Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier: EgOuQHCxwzMWoDXouYNUafQ3SgX28zLh1UlBJ169Xv0=
Subject key identifier: EB:B1:58:F7:FA:EF:6F:C9:F5:9E:84:91:ED:B4:A1:76:ED:4C:9D:E6
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial: 01A13E260191D50434D4B2F8159C11AB7963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number: 18F3
Signing time: Thu 15 Oct 2026 06:00:40 +0000
Manifest this update: Thu 15 Oct 2026 06:00:40 +0000
Manifest next update: Fri 16 Oct 2026 06:00:40 +0000
Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: ps6u1VTkNADtK9/Nk7qB08I+AUhGMmUcAZBjvEAbHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:01:91:d5:04:34:d4:b2:f8:15:9c:11:ab:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Validity
Not Before: Oct 15 06:00:40 2026 GMT
Not After : Oct 16 06:00:40 2026 GMT
Subject: CN=ebb158f7faef6fc9f59e8491edb4a176ed4c9de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:32:fa:ed:65:7a:45:e4:c2:aa:c5:f6:a5:
ac:a9:ef:f0:8a:c6:e1:c5:4c:ac:39:31:b6:f9:23:
fe:66:4a:98:90:03:1f:9a:a5:0d:c6:10:a5:9c:6a:
8f:7c:e6:01:56:17:1d:1a:59:0e:40:38:e5:1c:9f:
77:d2:3f:09:39:01:dc:c0:7a:80:07:62:01:bc:2e:
03:17:17:10:6e:30:76:11:22:82:af:29:c8:c6:08:
cb:72:09:93:82:02:ee:a6:22:67:83:95:61:95:99:
01:d9:74:f2:22:82:25:1b:e8:61:36:50:e6:9b:97:
2f:2b:07:ee:70:ab:20:80:d1:5d:95:9e:c2:94:1c:
d2:a4:b0:1a:66:90:e6:27:3c:c4:79:ff:9e:a8:76:
4a:a0:a6:99:9b:bb:55:b0:40:3d:b9:dd:2c:52:02:
97:5f:20:55:1c:40:7c:0c:e7:5f:72:34:65:74:f1:
90:d8:fb:2d:e5:c3:4b:59:70:b4:a7:4f:fe:1c:2f:
3e:8a:02:50:5e:03:be:c2:da:92:47:2a:47:46:67:
82:1a:c9:3f:3a:b0:68:84:a9:71:b9:cb:d9:de:47:
68:b8:72:c9:5d:4c:15:9c:f3:7a:a9:13:07:ea:89:
69:5f:e3:1d:e2:1e:f7:f7:f9:3d:0b:c2:ad:9f:a7:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:58:F7:FA:EF:6F:C9:F5:9E:84:91:ED:B4:A1:76:ED:4C:9D:E6
X509v3 Authority Key Identifier:
keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:80:0c:48:e2:22:01:2c:6b:74:66:6c:00:6d:c2:b5:53:12:
b0:c5:c0:b7:f0:08:b1:fc:62:04:69:bc:d0:3c:e0:95:54:5a:
e7:38:d2:80:39:aa:88:d3:8c:b4:36:ce:ef:df:f7:ec:ad:15:
06:ca:87:2e:ba:da:73:f9:fe:49:7f:ec:b3:02:56:1a:41:ae:
84:d9:4f:64:e8:f5:33:99:90:eb:44:2b:fa:62:e8:77:fb:09:
aa:db:ed:cf:1f:11:05:c1:da:e7:cb:b2:51:6d:6a:00:86:07:
16:41:64:76:0a:96:e2:4b:06:66:7c:61:fb:6b:e8:49:33:bd:
a5:e4:94:d0:10:00:3d:83:ac:7c:0d:93:83:c2:b6:d4:35:c6:
cc:36:9e:98:4a:92:85:d8:5b:92:33:6f:67:0c:06:a4:df:ac:
f6:93:83:94:ad:16:1b:b3:d0:8e:ac:3d:68:b0:94:93:99:9b:
21:12:a8:bc:4b:e8:5b:a4:8b:66:38:34:9f:25:7d:49:60:ad:
e1:ec:ad:05:c2:4a:7d:61:60:1c:cf:a1:1b:7b:a4:bc:65:8a:
61:90:6a:c7:62:48:5a:fa:89:4c:82:3e:c4:96:88:7d:32:50:
aa:56:ed:db:88:f4:53:67:0c:20:29:9e:ec:9a:b8:c5:d0:33:
ff:68:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:42 2026 by rpki-client