Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
File: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft (raw, json)
Hash identifier: YOfRP43dBh3qvu1junzBbuYZl53G6w5NgS9kRMPtJrE=
Subject key identifier: E9:71:C2:C6:0F:6F:32:A7:60:9E:EA:42:D2:68:56:61:2B:12:EA:32
Authority key identifier: E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
Certificate issuer: /CN=e5100a621d1fa344107325d3519467eca1145eb9
Certificate serial: 01A0412A51D83119C49197548F4BBC8F33E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:27 +0000
Manifest this update: Thu 27 Aug 2026 03:01:27 +0000
Manifest next update: Fri 28 Aug 2026 03:01:27 +0000
Files and hashes: 1: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl (hash: wabmQby8mlujxnUgj1yZ2oPumUJjRgV/VA8O/koOwZ0=)
2: N2hdkNTYOGqgW-2z7I2L2W726cg.roa (hash: +V63+wGYl8NMUG+4AXEpAFTMSrZt1PqBAvD4BIyWtoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:51:d8:31:19:c4:91:97:54:8f:4b:bc:8f:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5100a621d1fa344107325d3519467eca1145eb9
Validity
Not Before: Aug 27 03:01:27 2026 GMT
Not After : Aug 28 03:01:27 2026 GMT
Subject: CN=e971c2c60f6f32a7609eea42d26856612b12ea32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:b7:42:db:61:df:ba:fe:2c:ff:44:77:89:
c6:76:37:fd:2d:f8:41:8a:89:94:99:f7:0e:22:df:
c3:12:be:f9:b9:5c:89:a6:f6:63:d6:e5:8b:da:26:
8d:66:c9:d0:1d:82:16:d0:82:6c:5d:24:cc:cf:93:
42:15:01:2e:60:38:55:b6:23:08:2c:b6:43:b4:ae:
c5:3e:0a:cb:b9:72:a6:b6:4a:b8:45:2e:e5:8e:e6:
99:82:37:3d:68:dd:03:bc:90:93:3a:60:f4:80:34:
30:07:62:45:2e:d4:d0:92:04:c3:58:f7:74:a0:86:
42:2f:81:10:15:a8:1e:77:99:d7:21:0d:a6:a4:0c:
07:67:34:73:8f:4e:56:90:52:79:88:4d:a2:aa:3f:
bc:6d:9d:63:82:4a:7b:db:0c:f3:01:a3:44:a6:4f:
56:5b:00:96:cd:12:5b:88:b7:7b:9a:7c:2a:64:f2:
34:7f:b7:8d:28:9d:08:42:2c:27:80:fe:ac:f5:36:
97:9b:3f:bd:3e:6f:ef:62:cf:e3:36:8c:e4:e4:15:
f7:6b:7d:04:dd:33:73:db:a5:ac:1a:f8:2b:ed:c6:
8b:c2:07:9d:a0:b5:ab:7a:5a:1b:2d:01:7b:ef:52:
fc:5d:73:7a:aa:ec:e2:9c:90:06:61:a3:91:f4:44:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:C2:C6:0F:6F:32:A7:60:9E:EA:42:D2:68:56:61:2B:12:EA:32
X509v3 Authority Key Identifier:
keyid:E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8d:84:4b:f1:88:ed:50:e1:35:ef:16:fc:37:88:69:43:6c:
49:96:43:b4:6a:5d:2c:55:cd:5a:c7:21:0a:9f:ba:03:46:b0:
76:34:0b:ff:ea:0c:41:33:83:99:d0:04:2f:e5:a5:89:6a:ca:
4c:3a:1e:19:4f:1b:f3:72:ef:4f:96:05:ce:6f:67:5a:a9:7a:
89:86:be:cd:91:7d:66:48:06:ec:dd:a3:93:dd:fc:a2:b3:48:
04:8a:dc:19:a4:ca:8f:c9:1d:ee:d3:01:42:47:52:cb:38:17:
b8:85:56:12:42:aa:8c:d7:a9:b4:ca:1d:c4:73:47:7c:7f:21:
2f:44:22:8a:4f:3b:02:3e:a8:ec:98:66:db:95:95:57:2b:4f:
07:d9:69:2d:cc:a9:3b:93:cc:e8:3b:57:98:45:23:f0:e2:7e:
fd:63:76:24:81:86:5d:73:ee:37:0c:a2:83:f2:54:3f:81:a5:
d4:90:73:b4:a8:39:8e:54:8f:c3:24:76:5d:2e:7a:cb:a2:dc:
de:4c:cf:5b:62:34:4b:0a:ba:0b:10:26:1d:2c:63:09:a5:cd:
c6:ea:96:9b:77:6f:21:65:64:19:a7:3f:77:46:05:96:9d:48:
ef:5b:0a:80:b9:4c:6c:9f:64:82:76:71:0c:22:4b:55:4d:43:
4e:25:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:36 2026 by rpki-client