Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: kezsBLneB3Asqzm/iyZGAL3hAbDISH7uMVwEpPt7dEk=
Subject key identifier: 04:CF:16:7B:9E:D6:68:AD:B9:D8:66:39:76:B4:21:72:86:2A:BA:B2
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 01A003CB0E264DA9AE1900436E520449EB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 05:00:33 +0000
Manifest this update: Sat 15 Aug 2026 05:00:33 +0000
Manifest next update: Sun 16 Aug 2026 05:00:33 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: UrPRGB6MFeCDeoEZ2w1mD540+wSFS7urGs8xSapHGPQ=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:0e:26:4d:a9:ae:19:00:43:6e:52:04:49:eb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Aug 15 05:00:33 2026 GMT
Not After : Aug 16 05:00:33 2026 GMT
Subject: CN=04cf167b9ed668adb9d8663976b42172862abab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:c7:bc:08:2f:46:42:32:78:1d:4a:4a:9f:
6b:39:ff:41:68:19:28:10:46:02:e2:18:06:20:86:
0a:3e:98:da:a9:71:d3:db:9b:68:9b:5d:72:74:4a:
07:6f:e7:16:45:3a:f1:7d:37:b8:a7:59:a0:50:57:
0a:16:bc:11:1f:13:6d:22:43:cf:83:06:c1:55:74:
68:ea:aa:02:a2:8b:c9:dc:3a:39:dd:5a:9d:99:cb:
48:59:e4:36:75:75:8e:31:1b:a5:3e:0c:91:46:94:
58:ab:40:f4:60:ad:b7:ed:07:34:c3:28:c4:6c:ea:
37:88:e6:1e:f9:b4:75:0f:27:c8:75:4d:f1:31:09:
64:78:a2:21:94:df:55:56:c2:ac:9a:4e:93:17:ca:
8c:d9:eb:bc:eb:79:5f:57:80:fb:8b:a4:a1:48:15:
39:1a:f3:89:bc:1e:9c:49:3e:5f:c2:a6:c8:68:e5:
a9:dd:05:c9:fb:ed:6b:10:5b:39:af:33:1f:d3:2f:
70:96:6b:0e:69:a9:b4:be:da:72:d9:85:a5:53:26:
ab:ff:08:60:26:6a:30:bc:70:19:f3:53:2d:6a:8a:
94:ba:95:73:ac:cf:b7:5b:08:c8:66:f4:3c:e3:ca:
96:48:e3:71:11:2d:6d:50:20:4c:a8:31:4b:38:47:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:16:7B:9E:D6:68:AD:B9:D8:66:39:76:B4:21:72:86:2A:BA:B2
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:19:ff:82:a5:0b:4e:16:d3:cf:31:40:2c:f2:ce:b4:9c:c3:
c0:30:91:a9:c5:31:37:be:d7:8e:88:4b:b1:8c:0b:1f:2b:cd:
cd:db:25:3a:46:e5:85:fa:5d:e7:b0:46:7d:fe:e8:5c:1a:a5:
f7:32:40:1e:c1:ed:f7:27:48:d1:83:ca:f9:15:7b:dc:81:27:
3c:13:4f:a7:0a:48:90:fe:be:29:a4:6c:0c:26:4d:00:d9:b9:
46:d5:d3:8c:c1:3d:09:3c:36:ef:ff:30:e7:e0:95:f6:75:e4:
40:5a:5b:63:2a:c0:39:bb:14:c8:b9:35:dc:46:73:1f:83:5d:
58:be:31:1e:e3:7f:05:5b:14:fa:0a:b1:d1:2a:e1:ee:78:41:
bc:7b:f3:a9:79:e1:ee:08:83:bb:3c:1e:72:db:61:45:89:25:
ec:ae:3b:9c:c1:10:14:1e:f5:49:22:99:69:75:0d:9b:21:4c:
e5:b8:bb:34:d1:9b:e0:81:69:e2:a2:2a:d6:d0:32:6d:5d:35:
79:ee:53:5e:44:ce:17:e8:fa:7f:10:72:b8:3e:a5:8e:29:84:
b6:2e:5d:29:62:1c:4d:a9:42:54:76:bb:4c:08:77:b0:7a:6c:
5c:d0:df:4a:f2:7c:d4:e1:9e:ad:3c:73:bf:c1:3e:22:93:22:
1e:c3:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:10:41 2026 by rpki-client