Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: ijEatRF3zjLq4Qhq9C2esN7cI6IQ5W8NgAJs0AHa1rc=
Subject key identifier: 62:6C:92:17:B2:6A:F6:89:7F:DF:2E:9F:3E:FE:D8:12:4F:EF:70:C2
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 01A17A04821C87CF2AEA47F22A34C1C36964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: 02DC
Signing time: Mon 26 Oct 2026 21:01:18 +0000
Manifest this update: Mon 26 Oct 2026 21:01:18 +0000
Manifest next update: Tue 27 Oct 2026 21:01:18 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: xbmt0o8hc+7UR6UxZzZJ6ZxhcxEcrki4/A4ByMnOBgs=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:82:1c:87:cf:2a:ea:47:f2:2a:34:c1:c3:69:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Oct 26 21:01:18 2026 GMT
Not After : Oct 27 21:01:18 2026 GMT
Subject: CN=626c9217b26af6897fdf2e9f3efed8124fef70c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:3f:73:96:74:9d:49:e7:32:97:bf:dd:02:
9a:76:1a:bf:c7:06:54:a0:25:a9:73:b6:d5:57:31:
11:23:17:0d:28:f9:ca:bd:b0:c2:d7:9d:22:6d:b3:
c2:31:81:37:b5:14:cc:30:10:6b:e3:2d:07:d8:a8:
cb:17:75:d7:64:29:1f:16:88:45:93:7c:77:b8:f9:
5a:6c:a2:44:db:81:58:11:71:93:d3:fa:a9:63:4f:
34:fc:d6:f1:82:f9:df:f6:d4:53:a2:f9:eb:c1:ab:
f1:c6:db:b0:10:75:58:47:ca:03:df:51:d9:6a:f3:
fa:0e:92:8f:9c:ee:2b:54:1f:94:a7:62:98:98:3c:
47:dc:fd:f6:b3:c9:a3:16:52:26:83:7d:1e:e8:84:
03:c9:b0:04:0d:2c:19:a7:e3:58:f9:2f:f1:e2:24:
13:dc:a6:2b:6f:95:71:e4:f4:05:c9:3d:b5:e5:55:
b0:62:3d:1d:ff:69:8c:30:74:64:3f:e9:76:6a:73:
7e:8a:ee:15:b7:69:50:b9:5e:2f:91:33:b7:c1:9f:
16:0e:15:93:ab:40:8f:23:b2:8a:3d:d8:e7:0c:d5:
26:9b:88:8b:55:d9:69:12:7c:cc:a5:ce:0f:6d:89:
5c:9b:f3:35:7e:cb:1e:33:90:97:35:19:ae:6d:8e:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6C:92:17:B2:6A:F6:89:7F:DF:2E:9F:3E:FE:D8:12:4F:EF:70:C2
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8b:8c:e4:02:ba:cd:ba:f8:5d:8d:bd:ba:2c:4d:21:5c:58:
6f:bd:a3:58:f6:01:32:ec:a1:78:40:19:62:60:7c:41:69:85:
9d:7d:a0:33:39:5f:c0:5b:f7:ec:11:56:ea:13:62:27:99:9a:
8d:f8:b9:d2:9e:1a:80:0b:37:de:63:5c:e7:02:80:ce:48:fb:
d2:64:b4:ad:12:62:1a:18:c4:51:a8:ea:22:a6:20:04:80:71:
e4:64:9e:6d:21:89:19:d8:79:a4:8e:4d:97:eb:84:2b:01:a4:
50:76:3e:bd:6e:1a:d6:3e:98:a2:51:9c:cb:3b:b8:d1:1e:c8:
d4:0c:2e:b9:95:a0:9f:c0:60:8d:1f:82:2b:ce:35:9f:51:ed:
a6:cb:1c:9d:a1:66:37:3a:8a:ab:74:51:0c:8e:16:df:53:ae:
4d:52:eb:b1:cd:a3:ad:99:1f:d7:98:f2:c5:df:20:1e:f5:4d:
9a:26:fb:7a:36:5d:ea:4b:ab:b2:55:f6:42:77:8e:f2:3b:58:
e1:dc:f5:ea:7c:90:59:a1:e7:fb:d5:8b:55:a2:8a:d8:d0:f4:
0b:1f:99:ec:e2:4d:24:a7:16:09:f5:d1:56:5d:ed:b6:c4:39:
01:2b:d5:7d:c5:8a:60:2c:0b:f5:c6:e2:c0:4d:b9:0a:de:46:
94:24:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:09:00 2026 by rpki-client