Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: DpMjAjsRWoyTSCNspOBp2LBsNIlhZKYGjjioZmVcmQo=
Subject key identifier: F0:34:42:7D:39:88:13:9A:8A:2A:85:CD:0E:B2:93:71:D9:E0:15:6C
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 01A142036139EB1F7E8D3F1AE127BC7F1C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 1AA9
Signing time: Fri 16 Oct 2026 00:01:20 +0000
Manifest this update: Fri 16 Oct 2026 00:01:20 +0000
Manifest next update: Sat 17 Oct 2026 00:01:20 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: E+Fqau3mWcMQNDbacF+XnCTC6n8JIxP5Cm+v2oXWyvc=)
2: Y53-K6eCcM2LGOvi8Fn2PE_O8Hs.roa (hash: epaNlilaUn33+8n2mw835ikIL/eJJhBznXtCVWydLWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:03:61:39:eb:1f:7e:8d:3f:1a:e1:27:bc:7f:1c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Oct 16 00:01:20 2026 GMT
Not After : Oct 17 00:01:20 2026 GMT
Subject: CN=f034427d3988139a8a2a85cd0eb29371d9e0156c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:87:74:b0:7f:93:b1:49:e3:cd:69:b8:81:
b2:35:d9:ed:d4:a1:e7:be:76:96:ce:1b:41:6b:d0:
93:af:b7:b0:af:a4:d1:a7:ba:8e:6c:9c:a2:39:b1:
f5:6f:a4:76:4a:a6:08:f7:f4:03:bf:bd:c8:e7:20:
7b:30:c4:9d:36:ee:be:0c:66:44:c2:b3:98:4b:77:
80:b2:c8:52:8f:2e:8d:a4:a2:86:f8:e3:c5:d6:f4:
d5:24:22:60:72:9e:7a:ec:56:aa:fc:51:e0:74:7e:
d8:5c:ff:79:39:0d:77:11:ed:f0:92:c0:68:e8:6d:
60:20:92:e9:34:63:0b:e0:be:ad:f9:d1:61:f4:13:
1a:ca:50:c0:0a:da:11:1f:52:ed:05:67:a3:eb:19:
6e:f5:66:43:16:02:c4:1c:00:74:22:e6:bf:ce:6a:
de:74:7e:28:41:e6:8f:00:a1:15:de:c2:2e:8c:37:
db:35:b2:b4:9e:78:58:ce:dd:a3:67:ef:ae:fa:13:
ca:02:47:86:04:27:5d:0b:68:a5:b3:1c:e1:5b:32:
7a:ce:56:cd:bf:54:3a:27:27:ba:eb:c8:99:2e:21:
62:73:6e:ae:7c:b8:25:f6:52:91:ae:5d:f7:6f:e4:
86:d8:f4:b9:2d:48:8f:c2:35:59:d4:e6:42:38:13:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:42:7D:39:88:13:9A:8A:2A:85:CD:0E:B2:93:71:D9:E0:15:6C
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:26:6d:bd:4a:ee:5c:b8:83:c6:d9:f6:f5:b8:77:57:4e:b1:
ba:1c:65:4c:a1:b0:be:96:68:87:27:74:05:4d:10:cf:ba:6f:
2d:95:d5:7b:64:22:36:66:45:64:69:85:d5:91:e9:3c:42:50:
11:ad:35:f6:a4:e2:94:7d:85:c8:c5:03:d7:68:c3:6c:65:a1:
a0:e9:16:05:69:50:93:16:0d:f5:e8:29:81:08:8f:bd:ba:0d:
1e:4e:1a:a9:a1:a9:39:28:e0:96:c6:3e:f9:37:1b:1f:95:2b:
8a:91:92:0e:66:61:b1:76:e5:db:90:4a:5d:3d:80:9c:9c:a3:
f4:be:dd:b0:0f:f5:6c:63:b6:57:bb:f4:5c:47:f6:c4:68:9c:
d8:5f:3e:ab:43:01:60:1c:b0:58:7c:6c:35:aa:c1:b2:b6:67:
21:14:d5:3a:21:5d:ed:38:f4:62:a8:12:a6:ba:06:18:4a:73:
1d:d7:fe:ac:4f:7f:89:1d:31:0c:67:c7:73:cb:40:25:0b:7b:
cb:d8:db:9a:cb:3b:14:ca:ea:25:35:ae:c3:b9:02:15:bf:01:
18:aa:5a:7b:63:d9:41:98:9c:b8:a6:1f:f6:ba:46:83:cc:27:
31:d4:66:8d:7c:89:51:46:1d:9a:5f:6d:aa:ba:cd:76:46:d2:
f2:3a:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:04:49 2026 by rpki-client