Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: 1ORRPUF+t7K+qGnUJe4Y4DjqjmKrV6Wr+eJ7DXjfT70=
Subject key identifier: 0E:74:DE:3E:5C:0B:DB:E4:A5:CD:B3:B3:7B:82:64:75:21:93:74:38
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 01A17DE0DBDEF80201FDA45DA63218B750A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 15:00:50 +0000
Manifest this update: Tue 27 Oct 2026 15:00:50 +0000
Manifest next update: Wed 28 Oct 2026 15:00:50 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: sYs6Gpc5hnhAgRV/QSbG7KqnEJZWPzy4xW9cnZcRjPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e0:db:de:f8:02:01:fd:a4:5d:a6:32:18:b7:50:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Oct 27 15:00:50 2026 GMT
Not After : Oct 28 15:00:50 2026 GMT
Subject: CN=0e74de3e5c0bdbe4a5cdb3b37b82647521937438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:db:67:80:a5:6a:94:e5:6e:42:fa:b5:26:
e1:bb:bd:ef:1c:9b:44:25:02:bc:69:dd:36:71:44:
a3:c1:cb:9b:7e:ed:fb:26:ab:ba:6b:55:ae:8a:a6:
eb:2f:3a:91:4b:60:ea:dd:7e:71:25:65:45:ac:84:
71:0e:7b:2a:fa:c6:35:af:ee:42:22:af:ff:71:50:
9b:02:f1:bd:2e:85:05:8a:78:6d:97:63:87:19:a7:
5a:5f:46:54:e8:d6:ef:93:c4:54:14:0c:c4:ff:1a:
59:fb:6e:49:00:a3:47:af:9a:83:20:a6:11:52:31:
ef:64:94:51:60:30:13:ce:60:49:23:b5:1f:3a:e6:
f6:bf:3e:00:88:23:bd:5a:de:df:82:59:ca:51:a9:
10:7e:0f:97:48:47:78:0f:03:5c:9a:8a:a8:c1:d8:
39:01:3f:01:36:b4:49:9e:0d:c3:9e:59:96:cb:6b:
04:da:27:ca:ae:74:07:ed:b3:d8:21:81:7f:f1:64:
5b:80:bd:97:10:b8:98:e7:45:c0:f8:97:03:19:1f:
59:5f:ae:e0:ae:99:42:d4:ff:71:b1:a4:e1:a8:b2:
00:08:72:a2:43:77:cb:53:1e:5f:6d:5a:d3:42:65:
89:89:a8:9a:b6:a9:1d:92:f7:73:8f:bf:69:c2:47:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:74:DE:3E:5C:0B:DB:E4:A5:CD:B3:B3:7B:82:64:75:21:93:74:38
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f7:06:ac:88:ed:23:ca:ab:35:de:84:eb:a0:56:6d:4b:da:
92:31:50:29:39:a8:c4:81:65:12:ef:cd:3d:d2:31:cc:f9:a0:
8f:26:41:cd:7b:b6:72:88:f5:e1:df:c2:b8:f2:44:1f:94:53:
e9:fb:3f:ea:01:0d:cc:7b:c3:89:02:6d:5f:d6:c3:03:e3:96:
6e:5b:2b:73:9e:c2:8d:6a:b7:51:88:57:eb:d4:0d:0a:b9:9e:
52:6f:b0:14:d5:ef:37:e3:37:f0:fb:23:d8:73:a8:34:4f:e8:
2a:da:0e:e4:fa:43:9b:d8:32:7e:3a:ee:0b:38:11:e4:84:87:
82:e5:37:99:ee:8e:07:4a:9e:37:be:cc:4d:9f:c8:51:75:35:
7b:5b:19:43:73:83:1e:26:9d:5e:9d:59:89:92:c9:27:dd:8a:
42:bd:da:43:1e:c4:d4:d7:8e:1f:65:c5:cd:57:f1:3f:ff:ac:
7b:f5:df:4a:3c:b8:77:cb:0d:23:bb:d9:a5:c9:ed:b9:f6:4a:
22:db:74:49:a2:0a:cf:83:34:85:1c:b5:4d:ee:7b:61:e6:eb:
fb:92:0e:35:7a:9d:aa:7b:97:21:c8:ac:d8:a4:2c:5a:48:d1:
dc:ad:5c:a3:4b:73:39:99:0c:52:a8:b7:4e:8a:1b:2f:2c:81:
a8:9c:da:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:30:43 2026 by rpki-client