Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: fPgzPzQjq0GmswXxwz+ZJmyvvs9oInguyJ1l5Bhn8CA=
Subject key identifier: DC:7F:13:A8:AF:A1:68:24:EF:4A:A8:DB:C4:FD:2D:69:4D:B4:58:C0
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 01A08AF9F39B438024B2360C4E380F1FF86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0B7F
Signing time: Thu 10 Sep 2026 11:00:31 +0000
Manifest this update: Thu 10 Sep 2026 11:00:31 +0000
Manifest next update: Fri 11 Sep 2026 11:00:31 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: ZK3SDS+ipQ9+bCv4owL3BShiCA6eBYn7GKascAVehiw=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:f3:9b:43:80:24:b2:36:0c:4e:38:0f:1f:f8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Sep 10 11:00:31 2026 GMT
Not After : Sep 11 11:00:31 2026 GMT
Subject: CN=dc7f13a8afa16824ef4aa8dbc4fd2d694db458c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:48:a3:f4:51:49:4e:38:5d:20:e3:f4:4f:
1a:66:bc:cc:a2:fe:8e:c3:21:87:95:ba:a3:9b:96:
0b:78:16:06:83:0c:a3:66:2c:eb:e0:fa:86:6e:dd:
6b:61:49:11:aa:4c:5f:65:4f:ae:c0:f6:1f:9c:e2:
fe:f7:00:98:fa:20:2d:b3:c8:8c:6d:df:4c:8c:b0:
ea:70:81:97:84:01:9e:9d:c4:82:90:00:e6:d9:15:
dc:53:c8:01:59:3b:2c:29:da:6c:82:bc:2e:5a:f5:
f3:2f:0c:65:07:a9:c6:bf:04:e9:16:32:b6:bc:2c:
30:93:59:41:49:cb:1c:1b:ca:96:cc:a2:9d:bb:d7:
b0:15:29:aa:ff:bd:f5:ec:cb:d0:7b:4d:d7:c8:73:
db:7d:58:a2:cd:67:35:73:26:97:d3:7c:04:03:60:
7e:9b:99:5d:3f:e3:2b:b7:b7:42:5e:c0:2e:6e:3f:
40:1b:af:89:c2:3d:35:16:0f:17:3b:f0:ae:78:0c:
ca:b3:54:2d:99:49:94:32:39:35:4b:31:54:3a:a0:
14:c3:cf:7c:44:41:91:9d:da:11:c9:32:cd:39:47:
3d:c1:70:e4:e0:4c:4d:e0:0f:f2:9f:bd:39:9a:bf:
d8:82:45:78:c4:ac:46:a4:c1:9e:ce:8e:b9:8a:7f:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7F:13:A8:AF:A1:68:24:EF:4A:A8:DB:C4:FD:2D:69:4D:B4:58:C0
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:78:ca:39:1d:1c:14:f8:4f:0d:5e:3e:70:cc:14:86:c0:
b9:9d:68:85:8c:b1:a1:7f:b5:12:f1:02:69:17:90:59:c7:35:
47:a8:ef:4e:6d:b5:0f:fd:d0:01:6b:bd:fc:6e:87:e6:46:d6:
91:47:7e:6e:93:d6:24:df:83:6e:90:c0:d1:30:25:2f:f1:bc:
ea:9b:21:9b:1b:14:24:51:63:ce:0b:0a:2d:fe:19:85:e6:67:
e4:9c:96:9a:b0:78:d8:6f:d6:f5:14:ad:91:9c:f3:0c:6e:3a:
48:45:e4:51:95:b6:ca:b4:fc:ee:38:d3:71:53:05:58:d7:ca:
94:72:06:75:4b:3d:c5:dc:96:c7:56:cb:12:18:72:52:57:7d:
cb:46:d9:b9:de:99:4e:8d:25:72:84:69:0c:e7:30:94:1c:fc:
97:1e:a3:dc:17:02:46:24:5a:40:69:11:9e:ff:22:24:6b:4b:
5c:64:5a:be:cd:43:91:53:5f:46:68:81:53:31:90:73:22:e4:
9b:e8:6b:58:78:40:7b:f0:d8:16:4c:f5:36:8b:d1:ab:7d:4c:
4e:32:55:83:f7:bb:f5:e3:f8:76:db:82:25:1d:43:d7:4d:98:
9f:06:89:0d:a2:14:05:ab:fb:9d:c3:95:cb:de:d9:c3:7e:52:
ca:11:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:39:20 2026 by rpki-client