Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
File: 5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft (raw, json)
Hash identifier: GrF8uBmmBz+ak15EkAo4QFDjLdCG+HPDtYpgxbhPgeU=
Subject key identifier: FA:28:29:40:A0:88:4C:64:A4:AC:D2:5A:D8:EB:4A:A4:6B:23:CA:2D
Authority key identifier: E7:EA:78:46:59:61:E5:41:B1:04:DA:A6:F8:B3:63:FC:A4:BE:B3:75
Certificate issuer: /CN=e7ea78465961e541b104daa6f8b363fca4beb375
Certificate serial: 01A17DAA4868585A0A572F0BD7DEFEF9B8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
Manifest number: CA
Signing time: Tue 27 Oct 2026 14:01:13 +0000
Manifest this update: Tue 27 Oct 2026 14:01:13 +0000
Manifest next update: Wed 28 Oct 2026 14:01:13 +0000
Files and hashes: 1: 5-p4Rllh5UGxBNqm-LNj_KS-s3U.crl (hash: Edr9O//mbstMNg7Eh8tJpnaUbdM1VcdG/81RWiWt1I8=)
2: vgCCNImryhTqz0TegMLmz10ZQhE.roa (hash: FTRS/rwWFmd0qjPL0DmrUpFzHYlvmE3dBKqHvOtrB5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:48:68:58:5a:0a:57:2f:0b:d7:de:fe:f9:b8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ea78465961e541b104daa6f8b363fca4beb375
Validity
Not Before: Oct 27 14:01:13 2026 GMT
Not After : Oct 28 14:01:13 2026 GMT
Subject: CN=fa282940a0884c64a4acd25ad8eb4aa46b23ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:63:40:68:e0:af:c1:ab:d3:3d:f5:c3:ec:
33:23:13:db:8a:ed:14:a7:b4:c6:9c:5f:12:57:9f:
91:63:dd:45:22:a9:ff:74:d7:6e:15:2c:4f:e6:7b:
dd:4c:8a:ee:d5:04:92:dc:83:45:5d:a3:3a:a2:dd:
6c:cf:f2:d2:23:4a:b5:27:cb:4c:7a:5a:ff:a5:a3:
26:c5:3f:2c:94:67:8c:9e:6c:e5:8e:3a:5d:6f:eb:
66:f7:c6:ed:0a:2b:a2:72:fa:48:22:fe:de:cd:86:
94:e8:1b:20:b1:72:18:4f:c3:8b:94:41:be:e6:cb:
cd:f9:04:47:34:67:d3:b7:a9:24:4f:58:ce:8e:8a:
23:9a:85:c1:15:99:95:80:d9:65:74:1b:24:18:6c:
e3:b5:94:7a:dd:c4:96:a2:db:69:de:29:7f:24:e1:
4b:e2:ee:59:89:1e:58:31:3a:1e:da:74:7a:7d:0b:
70:44:1f:3d:a9:e0:51:9b:72:1f:51:1d:d5:59:8c:
22:b6:6a:3c:bc:ff:c0:50:51:2e:0a:af:6c:fc:35:
cc:03:c6:49:4d:84:69:6c:c0:66:34:88:27:7c:8f:
3b:6a:bb:3a:b8:11:f1:95:4d:64:95:f5:51:c8:92:
75:8b:b3:9c:ea:75:00:a9:8c:49:b4:bd:f2:2c:2e:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:29:40:A0:88:4C:64:A4:AC:D2:5A:D8:EB:4A:A4:6B:23:CA:2D
X509v3 Authority Key Identifier:
keyid:E7:EA:78:46:59:61:E5:41:B1:04:DA:A6:F8:B3:63:FC:A4:BE:B3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9e:03:89:9f:ba:85:9f:08:b5:c0:49:7a:25:da:30:a3:65:
25:57:ab:f5:4e:91:89:cd:93:b7:b3:89:70:4d:d5:9f:6c:c5:
bb:80:91:e0:73:66:b6:a3:87:f7:3a:a3:bd:07:6a:12:09:80:
2b:d9:41:68:57:af:b2:e5:1f:35:f9:ff:3a:81:16:bf:e5:b5:
be:07:b1:3f:c1:59:f8:92:72:13:3e:77:8f:d0:6e:87:c8:5c:
1d:64:b9:6a:f0:bd:27:37:5a:e3:88:99:88:ef:6f:c2:c4:2d:
6d:f9:f5:57:66:56:2c:db:7a:4d:07:32:33:23:3c:0c:6b:08:
3e:a7:48:21:5b:b3:12:63:f2:e4:ae:29:a9:7b:8e:22:f2:91:
b4:dc:78:01:ec:dc:50:32:18:87:91:58:49:12:5c:90:75:c0:
0a:33:19:ef:fe:3a:51:ff:2e:c8:b2:74:ad:76:09:25:c2:c7:
43:54:d1:f9:4c:61:c0:52:bc:00:3a:b2:f9:5b:7c:66:3d:17:
cd:cc:45:f1:88:82:14:b4:71:a2:eb:8a:ff:f8:0c:93:a1:da:
5a:97:42:5b:fd:b6:68:af:b1:0d:b0:f0:33:c5:ba:dc:e9:f9:
24:27:23:d0:33:f0:7e:02:d4:eb:88:bc:42:9c:98:86:89:0c:
1c:0b:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:43:56 2026 by rpki-client