Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier: XRU3IyPrUj1zZJMqMYdzVk+aWvX2n34c8YWhJi4+vu8=
Subject key identifier: B6:C0:5D:06:95:F2:D3:22:FB:07:61:42:83:FD:D2:80:90:0A:7E:52
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial: 01A144CDB999A6C333614CCD677568E8452D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number: 1AAA
Signing time: Fri 16 Oct 2026 13:01:35 +0000
Manifest this update: Fri 16 Oct 2026 13:01:35 +0000
Manifest next update: Sat 17 Oct 2026 13:01:35 +0000
Files and hashes: 1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: Z7ZKel48UNBHztFj5m0Qh6yS2463vvZiNr7R7rGBk5Q=)
2: IcEfPnhAjewSEEO3LOP7u-TcVC4.roa (hash: BRMvl9t5zukkJheawmCAi6lNUM26ZBTh/KTKt1g+rZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:cd:b9:99:a6:c3:33:61:4c:cd:67:75:68:e8:45:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Validity
Not Before: Oct 16 13:01:35 2026 GMT
Not After : Oct 17 13:01:35 2026 GMT
Subject: CN=b6c05d0695f2d322fb07614283fdd280900a7e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:fc:b7:22:1c:9c:93:2e:39:f7:4f:32:a4:
cb:8e:e8:80:71:0f:fc:cf:d8:68:a4:10:2a:8c:99:
27:37:9b:ae:9d:c0:e6:84:0f:0c:42:2a:26:ef:41:
d0:6a:75:e5:d3:72:0d:55:71:31:a0:fb:95:8e:9a:
34:17:bd:28:bf:2e:61:8e:4b:d3:0b:d6:86:f9:53:
07:04:65:58:b2:b8:bb:81:f7:45:ff:a9:7b:c7:bc:
a8:e5:e8:d7:eb:51:50:07:65:e2:47:ec:cc:c3:c4:
43:00:73:17:ba:f3:87:d3:13:35:61:e8:37:8e:f0:
48:72:76:49:08:39:7f:da:6e:a2:6e:4c:80:34:02:
b0:ef:b6:c2:f9:06:b2:33:57:85:27:a1:c9:8a:01:
e4:12:c7:eb:6c:e5:cb:6c:dc:fc:8f:e9:61:79:12:
66:b7:93:c7:cf:a3:c3:46:c1:b1:fc:4f:32:a8:94:
0d:f3:e6:cf:49:2d:b0:cf:d6:8e:08:17:11:6f:03:
d7:e9:2d:e0:21:85:fa:b5:13:1d:98:58:35:49:4c:
86:02:fa:3d:f0:17:57:b5:c6:d4:a4:87:80:ab:aa:
59:8c:27:a4:25:dd:1c:c0:67:ea:e6:37:84:7a:8a:
4e:f4:e1:4a:87:73:e0:d1:fb:b8:9a:00:41:b0:60:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:5D:06:95:F2:D3:22:FB:07:61:42:83:FD:D2:80:90:0A:7E:52
X509v3 Authority Key Identifier:
keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fd:94:d5:28:c4:64:18:c4:a1:41:0c:8c:7d:c8:0a:6c:cf:
32:12:64:1c:e2:65:14:b2:8f:9b:bb:b6:8d:7a:d0:31:b9:3e:
74:c3:28:59:40:8e:c8:48:0a:44:8a:0e:88:48:e2:bb:a8:f7:
ba:5b:98:0e:41:72:80:32:5e:9a:ca:f0:e5:d0:dd:f2:f1:f5:
44:8d:6c:2b:b8:80:6e:db:a4:cf:b4:7f:78:d8:8a:26:bc:63:
e1:44:f2:5e:2c:b8:a6:55:5a:b5:f9:84:81:3c:d9:46:21:56:
79:a0:f1:01:a5:ff:d2:0d:71:3b:53:e5:f3:b5:f1:a2:e2:9a:
41:9a:3f:11:d6:ae:ab:99:98:3e:ca:70:a3:1d:0f:23:ee:01:
83:76:23:d4:60:85:44:32:58:a3:6b:2c:4b:b7:27:e6:01:b4:
a4:34:13:d1:db:83:ac:e2:8d:82:e5:a8:ea:23:97:cb:75:a3:
8f:51:37:fc:65:04:f8:96:cb:2c:ec:71:8b:44:d2:07:77:79:
d6:1f:22:07:e2:da:28:74:ef:4e:57:1a:bc:2c:32:aa:f2:ef:
c7:3e:19:b6:0c:eb:01:c6:62:f3:73:b0:f1:87:a0:d5:7a:cc:
6a:b4:17:c8:69:71:25:fd:ec:59:53:db:f4:65:5b:fd:f8:4c:
b2:b6:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:28:08 2026 by rpki-client