Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: xhtDmvmQIX8NEemQzOmK4/Dz2ujaIB8Z3CN9z2vzbYY=
Subject key identifier: 3E:E7:59:0A:5C:C9:69:0E:74:25:B4:CC:60:8C:D6:E4:3E:83:F1:4C
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 01A08C7B9DD0670699AF398E968355C02DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: 0261
Signing time: Thu 10 Sep 2026 18:01:46 +0000
Manifest this update: Thu 10 Sep 2026 18:01:46 +0000
Manifest next update: Fri 11 Sep 2026 18:01:46 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: 2elkeXFHJWtCaJ2r4rTeP6ZxBPisq6LumSF1DYQ+kBU=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:9d:d0:67:06:99:af:39:8e:96:83:55:c0:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Sep 10 18:01:46 2026 GMT
Not After : Sep 11 18:01:46 2026 GMT
Subject: CN=3ee7590a5cc9690e7425b4cc608cd6e43e83f14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:c2:fd:1a:7e:9e:1d:6d:94:80:47:e3:c8:
92:0b:28:fe:19:8a:d2:18:ed:d0:26:18:97:ef:bb:
af:73:ac:26:22:99:50:0c:83:c4:a2:14:b1:0a:14:
40:12:12:4a:92:a5:0a:68:79:a4:f3:29:ee:3d:5e:
76:40:01:ab:23:b7:60:e3:f8:31:3d:98:c2:69:30:
3c:f4:b9:7b:6a:19:09:2a:aa:33:45:39:f2:dd:93:
b5:d5:78:00:1c:e2:38:24:45:93:65:1c:c0:1b:f8:
e4:9f:02:81:ca:d5:e4:9e:db:1b:d6:82:aa:6a:fe:
32:91:fe:d1:99:0b:aa:f0:f5:98:a4:6a:83:aa:93:
ec:07:45:c7:7a:7b:7a:91:67:84:4d:ce:6f:41:dd:
6f:77:1f:05:46:f3:ff:4f:71:6e:a5:0c:25:c4:04:
08:08:04:f0:9f:98:05:0f:62:41:26:85:00:7d:12:
cd:db:a9:27:f8:3f:e2:01:a8:21:f2:4d:5d:d8:6f:
e9:bc:97:17:1e:7d:66:51:19:45:46:a7:2a:e7:b6:
1a:e4:fc:9c:9e:02:f3:cc:6b:10:82:6b:d8:95:3a:
7f:56:39:6e:54:46:38:13:6e:60:21:ae:bf:82:54:
70:1e:05:4d:e8:30:4d:d8:df:54:e0:1a:f6:ef:02:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:59:0A:5C:C9:69:0E:74:25:B4:CC:60:8C:D6:E4:3E:83:F1:4C
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:99:a4:af:8b:9b:93:01:bc:16:eb:4d:bc:cf:db:f5:57:fc:
7f:1f:98:61:00:61:d1:de:c5:1d:b7:b8:b1:2e:e2:5c:11:33:
a8:81:d5:a0:e7:97:9c:6d:08:20:cc:0d:35:b2:a5:31:75:57:
68:05:c9:a3:a9:12:f8:01:ca:f3:34:11:92:97:44:67:9f:dc:
1b:85:b4:ad:5c:f8:a8:d7:d8:dc:3d:dc:56:78:d4:07:e0:fe:
84:99:ef:0c:2e:b5:0f:76:93:6a:79:18:3f:8f:ed:ec:8b:e7:
72:47:c3:6c:d9:99:40:a5:28:d4:b5:a2:88:0f:ca:b6:be:d1:
bd:24:b0:d2:77:e0:67:58:14:51:03:4a:21:a6:12:4b:2e:ba:
0c:84:6f:c0:f6:7c:df:a4:fa:53:5b:2d:7c:a9:02:63:d1:82:
97:2d:26:56:5f:39:b7:31:ff:fd:0b:f8:0a:3a:b8:07:cd:3e:
ef:b2:91:56:32:40:24:60:07:5c:56:c6:d0:9e:38:23:33:48:
86:34:3a:78:4d:f8:a4:e5:fe:ef:61:7b:f2:69:2b:bb:9f:26:
78:94:a5:94:2b:2e:97:b0:ea:72:69:62:a5:33:6f:e3:28:b6:
ec:f7:48:e2:eb:3d:bb:eb:c7:92:68:26:7c:a7:a2:3b:34:30:
05:22:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:20:51 2026 by rpki-client