Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: kwNLUEAcUyV1g+mBnp0Cx2eMu+cNdCu5H8D2hJEAn0A=
Subject key identifier: 30:B4:72:1E:27:D3:3E:32:B9:A3:9D:59:A3:E1:FC:67:CE:30:C8:2D
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 01A186084F5F58C4036E6C5497E95A9526B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0C01
Signing time: Thu 29 Oct 2026 05:00:53 +0000
Manifest this update: Thu 29 Oct 2026 05:00:53 +0000
Manifest next update: Fri 30 Oct 2026 05:00:53 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: 4HKg4lYG83W3abISvCUowxVx4dK2o1ZXFjiJJQe/TeA=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:4f:5f:58:c4:03:6e:6c:54:97:e9:5a:95:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Oct 29 05:00:53 2026 GMT
Not After : Oct 30 05:00:53 2026 GMT
Subject: CN=30b4721e27d33e32b9a39d59a3e1fc67ce30c82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:f0:65:0a:95:0b:34:72:fc:9c:87:70:b1:
6d:0a:26:2c:38:d6:b7:4a:c4:6b:9f:fa:91:57:ec:
23:c5:6c:26:2e:2a:c7:f6:88:9a:39:39:f7:a6:55:
00:bc:3d:8a:1c:2f:68:99:cc:91:fd:87:5b:d0:c3:
ba:6d:cd:c7:15:00:65:97:19:5a:ba:93:91:69:11:
6d:6c:d6:3a:46:34:2c:6b:db:ac:5c:0b:02:5b:43:
cf:8f:8c:92:da:5b:17:f8:b6:82:4d:92:ce:5c:03:
4e:86:13:a1:83:e6:01:6a:80:3f:c4:99:cf:a3:64:
ee:7d:1b:4b:b6:25:ca:0b:ea:fe:cc:11:d9:f1:39:
d1:4a:72:ab:4a:e0:f4:20:29:67:5c:f1:a9:2c:4e:
90:8b:ea:80:bf:68:57:45:27:71:cf:63:e4:2f:34:
03:6f:3f:33:dc:2e:84:a0:eb:54:68:15:cb:d3:99:
c7:28:87:f6:88:3a:ce:94:f4:31:37:22:c0:32:32:
8b:f3:60:1d:70:4d:53:6e:b5:d2:cf:bb:9e:10:65:
2c:c6:5f:81:33:80:a7:60:a4:5b:d3:1c:bc:52:ad:
55:55:ce:ad:d8:43:b7:6f:fc:0d:2c:74:db:4b:1c:
cd:4e:d3:38:51:90:96:c2:73:42:d2:fa:b6:8e:ec:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:72:1E:27:D3:3E:32:B9:A3:9D:59:A3:E1:FC:67:CE:30:C8:2D
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:04:d2:f1:e1:2c:3d:f2:8a:d0:1e:69:88:c1:d2:e5:1d:c9:
7b:e1:87:ef:9c:ea:97:80:5f:9d:34:ef:db:2a:32:e5:a7:b5:
08:7f:25:a7:97:bb:3a:65:99:20:03:5d:48:b8:8e:bc:cc:c5:
65:65:29:b2:e8:94:09:35:52:32:98:99:25:06:2d:34:f4:38:
c9:f8:1f:8b:06:f6:98:5e:a2:94:3c:9c:5d:96:9f:d4:53:bc:
73:e6:84:82:b2:39:8b:f3:6d:d4:bc:2e:2c:12:13:fa:18:54:
5a:51:e4:3a:fe:41:54:e7:d9:e0:37:51:3f:1d:76:aa:b0:4f:
dd:85:1c:c6:5e:95:0e:17:84:37:84:1c:09:11:cb:3e:36:05:
e9:dc:34:66:0c:ff:df:ae:99:16:29:b8:fa:22:c2:cf:69:a0:
2e:ab:6e:94:f0:93:37:6c:0c:30:6c:b1:a9:70:68:81:7a:e6:
cb:44:38:3c:4a:4b:62:c6:3b:85:50:40:15:cd:18:a3:7a:72:
ba:0e:40:a0:a6:86:c1:6a:f4:64:ca:d3:d5:2b:48:ae:d5:17:
43:d7:03:75:01:b8:c5:23:3b:11:bb:ce:d3:d4:d9:6a:4e:0d:
ad:4c:f7:86:a1:4a:3c:5e:62:ef:6e:50:e9:4a:0b:94:1a:87:
3e:70:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:56:44 2026 by rpki-client