Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
File: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft (raw, json)
Hash identifier: YY/1aAwkRjtYpwCkJ7bdRiVi8kp3Gf/2PhMkmedZd+0=
Subject key identifier: 48:19:3D:E0:B2:21:00:DC:F3:EF:57:3C:49:6F:EA:54:4E:14:8C:80
Authority key identifier: E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
Certificate issuer: /CN=e5100a621d1fa344107325d3519467eca1145eb9
Certificate serial: 01A19130A4FD820242135FDD2D76190FF7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
Manifest number: 0149
Signing time: Sat 31 Oct 2026 09:00:46 +0000
Manifest this update: Sat 31 Oct 2026 09:00:46 +0000
Manifest next update: Sun 01 Nov 2026 09:00:46 +0000
Files and hashes: 1: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl (hash: ZqEXVEvvFXTDdqTCr2w4xHB6OybVmsXj+XYayFx99mc=)
2: N2hdkNTYOGqgW-2z7I2L2W726cg.roa (hash: +V63+wGYl8NMUG+4AXEpAFTMSrZt1PqBAvD4BIyWtoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:30:a4:fd:82:02:42:13:5f:dd:2d:76:19:0f:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5100a621d1fa344107325d3519467eca1145eb9
Validity
Not Before: Oct 31 09:00:46 2026 GMT
Not After : Nov 1 09:00:46 2026 GMT
Subject: CN=48193de0b22100dcf3ef573c496fea544e148c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:72:8b:52:48:2d:69:46:3a:17:19:26:23:
48:44:75:86:67:7d:26:0f:c6:0e:0f:d7:51:9c:f3:
f3:c8:25:c3:e3:71:9e:d5:be:27:95:49:66:da:a6:
77:30:d6:2e:d8:c9:19:f1:c4:11:d7:f3:d3:17:e8:
a2:9e:22:43:ab:ae:8a:9d:af:21:89:78:1d:3e:4d:
a5:89:c0:81:88:01:fe:8e:85:73:cc:4b:65:73:54:
9f:3a:f7:a2:10:91:43:fd:2e:58:66:3c:ac:52:67:
e3:0b:47:a0:75:5d:ad:f0:6d:fe:5f:3e:01:1f:96:
07:11:e6:21:3d:3f:e9:ea:6b:fd:9d:0f:61:44:06:
14:ac:5d:59:80:97:82:ec:3a:77:93:1b:17:7e:32:
17:6c:f4:41:e0:75:18:81:af:3b:45:ee:51:a1:c0:
6e:e4:b4:bb:4f:5b:6f:3e:69:28:10:69:58:96:33:
a2:bc:d1:74:4a:52:2a:af:48:77:cd:02:81:fa:fe:
21:5f:09:7a:35:46:86:e4:cd:94:d1:4c:69:58:b5:
08:65:29:98:72:f6:1b:f7:25:4c:68:7c:72:91:3d:
3e:46:e0:3f:e3:1e:d9:46:bf:2a:12:68:c3:f4:df:
84:f7:4d:f5:e4:d4:9c:c2:e1:a4:72:fd:6a:d5:28:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:19:3D:E0:B2:21:00:DC:F3:EF:57:3C:49:6F:EA:54:4E:14:8C:80
X509v3 Authority Key Identifier:
keyid:E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:08:de:4b:36:16:0b:70:9d:e5:87:87:38:20:78:d4:93:d5:
bf:5a:63:a6:8a:10:6c:cb:f1:f5:3d:0d:86:ae:da:97:c6:8d:
e1:6d:27:ae:d8:f4:2c:43:1e:d8:b0:39:d6:38:d0:68:2d:00:
a5:cb:2f:04:15:81:5f:e8:59:c1:e3:a3:6c:aa:62:4f:cd:4d:
5c:41:85:33:ec:46:a8:6d:71:bd:f0:e4:49:1d:a3:c2:8b:68:
ab:65:34:09:fd:b5:cd:4e:7a:08:b3:bc:76:2f:ac:2f:07:21:
48:3e:92:bf:b1:3e:5d:37:df:97:01:a5:7f:5c:c3:63:0b:bd:
c7:c1:f1:17:75:4e:ce:ca:e0:8f:13:d7:89:9c:6f:11:25:d3:
2d:c2:30:23:1e:57:f5:fd:fb:b9:57:1d:68:01:2b:a5:4b:01:
d3:70:99:10:c6:d2:85:55:5d:a4:9d:be:71:68:0e:e4:94:3f:
1c:1e:a2:8e:ec:02:0c:52:16:7a:eb:95:78:f1:c2:0d:70:0d:
21:e9:92:19:f0:0b:8d:12:08:6e:09:1f:72:f6:c5:12:5b:ee:
5d:0c:0e:c5:3d:f1:27:1e:66:45:0a:99:a7:7e:44:4f:ce:c6:
5d:7d:56:df:ba:b1:ec:3c:87:2d:57:02:5c:79:54:7c:b5:86:
37:f9:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:33:28 2026 by rpki-client