Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: KkpyACJYr4qWfpxUqcW1/enRRokDCXZFx+zG0mkTKJs=
Subject key identifier: DE:45:28:DE:C8:C8:56:DD:72:81:1B:32:FE:56:60:E5:DC:4D:05:85
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 01A00213D5C2EADB9E63B0416A1E75B97F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 10E0
Signing time: Fri 14 Aug 2026 21:00:49 +0000
Manifest this update: Fri 14 Aug 2026 21:00:49 +0000
Manifest next update: Sat 15 Aug 2026 21:00:49 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: jzEEDk+640dS15+7uHZi0OEGdqbP8AfHsBAJRw9b8Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:d5:c2:ea:db:9e:63:b0:41:6a:1e:75:b9:7f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Aug 14 21:00:49 2026 GMT
Not After : Aug 15 21:00:49 2026 GMT
Subject: CN=de4528dec8c856dd72811b32fe5660e5dc4d0585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:2a:fc:68:4b:6c:fc:f5:42:73:cb:6d:3f:
a9:f1:83:8b:46:0f:64:c3:28:d6:af:28:5f:dc:ef:
70:07:f6:69:37:83:0f:30:68:b7:72:2f:4e:0f:4f:
95:59:f6:f9:19:6d:2c:30:53:2e:f8:cd:32:90:e6:
ac:45:d6:d0:95:8f:8e:e5:1e:77:52:7f:14:13:72:
71:34:24:c9:8f:33:07:d2:95:1c:85:34:ed:60:ca:
13:80:c0:f5:ad:6c:45:a1:30:02:79:a6:c2:20:5a:
5d:fc:be:b9:c0:91:ae:b8:63:3f:68:3b:46:8a:a5:
9e:ca:63:71:16:38:b9:bb:f3:e7:f8:24:e4:63:88:
74:90:98:8b:1d:6c:de:57:4d:bc:dd:96:ef:0f:90:
4a:ea:4b:9e:a9:ff:bc:a7:26:fc:be:b5:1a:79:14:
16:c1:2a:4d:19:89:ed:dc:98:f9:a1:41:3d:63:3a:
52:fc:9e:fc:16:3d:4c:3f:22:56:26:8b:40:42:b1:
77:8e:d4:17:6c:58:40:14:63:86:dd:e7:4b:90:be:
41:67:aa:aa:6c:d2:17:31:35:6e:1a:d7:95:46:ed:
d4:8b:74:ac:4c:75:5e:ec:13:0a:d8:70:bc:ad:7f:
56:ca:0f:67:ef:92:b5:a2:62:8e:61:10:01:48:6c:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:28:DE:C8:C8:56:DD:72:81:1B:32:FE:56:60:E5:DC:4D:05:85
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:52:d2:60:6a:6b:54:f2:27:67:c1:61:7e:08:79:97:21:59:
a7:86:09:d0:a8:e7:f1:f6:ae:df:d2:8c:f9:c3:d2:33:bf:94:
df:a4:3b:81:57:b1:71:c9:64:95:80:44:da:30:e2:27:de:f1:
c9:e2:05:40:a8:bc:91:e1:3d:bd:fd:5f:8d:22:d3:12:c2:75:
3d:c7:47:be:65:68:c6:79:39:ea:08:78:c5:42:d4:a2:99:e4:
f4:86:15:6c:b9:9b:71:0b:77:43:09:f8:ed:81:9d:58:ba:6d:
a6:a5:77:7e:87:d3:59:cc:2c:12:e4:5e:d0:6d:70:9d:35:5e:
d7:15:ed:6d:b0:4e:3a:49:76:8d:41:a2:9c:39:c8:93:99:96:
0d:1d:db:82:22:73:ef:70:fc:c2:0a:07:be:09:1d:c2:ff:46:
ff:e9:f3:04:45:cf:98:5d:71:4d:60:30:d8:c0:66:1f:1e:3b:
65:8b:ca:d5:b8:7b:26:0e:cd:5a:6f:c0:9b:f3:fa:44:c7:ac:
8a:b3:e1:42:04:17:cb:9f:ee:ad:19:ba:04:c7:e8:7c:00:f7:
6c:90:ca:c0:48:92:27:c9:d4:b5:ba:a5:2e:e0:94:f8:dc:62:
42:74:1d:ae:22:bb:64:2c:27:e1:c5:45:d3:24:6a:0b:fa:d7:
39:b0:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:55 2026 by rpki-client