Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: M5iCmsY8E4x9/hc+J/UT4MjGzWZbROfO8meDgqCfCOQ=
Subject key identifier: 8A:92:C5:A6:E6:A6:B1:CE:EA:BB:75:37:D6:CB:11:4F:CA:A8:DA:66
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 01A000CAA011C668600495DB6A469BFDFEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 15:01:14 +0000
Manifest this update: Fri 14 Aug 2026 15:01:14 +0000
Manifest next update: Sat 15 Aug 2026 15:01:14 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: Tyo+gyt/U60nQ92O+OIbOO6ogeJtNYYNVelBe2K2F4k=)
2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:a0:11:c6:68:60:04:95:db:6a:46:9b:fd:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Aug 14 15:01:14 2026 GMT
Not After : Aug 15 15:01:14 2026 GMT
Subject: CN=8a92c5a6e6a6b1ceeabb7537d6cb114fcaa8da66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:98:18:b9:d9:9f:39:29:dd:62:72:32:e5:
f2:b9:56:5f:42:77:d4:53:b8:99:4c:d2:19:8f:7a:
bd:45:dc:8d:43:a1:be:4d:79:60:08:b8:0c:51:60:
50:ae:e7:a8:0a:e3:1e:e6:51:04:c3:0d:23:23:b1:
2c:57:c2:3d:fe:a4:05:a4:33:85:8e:fd:3b:81:6c:
ce:d0:97:12:07:b3:2f:89:b3:fd:2c:18:36:5f:2b:
67:61:1f:4f:be:d8:fd:1e:4c:2d:f9:89:60:4d:96:
ad:01:6e:4a:66:e4:d4:e2:94:0b:1a:b4:33:d0:d6:
6e:1c:e0:84:b6:35:c6:ae:86:d8:b8:47:8d:7f:cd:
8d:cc:be:c8:7d:f8:df:05:a5:8b:52:91:de:46:a8:
b7:19:70:dc:7a:40:ef:66:04:49:fb:d3:5b:86:d4:
04:14:1d:a4:90:d5:34:82:b1:98:75:b5:ae:07:fd:
48:57:cb:0f:76:ea:fa:1f:98:c8:5c:0d:2a:d3:0a:
7f:01:d9:cc:17:f4:ce:8d:20:76:e4:92:16:95:f0:
91:5e:bb:43:81:74:70:8e:2c:bf:26:51:52:47:5b:
b0:82:f0:55:0f:63:9f:c8:b4:ef:49:36:af:46:70:
18:d0:37:f0:0f:7a:6c:a4:10:49:20:aa:1e:59:a1:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:C5:A6:E6:A6:B1:CE:EA:BB:75:37:D6:CB:11:4F:CA:A8:DA:66
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a2:8c:a8:3e:2a:ed:a7:17:5e:c4:5c:0e:40:19:21:1c:f7:
39:93:3f:e2:11:b3:2f:10:e0:e9:9a:7e:e7:09:dd:69:bd:b0:
fd:a0:7b:ed:19:0f:a6:00:ea:2f:b3:b7:78:d4:a6:96:72:a5:
49:59:a1:89:d5:47:38:08:85:a7:b4:e3:36:93:2c:9b:a0:c4:
98:d1:fb:51:0f:15:fb:69:a2:76:38:bf:19:10:9c:20:97:7a:
d2:a2:d5:5d:0d:db:1a:4b:d5:9e:27:b2:69:d2:b8:3b:fd:18:
e2:a0:48:1f:b3:b3:2d:6e:b1:ba:e2:99:e4:75:7f:3b:86:81:
8e:8e:c3:22:3f:05:07:fd:98:c9:d4:db:7e:90:1d:59:51:c4:
b5:65:df:f9:63:b2:70:8a:3f:23:ce:b5:02:cf:49:8e:2b:03:
1b:23:61:76:6e:af:63:b8:e3:91:74:9e:5c:74:87:77:bd:f6:
3b:54:90:6a:df:98:f4:a7:d5:49:b3:32:ad:5d:d5:ab:fc:1b:
df:43:38:fc:0c:82:d9:9f:e5:d3:7f:e4:23:2f:81:a5:e9:9a:
6c:27:ec:fd:b4:16:d9:ac:31:ee:04:1f:07:87:73:18:ab:2d:
4e:94:e0:5b:04:70:34:fd:19:4a:7b:ae:b5:2a:a1:b7:a9:a2:
9e:d2:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:13 2026 by rpki-client