Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
File: 5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft (raw, json)
Hash identifier: LUIGJ/omp+sBGrYnal/9xvDU7Rt25Gq5omPJNg8BGhc=
Subject key identifier: FF:A7:26:EC:D6:26:0C:78:C3:EC:00:DC:DB:61:CC:86:0C:30:EF:DE
Authority key identifier: E7:EA:78:46:59:61:E5:41:B1:04:DA:A6:F8:B3:63:FC:A4:BE:B3:75
Certificate issuer: /CN=e7ea78465961e541b104daa6f8b363fca4beb375
Certificate serial: 01A08A55789C9C302C553006594DEDAB587E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
Manifest number: 4C
Signing time: Thu 10 Sep 2026 08:00:52 +0000
Manifest this update: Thu 10 Sep 2026 08:00:52 +0000
Manifest next update: Fri 11 Sep 2026 08:00:52 +0000
Files and hashes: 1: 5-p4Rllh5UGxBNqm-LNj_KS-s3U.crl (hash: wwWxjryWc0LtA+Ts0/R2rP7DHpiCPXwdcSdF/BtdlE4=)
2: vgCCNImryhTqz0TegMLmz10ZQhE.roa (hash: FTRS/rwWFmd0qjPL0DmrUpFzHYlvmE3dBKqHvOtrB5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:78:9c:9c:30:2c:55:30:06:59:4d:ed:ab:58:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ea78465961e541b104daa6f8b363fca4beb375
Validity
Not Before: Sep 10 08:00:52 2026 GMT
Not After : Sep 11 08:00:52 2026 GMT
Subject: CN=ffa726ecd6260c78c3ec00dcdb61cc860c30efde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:d8:26:95:9e:0a:0b:d0:50:96:67:bd:f1:
00:71:24:19:2e:c4:50:69:db:21:7d:28:4e:46:f9:
0c:96:2e:0e:79:2e:eb:a8:45:69:79:cd:4b:9e:48:
c1:5e:e5:a8:b5:31:61:62:43:60:7e:56:73:83:37:
15:f4:0f:5b:b6:f6:ce:22:5b:34:65:f5:ee:b7:ba:
42:f2:da:63:65:7e:30:4d:6c:89:ca:bb:6d:67:e9:
15:6f:8b:f2:ba:c4:0f:bd:2b:74:0e:77:c4:aa:c7:
e4:73:38:6c:4f:6f:32:4f:1f:3e:0d:19:bd:fb:0e:
a6:32:82:81:a9:92:f9:2c:8c:09:ba:ab:7f:36:cc:
49:b4:9a:14:6c:ef:b9:18:6b:10:6e:e5:46:28:70:
31:1b:6e:62:63:bb:b8:0d:ae:18:ee:4e:b2:f3:29:
bd:92:12:82:c3:fd:73:8c:7a:7f:d4:fa:1c:82:d7:
d8:1c:c9:d0:f1:53:64:3c:92:f8:0d:7c:6b:c5:bb:
90:a9:80:7a:65:87:85:db:f1:46:a0:84:67:a9:06:
db:b5:c2:42:0d:6c:d4:25:32:c4:6b:9c:22:c8:84:
b2:a2:06:eb:18:b0:9d:21:9d:c5:ad:6a:b3:d6:79:
ce:5a:cb:5e:de:0f:38:66:c9:6a:28:94:67:fe:82:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:26:EC:D6:26:0C:78:C3:EC:00:DC:DB:61:CC:86:0C:30:EF:DE
X509v3 Authority Key Identifier:
keyid:E7:EA:78:46:59:61:E5:41:B1:04:DA:A6:F8:B3:63:FC:A4:BE:B3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4b:2c:5e:4d:92:5d:7b:ad:66:68:c0:11:0d:34:15:05:40:
a2:e3:79:e4:cf:bd:b6:76:6d:fc:cf:37:c1:ef:d5:a2:fa:8c:
39:5b:d3:16:d4:26:35:76:38:df:82:26:a9:53:6d:f5:d7:f8:
cd:70:d2:49:ca:93:d6:65:56:5b:90:bc:ea:bd:5b:11:27:e0:
3f:74:37:2f:ed:82:d5:42:7c:74:81:cb:4c:04:be:a2:3e:74:
69:d1:d9:a9:67:41:67:24:99:55:9b:02:e1:63:fc:62:18:4e:
61:0e:14:88:1a:79:69:37:7d:24:d7:bc:82:60:0b:d0:18:56:
5c:e2:d6:03:e7:fb:06:28:70:67:3f:4b:4e:d0:08:91:45:bf:
ed:95:e2:7a:96:80:95:4b:3e:16:7c:f9:5a:14:89:89:f9:ef:
d9:3b:02:12:2a:39:a1:2c:74:ec:22:74:6f:67:c9:71:ff:8c:
0a:60:d5:85:86:6b:dd:85:e7:82:45:45:df:58:99:fb:07:85:
40:9b:ae:3b:f2:4e:02:ce:1a:9d:2a:49:9d:76:cf:81:6c:0b:
e5:0a:78:c5:27:a0:cf:06:73:e4:b0:0b:28:5a:0e:a1:de:90:
a5:20:59:6a:23:ba:de:8d:ee:87:22:4a:9c:f9:fc:c8:b3:0d:
8e:22:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:44:33 2026 by rpki-client