Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.mft
File: C5wIHILuiLzegjQT4hHD51Rd-sY.mft (raw, json)
Hash identifier: keiAMcQWftyOm9PSKv++MC+RJVyx8eNI4GM+VWJMsfA=
Subject key identifier: 50:17:AE:13:92:5E:C2:83:B8:CB:CC:0D:FF:5E:3C:F0:70:A1:D5:FC
Authority key identifier: 0B:9C:08:1C:82:EE:88:BC:DE:82:34:13:E2:11:C3:E7:54:5D:FA:C6
Certificate issuer: /CN=0b9c081c82ee88bcde823413e211c3e7545dfac6
Certificate serial: 01A04085337211CB9AC2C11107655E77891B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5wIHILuiLzegjQT4hHD51Rd-sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.mft
Manifest number: E4
Signing time: Thu 27 Aug 2026 00:01:06 +0000
Manifest this update: Thu 27 Aug 2026 00:01:06 +0000
Manifest next update: Fri 28 Aug 2026 00:01:06 +0000
Files and hashes: 1: C5wIHILuiLzegjQT4hHD51Rd-sY.crl (hash: luB5dvkJdUMZK+XXw2tYKcx4OJdArmiCVJM75l/b0iQ=)
2: xrYEF7MHANri_RLdvJ8t3yc6aD0.roa (hash: 8PcEWC5CYQTdUzOi9DoDZ2Yuv0blIgxRqvaAy5BfSDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5wIHILuiLzegjQT4hHD51Rd-sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:33:72:11:cb:9a:c2:c1:11:07:65:5e:77:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9c081c82ee88bcde823413e211c3e7545dfac6
Validity
Not Before: Aug 27 00:01:06 2026 GMT
Not After : Aug 28 00:01:06 2026 GMT
Subject: CN=5017ae13925ec283b8cbcc0dff5e3cf070a1d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:31:bf:65:85:67:53:71:24:eb:25:4d:c8:
bb:2a:a0:67:35:9b:07:15:6a:d1:e1:4f:0a:af:f9:
28:c2:ff:77:0e:24:30:31:b7:dc:91:b5:cc:c3:cf:
15:a7:86:8c:07:c9:4c:b9:d7:a8:c9:da:98:3d:d4:
57:97:d6:af:34:93:1c:e7:1c:83:c7:61:a7:08:45:
56:0d:4c:a5:4f:2e:4a:e0:4d:3c:fc:03:a3:b4:b9:
57:ce:42:6a:9c:34:e4:af:6f:00:44:f6:85:1a:3a:
bc:5a:b9:b9:b3:43:15:75:e7:14:2c:a5:0c:93:3e:
99:89:8a:14:1d:0d:af:f6:6c:a0:53:37:c5:d0:07:
e2:e0:1d:db:fb:4e:ea:16:e5:c7:a8:97:22:61:39:
fc:a9:81:de:62:4f:ab:46:b9:86:25:3c:ec:9c:55:
ca:e8:c3:46:a3:df:f9:b8:99:35:da:33:8a:7a:8a:
e0:05:cb:2a:6d:ca:98:e6:82:e4:52:3f:98:36:4a:
b2:10:de:c4:09:64:1a:4f:8a:d0:21:51:a2:ad:9e:
92:d6:b2:95:37:34:f4:01:08:6d:93:89:e6:34:f6:
86:22:df:be:71:20:a2:1b:50:57:95:2d:be:cc:d4:
13:54:96:57:1b:a0:6c:93:24:f3:95:61:ee:7e:32:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:AE:13:92:5E:C2:83:B8:CB:CC:0D:FF:5E:3C:F0:70:A1:D5:FC
X509v3 Authority Key Identifier:
keyid:0B:9C:08:1C:82:EE:88:BC:DE:82:34:13:E2:11:C3:E7:54:5D:FA:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5wIHILuiLzegjQT4hHD51Rd-sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:10:7b:b6:d9:c9:9b:38:ad:ee:67:b5:9a:d2:9d:1b:f6:27:
a3:6e:6d:b1:6e:3c:43:22:ba:c0:d1:80:4c:b0:5f:d9:b4:bf:
8a:33:f3:ef:f8:c1:13:18:11:ff:ee:c1:20:b7:d6:4e:fc:ad:
11:83:92:c6:80:d4:12:e6:c0:14:c6:fc:4f:10:e4:9d:a7:6c:
cf:70:d7:13:67:30:cb:4e:94:6c:ed:a4:18:59:1a:e7:45:ad:
3d:c4:ba:8e:14:d8:eb:56:ca:33:40:04:48:0c:91:d0:a2:2c:
5a:3f:e7:fb:ee:35:78:8e:e8:e2:52:79:da:23:0f:9d:04:59:
e0:29:d4:46:24:1b:87:9b:91:a4:ff:6b:11:e9:f0:e9:83:3b:
cd:b8:67:c7:0c:db:14:02:f2:b4:b9:ee:3f:8c:e2:62:0c:3c:
e1:b5:19:35:b5:5b:b5:c9:0e:94:37:55:a4:e6:88:e2:d1:aa:
d1:0b:b2:19:ed:40:7b:92:ab:a7:2e:fe:53:09:e1:6a:aa:ae:
ec:17:6e:1a:1f:d9:4e:61:5f:54:ad:ce:8d:05:1a:55:52:35:
84:fb:26:d2:51:8b:05:bd:87:3f:26:5d:46:99:1b:fc:57:07:
1d:75:8b:4e:ac:8c:e5:90:a4:65:66:46:66:2b:8a:97:af:45:
c0:11:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:46:19 2026 by rpki-client