
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: l2UVDNapgj9G28KNw1mf+yKlQLjlkpoADG10D1Xhowg=
Subject key identifier: F7:9F:F9:C0:8E:EC:88:96:77:B4:43:2A:50:CF:B5:78:75:5F:FB:CC
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 01A14CBDA01395566DED751603C516591260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0CD2
Signing time: Sun 18 Oct 2026 02:00:57 +0000
Manifest this update: Sun 18 Oct 2026 02:00:57 +0000
Manifest next update: Mon 19 Oct 2026 02:00:57 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: 48Bd/mJjUiiapoidvYGJ6EC0mudbWjgXsSUD6FaF1SI=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:bd:a0:13:95:56:6d:ed:75:16:03:c5:16:59:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Oct 18 02:00:57 2026 GMT
Not After : Oct 19 02:00:57 2026 GMT
Subject: CN=f79ff9c08eec889677b4432a50cfb578755ffbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:75:57:37:f3:51:d8:e7:7d:51:ca:f6:e1:
43:5f:b7:d1:cc:b0:d7:57:8f:1e:12:72:f5:f9:6a:
f0:44:72:cb:c0:a6:2b:b3:83:e8:31:f3:ff:05:2d:
e1:a0:8f:29:cb:01:f0:09:bb:b8:36:98:9a:90:3d:
d5:74:7c:fc:3e:eb:99:73:9a:07:6f:cf:86:4e:d3:
71:0e:a5:47:86:ed:5b:28:74:ae:24:7e:2b:58:25:
1c:f4:b9:52:d7:77:60:8c:9e:40:b5:22:b7:7b:7a:
b9:bd:a3:44:2c:6a:8e:f4:8e:e2:52:1b:2a:d8:e0:
e6:4e:07:aa:05:57:ac:40:af:81:c1:c3:56:65:43:
7f:4a:ee:ac:ce:3b:ea:83:bb:af:61:05:c7:42:e4:
ce:17:ca:bf:85:41:e3:53:63:38:2f:7a:83:59:45:
0b:36:ca:58:ed:51:c4:3b:e2:83:24:df:23:3c:35:
35:12:8a:03:0c:65:21:91:4b:ca:83:ca:64:fc:a8:
3d:c1:0a:65:b8:45:e5:43:e4:a4:19:37:c0:31:60:
99:fb:69:b6:78:96:01:b2:7c:9b:b1:74:37:cb:bb:
0f:01:e5:dd:e6:25:1e:f3:34:6b:5e:c7:19:31:9e:
fc:d6:bb:51:ce:7c:17:52:5f:13:e9:c3:5a:00:89:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:F9:C0:8E:EC:88:96:77:B4:43:2A:50:CF:B5:78:75:5F:FB:CC
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8c:6f:6f:82:f7:6a:bf:00:e9:2d:6c:c1:b4:15:20:91:45:
77:dc:87:09:ba:f4:b4:ab:98:22:a4:08:3f:86:73:b9:d9:03:
d1:7e:27:99:26:70:26:cd:e1:0d:5f:e9:b1:db:24:b8:42:e0:
2f:0b:c2:7c:38:4f:00:a7:0f:a4:0d:d9:f1:a9:c2:c0:7f:a4:
73:d2:a5:9c:01:a6:53:8d:45:be:54:b1:0c:5f:a6:72:72:ee:
f1:20:4b:d5:a8:f5:f9:d1:da:db:6e:44:7e:72:89:6e:84:ea:
61:b1:ca:87:e6:b7:95:97:74:9b:3d:cb:1c:73:cc:62:08:1c:
e8:d9:fe:72:f8:5f:7d:08:bd:f2:f8:db:5f:f7:11:57:f4:19:
8a:a8:a4:ba:0d:0a:33:e9:25:ed:f4:47:fc:2c:ad:4e:61:7d:
06:94:94:4a:ba:ca:c1:c1:37:a0:d9:e1:ec:5f:46:91:92:11:
7f:9a:4a:3b:51:7f:26:ab:a5:6b:65:6f:7d:13:25:46:12:38:
67:c7:b0:6d:d5:54:37:95:44:e3:7a:63:bf:2e:c7:a3:41:94:
f0:cc:31:2b:6c:c4:35:29:f8:c4:5b:c0:53:80:71:f4:69:4e:
54:a6:0e:97:e3:c6:cb:a2:03:da:c6:d2:5d:9f:11:d6:5a:95:
08:43:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:28 2026 by rpki-client