Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: FaMU6TTbMNPXuayN3wH9xvV+2UW+6ZrTTS9tLsgvBZs=
Subject key identifier: 7A:BC:E8:CD:79:D4:8C:C7:FD:AB:06:90:C0:F9:ED:48:F0:A4:74:89
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 019E303B2F6C3B903147BA7DC35336F8F75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 146C
Signing time: Sat 16 May 2026 10:00:45 +0000
Manifest this update: Sat 16 May 2026 10:00:45 +0000
Manifest next update: Sun 17 May 2026 10:00:45 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: nr/5KsXQH3eO9Ltz2VzihrTxJ2apzxGeFjc8J/NQa88=)
2: bqf5qipql10pKq2IW1cVBIAiNT0.roa (hash: +2BT4dwhMNJVzlVWSCe67UeT7mC6TzS9Mo4QbFrZxHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:2f:6c:3b:90:31:47:ba:7d:c3:53:36:f8:f7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: May 16 10:00:45 2026 GMT
Not After : May 17 10:00:45 2026 GMT
Subject: CN=7abce8cd79d48cc7fdab0690c0f9ed48f0a47489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:13:33:88:a7:76:6b:3e:0c:5e:5a:2c:ba:
aa:af:19:58:9d:e9:3a:60:5b:12:e5:5d:35:2d:41:
7b:94:9b:4c:8f:cf:05:15:2b:f8:08:8a:13:29:77:
04:ba:11:6b:30:64:2d:a1:95:00:14:13:bd:aa:09:
c1:e5:13:fc:92:60:9c:ed:8c:c7:40:4f:8f:bf:51:
66:1c:ff:cf:55:14:de:ed:c6:e6:fb:85:06:58:72:
16:ca:97:a9:58:ab:bb:99:5e:2d:9f:65:7f:4c:4d:
e0:03:60:32:a7:f0:55:3b:ce:57:d5:8c:3d:75:82:
c5:dd:15:54:0e:e5:58:33:04:1a:fe:bd:ea:7d:36:
84:ad:5c:81:39:9d:21:5a:92:46:63:ea:01:f4:3e:
1d:e1:df:b4:56:0b:ca:8a:5a:91:09:54:1f:37:7d:
58:46:bd:2c:62:27:d8:43:b3:c3:17:20:3f:93:6a:
2e:6d:24:fb:ec:1d:12:56:ae:bc:12:e9:f4:a7:99:
d6:3b:ca:22:ff:4f:84:8d:32:1d:81:a2:aa:c5:3f:
6a:98:45:31:27:79:7f:66:5e:46:5e:ce:13:a4:30:
cd:3d:70:99:94:cf:8f:1c:c9:a0:1d:02:50:0e:a7:
a2:ba:c4:e3:64:b9:58:73:2b:29:d6:5b:50:03:f2:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BC:E8:CD:79:D4:8C:C7:FD:AB:06:90:C0:F9:ED:48:F0:A4:74:89
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:62:f3:23:c4:e1:07:6c:62:63:3e:0b:96:69:51:a6:32:9f:
2e:8d:a8:6d:f4:99:20:c5:97:91:02:74:06:82:30:a0:67:aa:
21:04:db:d3:d2:f2:2b:8e:c1:62:3e:fd:63:02:ac:55:fe:c5:
82:44:9c:55:5d:1c:54:84:b5:60:69:09:34:6a:16:fe:a7:a0:
36:da:b0:b1:00:7d:57:57:00:14:f1:75:b8:dd:c2:21:f4:fc:
d6:ca:93:29:da:58:df:89:37:57:15:6b:c5:1f:9d:02:d1:4a:
33:d9:17:3d:b7:1b:cc:07:a6:de:74:5a:5e:44:e8:b1:43:ce:
8c:e6:94:8c:f7:11:7c:85:94:14:06:99:0a:cd:68:67:d2:60:
29:c5:af:b7:91:ed:4b:28:46:3d:09:65:2d:49:78:b4:37:35:
cb:87:0d:76:e6:cb:8d:42:39:46:fb:61:b8:41:18:d1:2b:d9:
9e:7d:48:23:a5:a9:7c:65:93:62:9c:dd:c7:f0:2c:02:d9:1a:
ab:63:de:99:c5:e1:32:65:3e:3c:0a:ea:f4:d0:cf:b0:36:73:
38:fb:c5:a3:a6:c6:76:f5:51:ad:df:07:d0:08:b7:09:59:ab:
34:96:f8:54:09:4e:8c:fa:27:ae:4f:ce:4c:66:92:c9:e4:fd:
7b:2d:39:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:12 2026 by rpki-client