Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier: rtx2lyD7ATZqeQ0bDfA0BLn+GJeFmYxxJ9MOAVXN8xU=
Subject key identifier: B7:F2:BE:4C:0F:88:D1:2B:F7:0A:23:82:38:AE:07:10:A0:AF:B7:37
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial: 01A1713798BF66CD9CE9AE27BA54FC7A0FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number: 0DE1
Signing time: Sun 25 Oct 2026 04:00:31 +0000
Manifest this update: Sun 25 Oct 2026 04:00:31 +0000
Manifest next update: Mon 26 Oct 2026 04:00:31 +0000
Files and hashes: 1: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: 0vaxeFFyyl4u56FQn07Gz6PNiMoHdn2I/EcB4uV6TAs=)
2: BSGPWmtsgwbJGnKFG5brSPXj4hk.roa (hash: KGxIkg0MS8XaKz2jRrsvog2q0vQwaAcswUFzEf/VLTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:37:98:bf:66:cd:9c:e9:ae:27:ba:54:fc:7a:0f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Validity
Not Before: Oct 25 04:00:31 2026 GMT
Not After : Oct 26 04:00:31 2026 GMT
Subject: CN=b7f2be4c0f88d12bf70a238238ae0710a0afb737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:d7:48:52:a6:27:81:61:ed:e6:88:c0:12:
74:32:b4:34:5b:7d:ce:bc:e8:c0:11:a5:1b:fd:2a:
65:6b:e1:65:fc:ae:4c:8e:07:e8:40:a5:46:5f:4a:
38:fa:4a:a4:50:2a:5c:f4:7d:7f:24:43:6e:79:97:
3c:5d:8e:34:1e:5a:f1:17:13:a0:1e:49:3d:37:54:
6c:db:4e:20:51:0d:6c:2e:ff:00:8d:50:48:8e:dd:
4c:29:72:76:01:a8:01:ec:1e:2c:28:25:fe:a1:8e:
b6:4d:cd:74:17:ec:9f:b2:5d:46:2e:cc:48:76:20:
4f:3c:6b:95:94:4b:4f:9f:19:ef:4e:ea:03:bc:c1:
69:fe:f7:00:85:8d:9c:d0:a6:bf:73:4e:38:c4:b1:
1c:11:ae:59:8c:37:c8:a0:a2:ad:26:b3:ae:1b:2f:
11:d1:3a:06:9f:91:c2:90:56:ed:5e:3d:09:04:5a:
48:db:76:ea:86:a9:8d:8f:6d:41:5f:ff:3a:02:7e:
9a:8d:42:e1:c1:ee:74:33:38:f1:5c:5c:b6:ab:ef:
4c:3a:c2:97:65:5f:45:ca:22:92:8f:98:8b:7e:24:
ef:8a:9d:e6:06:67:76:22:66:6f:5b:ca:98:f2:ab:
59:62:9b:6f:b6:8f:ef:6c:ee:63:ef:90:8a:14:f9:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:BE:4C:0F:88:D1:2B:F7:0A:23:82:38:AE:07:10:A0:AF:B7:37
X509v3 Authority Key Identifier:
keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:55:41:38:6c:fe:c8:78:45:a8:1c:45:45:bb:70:fe:6d:d1:
35:57:c9:30:9d:68:4b:fb:44:a6:17:2a:a8:cf:6a:ef:4f:91:
01:fb:ad:c8:13:39:b7:96:97:41:c8:d9:64:99:13:15:85:df:
52:82:d8:f9:99:d2:68:3c:ad:14:c1:50:73:1e:73:b7:f8:eb:
c7:d0:ac:9a:4c:26:d6:a7:e9:fb:39:df:3b:4b:40:99:66:d9:
93:ca:91:b8:f6:6c:0f:40:25:47:48:a7:35:80:f9:d3:6c:61:
f7:99:94:79:21:a8:e5:d5:5b:ae:0d:28:96:55:04:53:5b:86:
7f:4f:b1:60:66:28:0c:0a:84:8c:62:65:9d:20:18:06:14:31:
6e:02:d7:4a:a1:9d:3f:43:11:6a:c5:ee:8b:52:49:f2:a3:a4:
a0:83:46:ad:bb:18:00:54:f7:fd:1f:e6:4f:57:8d:44:88:43:
a1:8b:1f:e7:f7:75:a7:03:f6:a7:22:f6:7a:18:43:36:ca:88:
b4:f1:c9:75:4c:75:65:35:80:55:d1:a5:89:47:e2:75:ba:78:
1a:15:07:90:f4:21:21:14:bd:a7:a8:fc:db:ff:9d:b2:e4:22:
1d:1c:c7:29:87:47:9d:a2:8a:cb:f6:0d:13:37:e4:b9:26:52:
1e:bd:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:09 2026 by rpki-client