Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
File: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft (raw, json)
Hash identifier: 2UA4UMnI9C0uAKQ1in953G4K4WU5JWordAC+6Stw2Cs=
Subject key identifier: FA:5D:08:5A:D5:29:8C:99:DB:98:30:1D:32:8B:6F:C4:80:90:43:75
Authority key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Certificate issuer: /CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Certificate serial: 01A14F8879CB7898A2879C4C25352A135260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
Manifest number: 19EE
Signing time: Sun 18 Oct 2026 15:01:46 +0000
Manifest this update: Sun 18 Oct 2026 15:01:46 +0000
Manifest next update: Mon 19 Oct 2026 15:01:46 +0000
Files and hashes: 1: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl (hash: kNKt2EiPxHiMU8HuQzuEVcY6gamsCbJAMnU5dmtEpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:88:79:cb:78:98:a2:87:9c:4c:25:35:2a:13:52:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Validity
Not Before: Oct 18 15:01:46 2026 GMT
Not After : Oct 19 15:01:46 2026 GMT
Subject: CN=fa5d085ad5298c99db98301d328b6fc480904375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:7d:cb:d2:79:e5:ea:c6:c1:97:a3:56:ec:
ed:97:0c:32:66:b5:64:d7:d7:78:2e:da:15:38:c8:
c9:af:24:d6:be:58:5a:98:0b:05:91:c8:5d:9a:cc:
8e:e1:28:21:a0:9c:69:e9:c0:67:72:46:07:40:99:
00:3d:9e:b0:b1:46:c2:c5:5b:d2:04:03:fd:74:71:
f3:d4:11:be:7c:0d:23:30:10:db:7d:48:45:44:73:
08:08:29:09:7d:74:2e:8c:ba:c7:86:be:fa:97:4b:
a5:8b:d0:d3:61:e5:60:8b:86:8a:3f:46:2d:82:cc:
ce:a0:31:d3:70:75:88:a5:53:66:70:75:01:0d:b5:
d8:88:01:cc:61:13:69:27:8d:d5:5d:9a:96:5b:94:
05:38:ad:1b:29:e7:d0:46:cc:c0:0b:86:fa:21:bc:
fd:f9:21:5c:30:f6:82:5d:a5:b0:a6:a2:d7:18:ea:
28:82:34:ff:ad:ae:32:b4:68:fa:52:51:0f:c6:65:
68:22:db:26:e4:91:34:85:60:b7:3f:55:ed:c6:9b:
5b:aa:12:e7:dd:32:6a:2f:21:14:25:7a:17:a0:26:
71:a9:1c:fb:bd:25:cc:40:35:f6:6b:30:ae:0a:fc:
87:d9:12:33:e4:81:2f:d9:b5:11:9e:e3:08:f6:b1:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5D:08:5A:D5:29:8C:99:DB:98:30:1D:32:8B:6F:C4:80:90:43:75
X509v3 Authority Key Identifier:
keyid:E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:39:54:de:5e:af:e1:60:a1:96:d5:00:e2:d9:2a:ed:46:73:
07:a6:d3:9c:ee:05:b2:25:25:c9:3c:65:27:b3:52:df:50:e3:
fa:ed:69:bd:9f:46:0e:18:2c:47:29:b2:c1:4a:59:e8:01:ee:
1c:45:56:a0:6e:80:35:5b:b3:55:67:d7:29:83:09:e7:d6:71:
03:b1:72:87:35:b8:37:57:12:dc:eb:55:82:37:bd:c0:50:b9:
8d:14:8d:76:8a:a7:01:fb:5b:7d:e3:22:7d:7f:8b:21:e6:f7:
05:b7:09:35:db:a3:48:bc:0b:e1:7e:1b:f6:38:36:35:5d:7a:
7e:82:e5:e3:e4:36:61:ca:fb:13:79:e9:16:b9:ee:f2:39:ab:
1b:4f:0b:4d:2e:74:bb:c1:d8:8f:c1:8c:2e:85:64:e5:94:38:
53:b1:6e:22:97:8d:8b:f7:85:19:a8:ef:34:4a:d9:44:eb:9d:
d1:89:9f:ee:30:b5:ae:b3:d8:14:32:ea:99:4a:3c:67:a2:b7:
50:27:2a:ee:13:3c:e5:c3:05:53:c6:9d:c6:05:d7:c9:fe:97:
14:69:34:4b:3b:49:41:54:61:84:15:14:f3:96:0e:70:f0:7a:
6d:d2:94:48:00:d2:55:a4:d1:c5:7f:e7:e8:0b:ce:10:bd:47:
6d:13:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:16:45 2026 by rpki-client