Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: GQlh122GGpKScRdlFWd0JrEdaLfsZj/FkUPALCQWjOM=
Subject key identifier: CA:27:79:95:70:0A:7A:49:FF:1A:C6:FE:5D:E9:35:86:CD:41:31:9C
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 01A1347E8FCB94B89EA866DE6C603FAD89A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 09:01:11 +0000
Manifest this update: Tue 13 Oct 2026 09:01:11 +0000
Manifest next update: Wed 14 Oct 2026 09:01:11 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: wBv0yB/RCqvGX5BLigRTFxbM+1r7QEGsGveoJr7UUxc=)
2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:8f:cb:94:b8:9e:a8:66:de:6c:60:3f:ad:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Oct 13 09:01:11 2026 GMT
Not After : Oct 14 09:01:11 2026 GMT
Subject: CN=ca277995700a7a49ff1ac6fe5de93586cd41319c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:6b:f0:60:9b:15:6e:7e:88:d7:2d:e1:52:
6a:23:db:37:87:52:67:c5:06:62:59:75:22:f0:3d:
5c:83:69:43:7d:e3:fe:0d:66:3a:21:a3:0e:a9:1b:
02:92:62:a7:4d:85:a2:a7:f1:b8:63:1f:da:9d:a0:
6c:86:c9:46:84:73:9a:1e:03:2c:b5:9d:95:a7:4c:
5d:83:c7:58:90:ca:e7:49:9a:9f:e9:92:bf:49:2f:
0b:94:7b:65:4f:60:46:97:c2:95:0a:f8:9a:77:5a:
f4:7d:31:e6:86:96:99:62:fe:bd:6f:80:2f:e4:23:
c1:fd:bd:68:e6:24:5c:b9:52:ec:ea:cb:e5:c5:17:
7a:93:7e:a5:90:65:09:70:23:84:b6:9a:db:c4:78:
19:14:11:5c:f6:84:51:e8:e1:95:89:b2:db:e6:b0:
3e:1b:c8:ae:78:eb:4e:6e:80:bc:29:5c:bd:d4:18:
b0:6b:80:8d:a5:c4:86:1d:f0:c2:16:ef:eb:15:cf:
ac:42:2b:40:7a:82:df:7b:07:4c:78:cc:e2:b4:b2:
e2:7b:00:f7:aa:65:02:89:ae:18:70:04:61:92:e4:
1e:c0:40:af:8f:38:36:e3:51:45:a2:7f:17:47:5d:
20:5b:d7:b3:ca:af:94:01:e5:20:cc:ea:68:31:cb:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:79:95:70:0A:7A:49:FF:1A:C6:FE:5D:E9:35:86:CD:41:31:9C
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e9:2d:b0:14:60:e1:b6:96:47:9d:23:6a:63:e7:ef:6d:67:
8f:c9:b4:0c:bd:1c:a4:1e:7e:e0:9e:23:de:f3:d1:3b:3f:18:
52:3e:bc:96:1d:ec:0a:b7:6c:b3:c9:56:f4:d3:56:94:6a:57:
4b:bf:5f:dc:53:57:cc:c3:b3:c6:00:f1:a3:05:0e:a6:13:c7:
b9:c4:05:74:f9:72:c2:8f:fc:65:d9:15:d8:11:b1:8d:30:f2:
32:cb:82:48:2b:ae:2f:59:4d:27:ed:75:f0:fa:3c:13:cf:8a:
4a:1a:7b:9d:2e:41:e4:e9:a9:25:28:c5:d3:c4:5a:17:56:6c:
38:e5:6b:a9:9d:fc:f7:72:2c:b1:7d:d8:72:5c:3f:87:e2:64:
54:b6:76:9a:6b:e6:f5:12:be:29:d3:5a:47:a9:85:50:7c:15:
ee:10:88:7f:d7:6e:83:6c:e7:6f:97:ef:60:d4:42:f9:7f:eb:
1b:db:9f:fb:7c:6b:22:2c:a7:d5:37:0b:44:ad:c6:22:9c:2b:
9d:dc:3e:99:9a:52:ef:c0:69:da:8f:fa:8e:f8:2d:c3:d9:4a:
dd:c0:ed:5e:ba:ef:a1:d8:b4:e5:e9:57:a7:29:42:ca:51:ad:
2a:5f:18:be:35:36:ee:a6:51:67:ef:e5:4f:c0:9f:8c:db:ea:
2d:81:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:34:15 2026 by rpki-client