e7:69:fb:b6:0e:cc:d2:4d:bd:5a:b7:0a:27:
dd:52:b7:4c:dd:85:89:ba:b4:5b:58:ce:11:4c:34:68:ce:d6:
71:79:c4:ab:5a:89:e0:d9:52:38:3b:8d:73:86:94:fa:a0:74:
cf:83:2a:a2:62:96:64:69:a1:5c:7d:e6:0c:5f:d4:6c:c8:3a:
bb:8a:d9:6f:7e:bc:b8:bf:c9:06:fa:4a:0e:70:59:30:4e:21:
6f:b4:c5:49:07:62:28:ec:90:47:26:12:e1:c4:bd:2b:02:14:
1d:14:48:1e:2f:d7:50:22:bc:49:b7:83:59:0e:71:6f:9d:b6:
80:fa:41:5a:09:1d:76:6a:f3:51:91:b5:b5:3e:40:a8:51:ff:
f6:b8:84:29:2f:22:f0:34:47:c9:7c:17:81:9a:0b:b0:1c:9f:
9e:83:e2:e2:8e:5b:77:81:d6:ca:ed:74:79:58:9d:b0:7a:b5:
bc:f8:d8:da:52:b3:d8:2b:45:09:ac:b9:a9:b1:f9:e0:6a:6c:
f5:00:9b:6f:c5:d7:ab:77:2a:e7:d6:66:8a:88:1e:f5:44:0a:
27:cb:4a:6e:e6:f4:4e:fc:8e:20:01:2e:bf:04:25:a8:c1:6b:
f2:0b:23:2e:6d:a9:79:0d:4f:bb:e8:44:35:b1:16:9c:1d:a0:
06:9a:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:44 2026 by rpki-client