Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: +tgczgLV1UyV0dIvQrhvHMhzgaCur8w8yuEU9R0jPv8=
Subject key identifier: EB:13:90:C2:FE:19:77:4E:57:C6:FD:EE:BA:07:E8:0C:C8:70:A8:97
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 01A002139BFA6A228460FAE68138B9C1DC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 1472
Signing time: Fri 14 Aug 2026 21:00:34 +0000
Manifest this update: Fri 14 Aug 2026 21:00:34 +0000
Manifest next update: Sat 15 Aug 2026 21:00:34 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: rwsTpT5/TFGP5wSZGQM0OwVfWzlQ6bcXjzQUW4QAbjs=)
2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:9b:fa:6a:22:84:60:fa:e6:81:38:b9:c1:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Aug 14 21:00:34 2026 GMT
Not After : Aug 15 21:00:34 2026 GMT
Subject: CN=eb1390c2fe19774e57c6fdeeba07e80cc870a897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:17:35:9e:b2:a2:ed:aa:ce:95:46:29:8a:0b:
44:24:f9:bd:12:5e:71:d7:0a:19:44:24:b9:55:57:
ef:df:e4:73:44:f1:67:d4:a7:57:1c:83:fc:fa:f6:
a2:85:18:6a:f4:9d:3b:2c:47:fa:57:a4:23:ad:a8:
8e:f3:e6:a5:98:0b:fb:6b:4e:f0:d6:20:4c:d8:c7:
15:e1:73:62:2e:58:01:3f:5a:dd:82:12:8c:64:68:
fe:3c:7c:b7:37:27:13:41:2a:0a:65:3c:6f:a9:2f:
48:42:48:fe:dd:b6:21:72:20:a1:91:17:ed:6a:96:
1f:d0:16:6c:3d:da:94:fa:07:15:e7:df:01:0c:fb:
de:b7:1d:37:17:4c:17:c3:df:79:08:79:a7:63:3a:
23:25:be:50:57:a0:fa:16:7c:7c:ff:86:c3:56:50:
04:c0:ad:97:26:5f:e7:55:72:9e:5f:85:60:01:83:
f0:6c:ca:4a:a4:55:55:54:98:54:83:85:57:0c:a6:
44:7d:00:a0:27:db:16:84:cc:11:b2:78:47:d9:d3:
53:a0:78:d2:67:db:f9:0f:e4:1f:66:4d:e9:8c:f1:
95:f1:c5:ac:18:49:02:7f:d9:71:7b:77:0a:5c:16:
70:8e:ac:14:41:35:94:ce:8a:68:68:72:da:fb:3c:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:90:C2:FE:19:77:4E:57:C6:FD:EE:BA:07:E8:0C:C8:70:A8:97
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:35:08:db:60:7f:07:f4:39:8c:e6:49:e2:e7:f7:b2:be:84:
41:09:c9:98:0e:97:92:b6:84:a5:bf:23:86:bb:7a:58:f4:ef:
a8:f7:81:d9:ed:14:7c:7d:6d:91:5e:f5:10:96:7e:1e:af:91:
08:41:4e:41:b5:51:d8:27:da:27:1d:3b:43:9e:39:4e:03:c3:
16:29:03:ee:8b:30:0f:75:17:fe:3e:9f:2f:90:79:bd:30:9f:
e0:e0:79:35:62:6a:50:d3:b2:42:45:a9:5e:8a:19:34:5d:8d:
6d:d3:7a:1c:8d:84:e0:98:2f:c5:b3:6a:1b:54:9b:7f:e0:bd:
b7:0f:88:01:22:4c:a5:db:2c:1a:bd:55:12:ad:30:70:e0:8f:
07:55:23:d0:da:48:e1:e7:9b:83:f7:7b:c6:b9:80:57:28:b1:
a5:87:5e:31:44:b2:86:df:f0:7e:fa:d0:a0:00:e8:e6:5a:6b:
ff:b1:95:b4:11:af:42:bb:bd:6a:b4:86:83:c8:55:5c:ca:b5:
fc:ce:c5:73:3e:93:ee:f6:de:e0:5c:c2:16:a9:63:12:f7:12:
4a:a2:3f:48:68:cd:ce:6b:47:c3:05:d4:0b:f6:b4:60:4d:71:
37:c8:b6:06:fe:90:5e:b9:e0:e9:36:34:a5:a6:7d:94:cd:d3:
5d:7f:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:18 2026 by rpki-client