Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: 8Nh/WFpml/vRM22reScCwUI5Y2xwVFDGH0qBWDxQgyk=
Subject key identifier: 3B:4A:47:07:04:32:1D:54:8C:0D:81:5E:6D:FB:E6:F8:18:CC:96:98
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 01A1065C766C5AD8F8AD29A923C1C4013DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 1A98
Signing time: Sun 04 Oct 2026 10:01:25 +0000
Manifest this update: Sun 04 Oct 2026 10:01:25 +0000
Manifest next update: Mon 05 Oct 2026 10:01:25 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: TamRhBlx5g1zOqbqkkWcbnbjgQ0ggWFeKDpoCecy4cY=)
2: KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa (hash: QvldGhE04OV5++dEJq/jSp6fTqREgs1t+eVzU3cgY4Y=)
3: fYprx9tfSrpJ7R3f1TAiM1wmUEU.roa (hash: GnFvgFHqjbv0TdFv86yIpomdwFZ2W7tQkR4j2YTsnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:76:6c:5a:d8:f8:ad:29:a9:23:c1:c4:01:3d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Oct 4 10:01:25 2026 GMT
Not After : Oct 5 10:01:25 2026 GMT
Subject: CN=3b4a470704321d548c0d815e6dfbe6f818cc9698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:8d:fb:00:11:05:65:17:31:5e:1e:65:4c:
bf:bb:b8:dc:f2:50:06:d7:45:a5:89:17:24:b1:26:
fc:58:01:e0:3c:a4:2d:6b:b5:66:19:dd:05:6e:64:
48:f0:59:e5:4e:1c:a4:3e:f5:c4:e0:63:90:36:4d:
63:24:44:33:8c:d4:59:1a:09:33:2e:e3:07:b3:06:
60:da:76:c5:01:0c:74:52:06:a3:bc:36:56:cc:35:
1d:3e:81:9b:4d:32:ba:3a:05:84:dc:c6:0d:50:55:
77:17:9e:23:92:fe:7d:8b:f0:b8:d9:62:e0:d6:ba:
ba:17:61:59:f7:6b:47:29:3b:4e:8c:8e:90:64:b4:
21:9f:f0:30:8f:74:16:29:8d:6f:84:44:40:6f:c0:
39:9d:a7:5f:c5:f9:34:04:d0:4b:0e:d6:f2:d3:a7:
ae:ef:a8:92:b8:50:81:93:37:8b:58:79:6d:d0:1b:
3f:70:89:c6:9a:a1:2e:6c:74:3c:30:30:51:27:d5:
ed:25:5b:82:b3:5a:5f:88:e2:01:0f:1d:b1:ad:b8:
89:6a:f5:c6:fe:53:c6:6a:a0:e1:a8:16:46:0b:83:
ba:6e:de:c8:a5:30:35:58:c3:7a:4e:6f:57:49:4c:
32:6d:65:cb:ba:56:3c:ca:78:28:03:0f:f8:4d:c4:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4A:47:07:04:32:1D:54:8C:0D:81:5E:6D:FB:E6:F8:18:CC:96:98
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:76:92:9d:c1:64:74:5d:16:db:cc:fa:f4:54:8e:e5:55:d9:
af:8e:64:54:34:c4:4e:dc:42:cf:35:4a:f4:39:9b:8f:a6:3a:
2b:cd:e4:4c:36:36:c5:c4:d0:bd:53:3d:7a:a4:1b:40:a9:c4:
d4:f3:51:c1:71:23:df:80:5e:0a:5a:b7:bf:7e:ec:73:9e:21:
87:d2:4a:14:c6:f5:70:08:31:cc:0c:cd:db:96:ba:c9:69:44:
68:8d:fd:2b:c1:eb:4b:ee:9d:d8:6e:43:05:b1:74:bf:fc:ec:
b2:a8:55:2f:9e:a9:32:a6:2c:03:87:49:40:78:09:f2:e7:a6:
a1:f6:28:70:fa:a0:48:b4:04:8c:20:81:1c:7d:6d:13:5a:73:
98:c4:88:12:86:56:00:cc:73:f0:9a:1c:a1:98:c1:82:8a:b6:
17:e4:07:0f:c4:17:7e:cc:1e:26:8a:d5:5a:dd:39:e0:73:01:
77:c7:68:84:7f:72:09:68:d7:0d:58:4a:33:94:cc:c7:e3:7c:
60:d5:97:d2:ba:67:b7:a8:c6:a0:9f:44:fb:8d:13:55:9d:66:
82:bb:7e:fa:96:90:be:8b:f3:06:9a:f6:a3:c0:55:58:f4:e0:
6f:14:71:3f:35:40:b6:21:3d:6c:38:e8:a2:bb:eb:d3:38:e4:
16:ca:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:05:56 2026 by rpki-client