Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier: B2xRnqmfgwgp1iIJmB40bqSmc+7B0QGF7ZUBQZivVlQ=
Subject key identifier: 7A:D4:E3:69:09:8A:AB:F8:5B:60:D8:A9:C1:46:F1:7C:04:32:B7:7F
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial: 01A001386C5EA57B0313EE25A8BB0626FB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number: 0CBA
Signing time: Fri 14 Aug 2026 17:01:09 +0000
Manifest this update: Fri 14 Aug 2026 17:01:09 +0000
Manifest next update: Sat 15 Aug 2026 17:01:09 +0000
Files and hashes: 1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: l5niLjonAi7uf2nEZ43Zl0PYZroYOn+Fszr0Ok/c8UE=)
2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:6c:5e:a5:7b:03:13:ee:25:a8:bb:06:26:fb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Validity
Not Before: Aug 14 17:01:09 2026 GMT
Not After : Aug 15 17:01:09 2026 GMT
Subject: CN=7ad4e369098aabf85b60d8a9c146f17c0432b77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:6a:7d:60:88:13:d3:9c:01:9d:81:53:f1:
9b:7a:41:41:3b:a8:90:3e:bb:84:3d:ce:c3:40:65:
e1:94:3a:7d:00:f9:f7:0c:fe:e0:5e:e2:37:31:58:
50:50:18:c4:ca:87:ae:b2:66:d6:8d:d8:ed:eb:3a:
f5:0d:a0:b1:da:c1:23:f7:60:6d:71:9c:a6:c4:21:
44:55:96:4a:29:27:7c:07:0f:a2:ab:27:0d:2b:4e:
8a:1b:c9:62:b5:54:df:35:8a:51:1b:a0:6e:c8:f8:
23:cb:df:58:7c:55:05:ef:99:24:c6:59:47:d7:71:
c6:ea:20:63:35:3e:8a:b2:e1:99:e9:15:74:85:7e:
4f:66:bc:5f:13:b8:1a:a0:ea:bd:da:6d:97:97:20:
0c:68:e3:eb:62:a6:89:a9:18:68:05:b5:ef:e2:41:
63:8e:f4:68:89:c6:06:35:46:62:70:3a:61:62:af:
f4:cd:36:69:a5:92:97:7e:88:4f:2f:86:59:da:ed:
8d:5e:02:e1:0c:66:5f:df:41:04:12:6b:f0:0e:d1:
df:e1:56:23:3f:d3:cf:9e:14:f8:4a:3d:3f:bf:5c:
f3:30:c6:d0:98:e0:17:00:07:84:7e:5c:a2:75:b5:
05:7b:2d:a5:f0:61:c2:13:72:28:b2:84:81:d3:cd:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D4:E3:69:09:8A:AB:F8:5B:60:D8:A9:C1:46:F1:7C:04:32:B7:7F
X509v3 Authority Key Identifier:
keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:81:08:5e:c5:80:72:9d:83:c5:96:ca:2d:f3:8c:bb:e5:01:
5d:30:14:d2:77:16:3f:00:88:86:22:e1:77:c3:82:0f:53:6d:
c9:53:f9:4d:f9:c8:74:40:84:d5:30:23:07:ec:1c:e4:41:fd:
bb:62:b1:a9:39:dd:4c:99:3d:6e:2a:62:2a:47:56:0a:68:1f:
65:85:30:1c:36:20:11:23:dd:a4:5e:78:b1:8b:11:32:cf:8a:
f5:31:42:ce:5e:25:2a:70:12:f9:74:f4:05:25:78:2e:2e:00:
02:33:f6:9b:a7:eb:05:8c:ea:a1:41:ad:7b:e7:3f:b3:ea:8a:
d1:c2:cd:f0:8b:fc:7f:13:69:c5:9c:b1:0a:95:29:67:35:b6:
2f:a9:61:7b:4b:a6:cc:ea:2a:81:62:c4:d7:00:a2:38:ee:c3:
cc:34:3c:4c:c6:ca:7d:87:b2:80:ce:97:8c:24:fa:ea:5e:2f:
cf:05:4a:23:53:22:9e:a0:79:7c:57:db:e6:50:43:d1:36:4d:
7c:9d:8b:25:59:a6:d4:4e:d3:f2:ee:9a:7b:2a:f0:92:80:22:
a7:57:5e:8e:52:6e:7b:52:90:54:d0:8d:9e:f6:4f:9c:bc:b0:
1c:26:46:ee:41:9e:96:70:79:36:62:a3:3b:87:e0:05:4a:c8:
80:fb:4c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:08 2026 by rpki-client