Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
File: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft (raw, json)
Hash identifier: RBNrT5nIhsuMEWS+29cRQC4xsGO8n0f4DN+Tyg0w4C8=
Subject key identifier: 19:85:76:3D:A1:A6:B8:0E:56:C3:20:10:BF:74:6D:5C:A5:B3:22:89
Authority key identifier: E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
Certificate issuer: /CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Certificate serial: 01A040BBA21A694415627C112ABF80403128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
Manifest number: 03AB
Signing time: Thu 27 Aug 2026 01:00:33 +0000
Manifest this update: Thu 27 Aug 2026 01:00:33 +0000
Manifest next update: Fri 28 Aug 2026 01:00:33 +0000
Files and hashes: 1: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl (hash: Gcw7dMtsHATyCx2y044+zlGp1HsKmxGFLWTKgUCFHVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:a2:1a:69:44:15:62:7c:11:2a:bf:80:40:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Validity
Not Before: Aug 27 01:00:33 2026 GMT
Not After : Aug 28 01:00:33 2026 GMT
Subject: CN=1985763da1a6b80e56c32010bf746d5ca5b32289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:35:b7:94:3e:1c:44:89:03:98:1a:37:16:
69:af:22:97:2f:5d:19:42:bd:61:71:e2:34:fb:bc:
fd:af:12:c8:02:d5:30:8c:ef:bf:5a:25:b2:c9:a5:
da:f3:40:60:9e:c3:4c:09:25:0f:a1:de:1b:9d:a0:
54:1b:0c:db:00:1d:0a:61:02:35:3c:1e:ac:5e:10:
21:e7:f1:4f:a8:b4:7e:fd:e1:8f:28:2f:1f:30:21:
70:c3:fa:ae:0a:32:d0:36:91:bb:b8:11:51:98:3d:
87:5e:1f:2d:b4:f2:33:cd:ac:51:ec:63:c5:e5:8e:
af:d3:08:09:be:e1:a8:9f:40:8d:05:51:d3:c9:bf:
e9:43:eb:be:0c:6e:6a:ba:9c:53:99:3f:8b:26:1b:
fb:81:12:d4:90:df:0c:7d:26:e6:7b:2e:2e:f4:b1:
53:bd:78:f0:52:82:ce:f2:95:dc:19:b3:cd:ef:43:
47:44:6a:35:a8:41:b7:7b:47:bf:cb:8c:a4:71:ad:
96:67:df:90:73:95:15:c1:c5:70:56:31:36:21:90:
52:01:4b:d6:92:35:f3:20:99:4c:33:02:da:41:4a:
20:e5:9f:a6:1d:6d:98:30:ec:49:7c:0c:c2:c5:a7:
53:cc:7f:c4:3b:ec:d8:0e:2a:20:f7:04:09:bc:e6:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:76:3D:A1:A6:B8:0E:56:C3:20:10:BF:74:6D:5C:A5:B3:22:89
X509v3 Authority Key Identifier:
keyid:E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7b:af:8e:e0:be:27:c3:d2:7e:c1:13:4f:eb:e7:5d:10:ea:
55:47:77:2a:b1:8c:80:a7:a6:1d:9d:49:bf:dd:e8:cc:2e:96:
d5:12:9b:8f:47:77:b4:ab:b2:21:cd:96:6d:52:38:59:39:21:
55:4a:f5:bd:83:a8:2d:05:00:55:cf:39:f5:27:94:8b:57:04:
61:d6:0f:87:88:f5:e3:06:24:08:32:1f:58:fc:aa:ca:11:a0:
ea:40:23:0d:5d:ef:eb:e4:6c:f1:91:7d:b7:19:86:14:81:09:
a8:96:d6:45:38:5c:09:62:dc:cb:57:23:a3:53:0e:30:19:70:
c1:0e:84:0d:34:d7:b3:b6:f0:db:06:08:22:51:ec:ef:25:7a:
bd:8d:ac:c0:da:12:7d:55:59:27:f9:99:a0:0e:03:96:36:8a:
a8:e7:43:cc:0b:0d:46:2d:e8:f5:fb:69:12:e4:19:bd:24:32:
63:ae:6e:96:3b:83:32:2f:d6:66:22:47:f9:fb:98:14:56:7a:
54:a2:9f:6c:1b:a9:94:95:82:37:1d:23:59:73:99:db:f8:3a:
6f:33:bd:c3:f1:12:7d:30:bb:74:6f:0a:d9:92:37:a3:a8:4c:
98:34:37:a6:92:21:a3:26:f7:73:85:6e:18:ed:35:6c:a8:34:
2e:8c:b9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:47 2026 by rpki-client