Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: dXcvw2cjBENWhj272+LXy1ZdZ0IRxYRWhYgB4k5JAew=
Subject key identifier: 0B:77:7E:5F:0B:7B:86:BC:43:EC:45:3E:6F:21:95:D3:98:81:BE:82
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 01A03D4E2658EAE8E090B3142EF464997143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 05F2
Signing time: Wed 26 Aug 2026 09:02:06 +0000
Manifest this update: Wed 26 Aug 2026 09:02:06 +0000
Manifest next update: Thu 27 Aug 2026 09:02:06 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: lmwfs/hjtPd2qfE4+0PAFRWs3Hwg59pAktD9gVG7uJ0=)
2: P-9Kjz1UfHMjTGFeahDrOs1ver0.asa (hash: W3pSYzCFr5OFf1TZYGacRWXPYdcekLj5JmITjzZJXho=)
3: vldYV3LWOW9tys3pjIJKZGnUQ1c.roa (hash: iuNVM1moJTBXO3h20HhJjEBtsYGf3s4iabPV9C2WSgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4e:26:58:ea:e8:e0:90:b3:14:2e:f4:64:99:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Aug 26 09:02:06 2026 GMT
Not After : Aug 27 09:02:06 2026 GMT
Subject: CN=0b777e5f0b7b86bc43ec453e6f2195d39881be82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:fd:d0:fb:3c:8f:bb:03:05:27:41:ab:df:
e3:ba:55:30:70:eb:0a:74:34:cf:6b:5e:59:5d:12:
29:39:1f:6e:24:be:f3:48:06:3e:17:ee:01:53:83:
3d:2e:91:7a:06:c3:a9:9d:ab:9e:e2:45:99:fa:5c:
4b:62:e5:7c:e6:b5:ad:37:ac:da:48:5b:fb:bf:74:
98:6c:16:b2:06:85:55:89:4c:48:2f:9a:90:1a:32:
a1:7d:73:cd:38:07:80:ad:fe:00:ef:0d:59:72:b0:
d2:68:86:db:c5:93:56:9c:bc:b8:e1:6b:f5:6c:96:
d2:64:b8:eb:14:95:3c:94:24:e4:38:9a:f4:4a:b4:
9e:6b:8c:9e:79:89:f6:47:a3:e8:9f:69:d4:8d:9d:
3b:f3:4c:6f:8d:44:ef:e4:f2:a3:64:42:85:76:22:
63:a2:7f:4f:67:b7:35:77:9b:b3:4f:48:37:0d:8d:
4b:75:1c:ee:02:68:aa:b5:43:02:6c:89:b2:cf:70:
d8:9a:90:0a:92:23:bf:7f:0f:57:62:dc:3b:a5:d3:
73:02:77:83:7b:3b:0a:af:37:76:ac:47:0e:25:00:
9e:bb:26:31:37:ae:9c:b1:e8:60:21:05:c8:b2:42:
c3:98:7d:5b:89:9a:b7:55:58:97:10:c4:e8:ac:ae:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:7E:5F:0B:7B:86:BC:43:EC:45:3E:6F:21:95:D3:98:81:BE:82
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9d:3a:02:91:21:12:9c:8f:4b:95:89:39:ca:f7:a7:2a:b0:
b2:f1:aa:3a:79:43:0b:bf:fb:66:38:da:14:d6:f8:e6:08:98:
a5:8e:6a:65:f3:ee:c5:5b:14:7a:e0:27:cd:df:3c:38:3a:62:
db:ed:c1:e3:ab:e8:c1:97:c4:5f:48:14:fd:dc:0b:fd:67:2f:
48:9e:13:89:27:2d:f5:79:a3:d1:6e:27:0b:ed:68:d7:79:ef:
ef:57:f3:02:74:e4:dc:d0:26:3f:7e:f3:b1:71:2d:3d:e0:ca:
20:2f:da:33:0c:af:f0:b2:6c:49:26:78:2d:bb:0d:6e:a8:b9:
60:7a:2d:67:90:7c:5d:68:bb:5b:57:40:15:0c:9b:7b:4e:48:
e5:5c:1a:22:dc:a2:92:28:85:94:9b:3d:ea:11:52:ba:d6:a8:
08:19:67:21:7b:42:cc:e8:8e:2a:04:12:12:6d:d0:21:62:2c:
81:6c:c5:5f:b4:c8:10:c2:e9:1f:82:7c:8b:38:6d:53:9b:f3:
b1:3b:b8:2c:81:0a:a8:c2:cb:33:b5:26:25:79:63:00:34:ba:
c4:69:20:0e:73:5c:07:39:41:23:fc:c8:b5:44:5c:2c:1f:49:
b3:13:1e:8d:0f:3e:e9:ab:18:2a:17:6b:8e:84:5c:59:17:ee:
00:11:a4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:20:38 2026 by rpki-client