Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json)
Hash identifier: 27eqerDadB+pPgVOd5/cr8ZL2go19HCiybSYy7oeFq0=
Subject key identifier: 85:B9:7D:08:6A:E2:7C:54:5F:81:1E:FF:E8:EB:2A:A1:BD:69:5C:0C
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019FF8353490529E6BD0CF325B3BA5C48D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
Manifest number: 024A
Signing time: Wed 12 Aug 2026 23:01:04 +0000
Manifest this update: Wed 12 Aug 2026 23:01:04 +0000
Manifest next update: Thu 13 Aug 2026 23:01:04 +0000
Files and hashes: 1: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: mRtRavmVkGiosYKz3U2jQ6yN0w9LkcmWtZlxjo8iyuA=)
2: Cdg-XL0zdHAzVrXI1UKniF1NxrU.asa (hash: oCxXm5PJ/tcVHgZif1qOHjXdRM54N8FVZ24RsEa01xM=)
3: ayeAuK6AHwJljOw6TVN3S1sed2E.roa (hash: iOPQ2GWcRYReaL6j28AmLWw1MVXLLjYyFBov2MAEJCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:34:90:52:9e:6b:d0:cf:32:5b:3b:a5:c4:8d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: Aug 12 23:01:04 2026 GMT
Not After : Aug 13 23:01:04 2026 GMT
Subject: CN=85b97d086ae27c545f811effe8eb2aa1bd695c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:1a:3a:e4:99:68:c8:ce:c3:a4:78:f4:99:
3d:2f:b6:6b:30:e2:51:cd:ba:eb:30:93:f5:ac:ff:
0c:98:1f:e5:6d:62:4c:fc:e5:d9:45:17:0a:c1:b7:
f3:db:4e:b9:ca:62:e3:5b:02:99:47:4c:15:5c:b8:
33:56:2b:d9:10:9e:b7:1b:c6:99:6f:a4:e8:cb:f3:
6a:46:6b:72:f6:49:de:6e:fc:e8:13:8e:ba:d3:09:
cd:a9:0c:2a:fc:74:64:d8:7e:28:15:e6:b3:4b:27:
89:b5:8a:a7:25:b7:a7:2d:4c:dc:a4:d3:3d:d2:76:
71:3a:a0:14:9e:2f:b8:af:99:7f:23:d8:2d:64:b8:
e1:cc:17:ee:fb:bb:07:88:de:58:35:62:9b:85:b5:
9a:ef:89:b3:4e:57:89:c0:bf:58:20:65:a7:43:1a:
06:a7:71:1d:73:2b:6a:88:91:43:99:b6:18:bf:1b:
d3:4a:a5:93:04:84:88:f8:67:80:8b:6e:73:ca:c5:
f5:21:44:22:b5:20:2d:3a:d7:22:88:5d:1b:2e:1f:
75:24:65:21:06:16:f8:2e:18:b5:88:d1:f3:1a:ab:
14:99:87:6b:5a:70:52:4c:d5:7a:22:ee:4c:7e:fc:
0e:93:ad:22:72:96:84:7e:32:6b:31:d9:8d:cc:aa:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:7D:08:6A:E2:7C:54:5F:81:1E:FF:E8:EB:2A:A1:BD:69:5C:0C
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3c:09:65:99:5f:70:0f:60:bd:07:c4:73:66:20:97:81:d0:
87:e7:bd:56:78:ee:b3:33:ad:69:ea:ad:ed:1d:d2:4f:2a:c9:
35:44:78:8c:f1:d8:23:16:c1:eb:43:6d:d1:3a:12:ea:db:97:
58:80:e0:bf:d4:7f:31:6f:9f:3c:77:8f:16:5c:d4:98:cd:ba:
18:a1:54:24:ac:72:bd:97:50:9c:0c:1f:a8:47:e5:10:0c:83:
02:0b:2a:a7:9e:1f:0e:63:66:94:99:ab:81:f4:c3:b1:08:9c:
de:0f:22:66:e1:4c:a0:f6:ee:72:10:5e:dc:f0:71:d3:ec:1f:
2c:49:b9:4f:43:9a:86:5b:01:11:45:96:0c:d1:88:67:b7:f4:
ce:e7:e4:2b:ef:f6:06:04:49:00:76:14:8a:00:02:56:b4:61:
42:7b:a6:fb:10:29:4c:53:11:b8:7a:62:95:db:47:9b:f0:cf:
17:3b:ce:68:aa:9c:61:5c:f9:d6:3a:5e:86:dd:4a:43:04:ec:
ee:c1:e9:48:b4:52:e0:36:f3:4e:ae:1c:20:09:44:ab:64:10:
53:f0:18:e6:f9:39:70:05:57:33:0b:a8:c3:2b:7b:a3:4f:ca:
32:ca:64:9a:1e:c1:1f:a1:f0:f2:51:52:f1:a0:a9:e9:4d:bb:
33:db:b1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:00:09 2026 by rpki-client