Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: wT6MSxv+zljkf7cW7Dr7nQ1LwVgjUQZpyOrTndWWOyU=
Subject key identifier: FB:78:B4:B6:71:D2:73:13:E5:4F:8C:35:40:8A:13:50:42:5B:BD:73
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 01A00170029E4A6481062A9574FB9C93F15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 18:01:52 +0000
Manifest this update: Fri 14 Aug 2026 18:01:52 +0000
Manifest next update: Sat 15 Aug 2026 18:01:52 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: RCHmWYUY7KqTPmmq6UXqJxBZLsCd4sxrSnUvNTx+Y/k=)
2: Y53-K6eCcM2LGOvi8Fn2PE_O8Hs.roa (hash: epaNlilaUn33+8n2mw835ikIL/eJJhBznXtCVWydLWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:02:9e:4a:64:81:06:2a:95:74:fb:9c:93:f1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Aug 14 18:01:52 2026 GMT
Not After : Aug 15 18:01:52 2026 GMT
Subject: CN=fb78b4b671d27313e54f8c35408a1350425bbd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:a0:d1:90:23:a4:a9:55:48:3d:f9:49:e4:
25:f0:69:7b:28:da:1f:3a:d2:f9:7b:e6:82:aa:4f:
ba:03:2c:a6:d2:42:20:cd:81:6f:05:26:15:1d:7a:
de:55:28:b4:0d:e2:a3:a2:1b:81:16:58:7f:95:bd:
e2:2b:68:09:b0:ce:e7:30:76:e8:67:09:bd:99:1d:
5a:23:41:23:a8:6b:0b:85:fc:a8:b8:c2:48:70:6a:
88:a6:53:56:30:a7:5b:11:ef:14:67:9e:7d:b1:56:
b2:03:28:40:97:b5:f8:4a:ba:3b:df:c0:45:08:f0:
89:3f:af:a3:ea:d3:92:c0:c1:e8:61:55:54:e8:74:
5e:5c:50:35:8d:bb:00:83:04:13:74:0f:d3:e5:13:
88:94:3d:9e:25:94:03:90:85:92:13:d4:6a:69:8c:
24:2e:ef:19:71:57:5c:a9:7d:b6:c5:02:e9:3e:fc:
73:b8:8c:7e:5a:bb:78:7c:c4:f5:29:8a:76:9c:b1:
69:eb:0d:91:b6:6c:12:9c:f8:40:62:a5:ce:05:0f:
a5:69:93:62:27:1e:b6:33:56:db:c9:49:02:0a:b7:
a2:cb:ca:85:3c:90:44:1a:bd:09:09:c9:16:e3:b1:
77:71:d0:16:29:5e:88:c7:ec:16:72:7b:74:83:a8:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:B4:B6:71:D2:73:13:E5:4F:8C:35:40:8A:13:50:42:5B:BD:73
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:58:84:55:ab:cc:d2:14:d6:b2:cb:ac:e6:50:0a:39:75:
f5:f4:f7:73:df:e3:ea:0e:d5:f3:b1:aa:fb:68:c4:01:f9:12:
da:31:22:c7:cb:ea:37:9d:8a:a6:34:39:30:3d:7a:08:7a:a6:
d8:ad:73:cd:38:9b:fa:ed:a0:35:f1:0c:23:93:0f:0a:3f:37:
e8:9c:f7:d9:38:60:7b:91:87:b3:a6:ea:4d:01:d6:d7:27:60:
fa:32:24:30:46:41:2e:ea:b7:ec:8f:8b:63:1e:a6:83:2e:fb:
f4:a5:a3:eb:74:17:87:15:29:ad:8f:69:6c:98:8c:21:bf:89:
a7:6e:e7:bd:e7:74:4d:b4:46:19:65:a8:25:e6:27:65:ed:b9:
52:3a:5d:73:f6:e6:bf:8e:2c:85:80:54:96:93:3a:2d:98:a8:
86:17:29:c7:7d:e5:88:75:91:58:27:7c:ae:87:e4:11:2d:ae:
39:5e:c9:47:ea:b6:28:93:59:48:17:18:74:2e:c9:b0:ae:11:
47:ad:de:04:48:78:be:87:f8:5c:7c:71:44:be:23:c7:e1:05:
e6:d2:e9:45:a7:dd:07:3f:d5:35:e2:f2:fa:d2:70:d9:1d:b6:
03:77:f6:e2:6f:c1:c4:95:6e:ed:4f:dd:b5:d9:00:07:56:af:
69:aa:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:29 2026 by rpki-client