Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier: Q45kBgz9p8mbstCo/KeTWj8sTZjSXSRprO6QkOGyXnw=
Subject key identifier: 2D:BC:78:6A:AF:D5:44:3E:D4:AD:91:9F:8A:93:63:33:FE:40:E2:7B
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 01A13D135EC71ED44838CD1DBECAE7B9AF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number: 0DD0
Signing time: Thu 15 Oct 2026 01:00:41 +0000
Manifest this update: Thu 15 Oct 2026 01:00:41 +0000
Manifest next update: Fri 16 Oct 2026 01:00:41 +0000
Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: ddu/ZYProjoQLgtVv3aLIF6LNai0oRGokZd+FfV1kIQ=)
2: hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa (hash: fAcJlzHm8GX5dH8gtKkRjvytkl6PKP9fjOi2EMtY8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:5e:c7:1e:d4:48:38:cd:1d:be:ca:e7:b9:af:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Oct 15 01:00:41 2026 GMT
Not After : Oct 16 01:00:41 2026 GMT
Subject: CN=2dbc786aafd5443ed4ad919f8a936333fe40e27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:46:06:ab:1f:ae:ee:5d:dc:f9:e5:fb:78:
cc:de:01:68:b6:8b:6c:99:a9:cd:a9:f2:d2:75:8d:
16:24:fe:99:cf:4d:46:06:96:f2:69:df:be:79:54:
7b:c3:24:5b:ec:d4:0d:69:e4:fc:21:68:91:d6:f5:
0d:d9:d1:2a:55:d5:19:65:c1:f5:24:26:40:88:24:
c8:69:6a:bf:b4:92:92:b6:e8:8a:f2:e5:fc:bd:9e:
fe:35:97:8f:21:2b:3f:b2:c5:88:6b:f8:75:04:ca:
1a:86:d4:dc:22:cd:b9:90:e0:cf:4c:f1:11:fc:7c:
20:60:ec:b5:e6:b0:f0:60:c8:e7:9b:da:32:ca:d3:
7a:ab:66:43:fb:e7:0f:fa:12:3c:70:b2:c8:00:62:
ff:c5:34:59:f2:d1:03:31:40:d4:26:90:51:b5:aa:
22:b8:e4:c0:5c:92:70:24:52:bb:99:78:11:b6:6f:
c6:77:f1:94:fa:8a:95:e9:cc:9a:7c:2e:fe:f3:b2:
a1:4f:0f:4e:4f:52:a2:6d:1e:60:43:14:d8:8e:66:
ec:9c:25:3f:4d:e6:1e:99:ba:bb:a9:9f:f5:6a:30:
0e:1a:76:6c:25:43:80:41:fa:3c:3c:de:eb:70:76:
50:fd:ef:03:ff:14:40:9c:70:52:c3:3c:c1:04:06:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:78:6A:AF:D5:44:3E:D4:AD:91:9F:8A:93:63:33:FE:40:E2:7B
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b4:a6:70:11:bc:c1:e7:c0:3a:9a:71:1d:20:af:6a:62:3e:
f3:be:d2:9b:db:b3:58:36:fa:de:ae:d5:de:0b:1c:77:af:fc:
2c:42:6e:4b:be:55:c6:ef:07:63:eb:18:27:23:3b:db:9f:a1:
1d:d3:e6:d1:ec:aa:75:78:2a:43:9b:f4:69:22:86:07:13:e7:
8d:3b:52:a6:4d:72:69:66:3d:3b:ff:bc:75:a3:8b:1b:89:67:
50:bb:ba:d6:77:3f:12:52:08:fc:39:19:03:b9:a7:e3:92:2b:
7a:0d:d2:12:bc:ae:c8:21:75:02:6d:a4:0a:26:ca:1d:21:21:
a1:9f:92:25:34:47:5f:78:75:05:3a:79:2c:c1:54:b0:51:7a:
c9:dc:21:ff:83:c0:04:bd:04:5f:15:84:d8:28:30:e3:45:d4:
58:cc:6f:47:d0:23:0c:ca:15:ee:64:e3:d4:9f:f5:8a:13:af:
9b:c5:fb:78:5b:e2:18:d6:fb:4e:27:80:d9:ff:18:35:55:d8:
45:ab:52:4e:37:17:6e:80:7e:40:16:10:0a:a4:d5:c9:dd:b0:
43:86:d9:5b:28:80:db:5c:a3:4a:4d:c5:70:07:b6:f3:fe:76:
01:30:0e:ac:e1:b5:46:42:71:e5:3e:16:91:6b:62:1b:ff:b1:
3b:49:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:29 2026 by rpki-client