Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: 0JUnZ0ePxQPqELkIEf8FSdNA7buRrqK9JvV1uE3LAEk=
Subject key identifier: C4:6E:9D:56:75:1F:22:E3:8E:E0:E5:D2:76:6A:66:6F:2F:94:2C:D9
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 01A13D814A816D0F67D188EA45B5CD1EBAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 03:00:45 +0000
Manifest this update: Thu 15 Oct 2026 03:00:45 +0000
Manifest next update: Fri 16 Oct 2026 03:00:45 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: Di07GmNy3sjjZzzE8B/RosgHqZBhoL9HbtTiNylUKT4=)
2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:4a:81:6d:0f:67:d1:88:ea:45:b5:cd:1e:ba:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Oct 15 03:00:45 2026 GMT
Not After : Oct 16 03:00:45 2026 GMT
Subject: CN=c46e9d56751f22e38ee0e5d2766a666f2f942cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:f0:b7:e4:4b:7a:8c:76:19:94:68:76:7c:
b1:9a:bd:46:a4:71:1d:7d:73:8d:17:1a:9c:8c:78:
c9:f9:ad:80:cd:e1:28:d2:07:cb:a8:c3:27:87:96:
81:6a:0f:e1:b1:f8:4d:9e:b2:c7:f6:d3:df:ae:bf:
d0:87:23:83:4f:c9:b3:b9:88:fa:64:77:9f:9d:44:
30:18:a4:b2:cf:b8:e2:a4:6b:f8:ba:3c:a1:5f:87:
82:18:2e:97:99:54:e2:34:48:c4:5f:94:5c:84:0a:
6f:23:0e:0c:57:b1:65:1f:02:a3:50:21:00:58:47:
57:6f:56:44:20:9d:b0:5b:4b:42:11:ca:b8:f7:b8:
bf:e8:34:fe:aa:2c:4a:35:c7:88:cf:46:65:f0:09:
e7:42:8a:d9:12:6d:2f:c1:77:8f:fe:36:b5:df:2b:
b8:b9:e9:23:71:4c:b4:86:74:93:ef:f4:c3:45:f3:
da:f4:e6:35:da:91:96:c5:e3:13:b8:a9:8f:7c:f9:
ef:65:68:1c:39:34:e3:56:fd:b6:12:e1:ee:09:ad:
4a:07:3e:a5:49:2e:78:5c:e5:01:79:5e:1a:79:45:
6b:4a:57:a1:67:f3:b7:33:0c:8b:0e:1c:b5:f7:5d:
85:27:69:32:b0:36:c2:6f:98:83:aa:7e:5c:5e:0b:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:9D:56:75:1F:22:E3:8E:E0:E5:D2:76:6A:66:6F:2F:94:2C:D9
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ea:c4:b8:ca:d8:5e:08:51:0d:d4:27:37:64:22:e8:27:90:
c0:dd:1d:3e:96:f7:2a:68:02:8a:7a:a0:d8:24:2b:f7:72:4d:
d6:e2:c7:2b:30:5f:d7:ef:6f:00:a7:af:e2:b2:1a:27:5b:1d:
34:be:ff:76:a4:8c:8e:16:1b:20:66:ec:25:02:cc:7e:cb:5c:
2d:c1:b9:28:fd:12:f0:29:b8:ba:27:39:61:0a:23:50:9c:51:
89:11:90:32:b3:f9:71:4d:42:9f:f7:b1:06:03:6e:3b:b0:47:
d5:b0:51:99:01:7a:0c:ea:f2:16:ef:ea:08:9f:1e:05:1e:e6:
f8:37:be:44:5d:8e:de:50:b9:35:1c:cb:59:fc:b8:8a:1d:62:
98:66:06:99:0e:44:5e:e4:68:71:fa:0c:67:cb:21:2b:a6:88:
4e:f1:c5:8f:49:20:d8:c1:fd:b8:94:ca:7b:e5:d4:a7:00:9e:
8b:f4:5e:52:56:31:b1:17:b6:15:f7:80:0a:04:2b:9d:1e:a9:
26:bb:75:b4:79:7d:69:52:24:4f:ce:f5:89:0c:52:9b:08:b6:
87:5a:b8:56:cc:4d:9a:65:18:3b:5f:48:e3:48:9a:d5:29:86:
a2:6d:8d:fa:3c:86:2f:b0:7d:16:3d:fb:a0:34:59:24:f9:53:
14:f2:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:32 2026 by rpki-client