Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: NBvEXE4JwYW72B/uOm/vAMEltqXDpXW6jPoJ5cC9yp8=
Subject key identifier: 1B:C2:E3:FC:B0:57:26:03:CF:E8:5E:C4:E3:36:08:66:F9:EA:E3:E2
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 01A17DE1CF041AD22CC25439E2FF807A10A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: 02DE
Signing time: Tue 27 Oct 2026 15:01:52 +0000
Manifest this update: Tue 27 Oct 2026 15:01:52 +0000
Manifest next update: Wed 28 Oct 2026 15:01:52 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: C47t97OPgrvruClfgd3F6samLqHxRSTwxFQVnB/e6eQ=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:cf:04:1a:d2:2c:c2:54:39:e2:ff:80:7a:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Oct 27 15:01:52 2026 GMT
Not After : Oct 28 15:01:52 2026 GMT
Subject: CN=1bc2e3fcb0572603cfe85ec4e3360866f9eae3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:5d:de:47:0e:28:3b:de:4f:38:05:d7:7f:
d3:be:5e:4c:96:98:61:83:20:ce:d5:07:74:2f:80:
4f:7d:5a:d4:cb:2b:70:72:4d:9d:e4:5f:b0:7e:0c:
70:0f:3c:5b:40:6b:50:91:99:b5:49:97:98:73:13:
bf:27:23:51:e1:9a:ed:65:bc:db:64:1a:bd:a8:c3:
f5:61:14:8f:56:3c:f9:89:00:0a:4c:e9:00:be:a4:
e2:02:d6:e6:50:0c:12:3d:fd:31:73:dd:eb:e9:43:
00:a9:d4:15:a9:a4:b8:ec:ce:9f:c5:45:f1:4f:61:
b9:cf:8a:ee:1b:76:7b:40:78:f8:e5:ca:e9:53:e6:
33:a9:ef:e9:ca:dc:e4:4c:8e:66:e7:13:d4:17:aa:
c1:b3:10:bd:47:0c:bb:07:a4:96:b9:f6:41:38:d2:
49:df:ad:0a:65:df:b8:45:1b:10:fc:ad:d1:bf:8a:
64:88:04:54:60:9d:de:12:9a:8f:89:a5:4a:24:4e:
0d:75:ad:22:da:56:e4:05:9b:12:3f:c8:d3:17:ba:
6e:72:0a:de:63:5d:b4:58:02:e3:27:d8:b2:80:f5:
2c:62:fb:4c:0d:5f:a2:c2:ad:2c:fc:da:0a:92:68:
6e:77:27:6a:39:fc:3f:65:ed:a9:c2:84:da:bb:15:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:E3:FC:B0:57:26:03:CF:E8:5E:C4:E3:36:08:66:F9:EA:E3:E2
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:04:be:d4:66:18:72:fc:7f:fe:91:be:19:1b:a9:e7:4e:
bb:22:84:73:d3:14:96:02:62:59:f4:25:96:6d:fa:c2:b5:1a:
e9:e9:3a:17:11:e6:4b:be:81:49:c0:a6:dc:24:ed:b4:53:ab:
54:c1:88:ec:e4:0b:45:be:1e:e6:ff:46:21:42:ef:83:d6:10:
7e:f9:81:b8:1f:46:67:47:71:dd:ce:0a:e1:61:bd:e4:52:b0:
f4:2b:b6:19:3b:ac:d1:cf:00:51:8d:d1:68:cf:d1:eb:20:1e:
47:55:90:2f:cd:bc:5f:cd:14:34:12:ec:b4:ee:01:2c:5c:73:
fb:f5:06:6b:95:35:c7:ec:6b:bd:74:48:00:3a:1e:3d:c1:b2:
e7:0f:7e:f8:ee:7b:58:d3:7d:13:1b:a1:44:0b:41:e4:5b:0b:
fb:f2:d6:e5:1d:88:3e:7c:fc:36:aa:8a:16:55:9a:55:d7:dc:
74:c6:29:cf:52:b2:2b:ef:02:9e:73:94:7f:94:8b:2a:f4:16:
48:4c:67:2e:13:e3:70:7b:40:cf:dd:9a:c9:38:0a:83:8f:90:
01:1a:9e:59:35:fc:57:35:c9:47:cd:44:bb:14:a1:ae:3e:26:
2f:b6:94:08:f3:bd:d8:dc:88:b2:9a:ae:c6:cd:61:9c:a1:d3:
c7:74:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:49:47 2026 by rpki-client