Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: +ErAHd3Y2acYOHUXP5XPmj/JQackPfxTZcSuhT33kF0=
Subject key identifier: 35:87:AE:E3:27:4A:38:3F:E0:71:B7:91:93:B9:98:C0:5D:A1:CF:A7
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 01A14C86AF333370B4B309B4DE6FB51F5755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 1AA8
Signing time: Sun 18 Oct 2026 01:00:57 +0000
Manifest this update: Sun 18 Oct 2026 01:00:57 +0000
Manifest next update: Mon 19 Oct 2026 01:00:57 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: jIq2QHDFxWeBGLv9Ec8G4BFhO2udhMfNXtqAjVQl7Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:af:33:33:70:b4:b3:09:b4:de:6f:b5:1f:57:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Oct 18 01:00:57 2026 GMT
Not After : Oct 19 01:00:57 2026 GMT
Subject: CN=3587aee3274a383fe071b79193b998c05da1cfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:e1:cb:c9:b4:32:9f:7b:ef:38:35:33:1b:
41:fd:e9:38:4b:18:61:b6:63:02:42:e3:4c:81:aa:
cb:c5:00:b7:16:5b:9d:53:ff:45:aa:3b:b3:db:48:
0c:1a:d0:41:e5:b6:9e:72:84:89:70:dd:42:de:32:
ef:e2:c4:dd:dd:54:bf:dc:0d:76:c0:bd:33:c1:30:
75:41:35:bc:3a:d7:dc:1e:4b:37:3b:eb:1b:3a:9f:
60:e0:f2:17:f0:45:f3:1c:9b:e8:26:15:9e:36:74:
58:71:0e:eb:ac:e1:5e:5e:f4:e3:1c:ec:e8:15:1c:
af:d7:58:67:85:73:45:cb:fc:38:3e:23:d2:2e:95:
d0:36:10:9f:3c:fe:2d:b6:02:4d:4a:12:54:c3:c9:
9e:bb:3e:91:6c:ef:59:15:0b:19:66:ba:76:24:5e:
79:57:7c:00:b3:92:c4:a9:f4:18:df:17:fa:a5:23:
64:49:50:83:83:86:68:eb:12:37:c1:36:d7:35:69:
c5:a7:32:4d:d0:6c:a7:06:40:fd:35:f4:10:93:2c:
b8:a8:35:d6:71:b8:93:a1:18:85:c7:9d:3b:86:cb:
99:e5:b3:86:c8:01:8d:ec:69:09:0b:ab:04:e4:90:
fb:54:03:12:c2:ec:ac:a6:61:d8:81:6e:63:b2:90:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:87:AE:E3:27:4A:38:3F:E0:71:B7:91:93:B9:98:C0:5D:A1:CF:A7
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:22:07:06:61:ce:7f:3b:73:b0:50:91:54:41:9f:45:2e:a2:
64:56:ce:86:51:89:4d:1b:1d:fb:a7:3e:7c:aa:7b:7b:62:2b:
54:71:02:11:d6:f2:d6:94:f9:6a:f7:44:f3:02:d7:75:cf:16:
12:50:85:41:17:75:89:61:55:c6:3b:48:3e:43:b7:8c:d2:0a:
ff:8d:fa:61:2a:6b:83:c3:9d:bc:69:19:42:66:e6:d3:d8:00:
93:97:0e:3b:c0:de:4c:b0:48:28:c0:68:f4:4a:e5:f7:99:ee:
c1:1a:1f:52:f1:4a:06:e2:10:30:d9:83:f7:db:e5:2d:b1:ed:
9e:68:8c:81:68:fe:ba:25:f0:79:89:65:19:e1:70:85:39:0b:
33:e1:11:d4:b8:1f:b8:e8:a6:d3:7e:0d:35:ff:a6:18:87:11:
11:f8:33:af:e1:50:d6:b3:e4:b6:fb:bd:07:07:2e:d6:ac:96:
81:49:04:b3:e4:73:48:0c:6e:cb:f4:27:47:2c:d7:fc:4e:1a:
c2:97:34:ca:c0:d2:a3:1e:8a:8e:e6:92:35:d2:1c:83:1e:b0:
c8:39:98:e6:a6:85:a8:d1:c6:2c:1f:4c:22:fe:cf:08:a7:75:
f2:2c:b2:df:9a:cd:9a:57:cb:22:99:2b:fd:28:08:08:56:8f:
01:b8:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:00 2026 by rpki-client