Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: Xp+4uaGz46udlrH4U89AOa5+wX0UfS2Q/KJddTfOSJs=
Subject key identifier: 16:60:46:EE:DB:32:46:14:F8:FE:BD:8B:F9:AD:27:95:BE:93:0E:86
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 01A13ECB598CC8600DF8A9E2580E6FB1B5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 1516
Signing time: Thu 15 Oct 2026 09:01:16 +0000
Manifest this update: Thu 15 Oct 2026 09:01:16 +0000
Manifest next update: Fri 16 Oct 2026 09:01:16 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: pROFIvhp3o7EqgCsaWx3mXuhFhYmOMc1cpGkzdevfUU=)
2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:59:8c:c8:60:0d:f8:a9:e2:58:0e:6f:b1:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Oct 15 09:01:16 2026 GMT
Not After : Oct 16 09:01:16 2026 GMT
Subject: CN=166046eedb324614f8febd8bf9ad2795be930e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:92:69:0a:8a:20:2b:03:d4:85:20:2b:b8:
1f:63:8e:f0:b1:f3:82:36:ad:b6:a8:38:26:0d:a2:
29:45:ab:9b:fe:a3:55:a3:d3:d3:a0:89:ea:06:63:
d7:b3:63:c9:a2:17:ce:5a:b2:61:b4:04:1e:ef:ea:
69:82:00:74:07:74:29:ac:56:05:66:b0:da:f3:7f:
63:6d:72:75:e9:de:fc:be:88:59:90:f2:3c:c2:ae:
87:03:43:67:e8:74:2a:34:73:84:4b:3d:be:e8:19:
e2:bf:d5:a0:e8:53:1c:3c:b0:54:55:97:cb:e2:28:
ab:66:d0:a3:b3:c0:e8:54:6f:10:7d:58:ff:73:8e:
22:6b:a8:bc:66:d5:40:56:6d:6d:71:51:ca:c2:8b:
2a:60:7c:61:9a:63:b4:6b:8a:06:ee:a3:4b:bf:a5:
c2:a7:68:cf:38:88:d0:77:ed:e5:30:6d:38:16:06:
38:b8:bc:cd:84:ca:9e:d7:86:17:1a:b0:08:25:f3:
48:8a:bd:af:88:a6:54:56:63:37:2d:05:7d:6f:c8:
14:19:ae:26:d0:4f:67:8c:1c:bb:fa:6c:f9:85:05:
8f:9c:11:32:b4:77:c5:12:55:4f:56:e6:12:b6:5c:
f2:51:29:09:32:a3:30:c6:b6:bb:d1:d7:38:ea:23:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:46:EE:DB:32:46:14:F8:FE:BD:8B:F9:AD:27:95:BE:93:0E:86
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c7:88:d2:7d:74:2a:01:a5:c8:36:9b:77:f5:71:1e:85:15:
67:4f:b2:08:60:ca:5e:42:6a:33:51:34:6d:87:43:95:4e:b4:
9c:3a:64:cb:03:7c:5f:37:da:16:4f:32:9e:a8:f8:07:ce:bf:
f9:78:6b:11:d6:63:82:8b:36:c4:e9:b3:5c:af:1e:4f:10:27:
d4:c4:e9:ea:7f:a5:87:47:f1:d4:bf:3c:c0:14:92:e5:b8:1c:
f8:3d:ab:d2:3d:03:af:89:3e:3c:67:61:fd:b8:fb:66:fe:3a:
86:37:13:a9:74:07:28:dc:9d:16:55:ed:0d:2a:6a:38:bc:a9:
3b:57:9c:ad:df:ed:46:0a:c3:ac:94:db:b2:e8:63:14:2e:9a:
bb:31:b6:cb:ec:ff:42:b8:47:37:13:d8:b9:e0:8b:5e:50:59:
ae:ac:99:3f:b4:ed:78:cd:6b:78:1d:9e:33:56:40:33:4c:33:
79:b9:1b:98:7a:53:0a:e6:a0:c6:5b:a8:64:76:84:0a:33:ee:
aa:ad:4a:1f:5d:8c:11:47:6f:00:24:ee:65:7f:0e:bc:8c:a6:
6b:71:15:a1:ad:02:e6:6b:1b:95:7a:ce:c1:4d:88:3a:ab:66:
a1:10:9d:bf:3d:1d:b9:f3:9b:d1:e6:29:eb:2f:52:3c:86:98:
ae:3c:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:45 2026 by rpki-client