Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: oWgGFdPqACfAxIoTR8z7ZXjIJzovTRKbIQ8cvNJ+BzI=
Subject key identifier: 25:D4:76:32:EF:97:87:26:91:E0:A6:C4:C8:E1:E7:D6:E1:1F:0D:7A
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 01A160E9DA48A50461FC0AB75D93820A58A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1AB8
Signing time: Thu 22 Oct 2026 00:01:40 +0000
Manifest this update: Thu 22 Oct 2026 00:01:40 +0000
Manifest next update: Fri 23 Oct 2026 00:01:40 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: i+OW9MIKQTIMcjiOepi2KwslH08Mst+lQ/vCIWoMBEo=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e9:da:48:a5:04:61:fc:0a:b7:5d:93:82:0a:58:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Oct 22 00:01:40 2026 GMT
Not After : Oct 23 00:01:40 2026 GMT
Subject: CN=25d47632ef97872691e0a6c4c8e1e7d6e11f0d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:b5:cf:a7:3b:69:38:f7:9d:df:ec:dc:1a:
66:59:d4:5c:9c:21:6c:ef:a9:f6:68:0d:57:91:8c:
68:40:b4:bc:3c:8c:df:aa:09:c8:0e:c3:68:96:08:
a4:6a:4f:79:18:6f:35:8b:28:f3:ce:dc:90:f6:56:
ad:96:5d:27:ff:8c:f5:03:3a:5d:46:68:bf:7a:12:
f2:88:db:aa:85:1e:8b:cc:cb:b8:cf:25:1f:eb:a3:
f5:85:8d:50:cd:8e:bc:47:08:38:15:3b:d1:f9:63:
59:42:83:68:98:84:2b:46:fa:df:5f:cc:fb:09:67:
db:15:1b:f9:4c:8f:84:f5:76:5f:c6:76:27:7a:79:
17:09:3e:4a:56:72:33:90:a4:19:bd:89:87:69:a5:
a8:ed:68:f8:01:35:62:5e:8e:57:69:85:5c:7d:a0:
85:2a:59:4d:a7:f8:48:4c:34:ac:55:13:ec:fa:0e:
ee:97:ff:41:80:d5:44:50:2d:8c:30:7c:66:68:b3:
b3:38:9f:36:ea:37:89:8f:55:31:b5:00:b6:0f:57:
85:69:b2:a6:24:82:b2:dc:41:c4:c7:75:8c:b1:cd:
0f:a6:43:9a:1c:4a:0e:d5:31:c7:c6:34:ac:35:e9:
61:fc:0d:2c:7c:2f:0f:25:59:8d:2b:dd:e3:68:1f:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D4:76:32:EF:97:87:26:91:E0:A6:C4:C8:E1:E7:D6:E1:1F:0D:7A
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2c:47:86:4d:df:b3:94:71:ce:19:21:7a:f2:b8:96:8f:86:
a8:13:be:57:87:b2:a9:7f:a8:00:77:61:80:b3:85:8e:91:61:
75:e2:9a:31:2e:08:fc:07:a9:3f:31:4a:96:c6:4d:da:99:68:
1d:48:ea:fb:d0:d2:11:b4:75:be:78:0f:2d:61:5d:af:bb:8d:
eb:59:1a:be:80:40:e8:be:3d:69:7a:ac:ae:68:d8:34:a1:8d:
8b:36:b8:8d:b7:b0:58:f7:89:58:41:e1:38:f6:63:d7:e3:2d:
a3:f8:be:3a:10:3f:0e:27:4a:0c:10:cb:06:26:d9:1d:d3:3c:
ed:51:8c:23:b7:9e:2b:a3:b4:3b:53:68:71:4b:78:a3:8a:f5:
04:18:dd:b5:bd:97:7b:4e:bb:e8:ce:fc:eb:cf:58:bf:b1:fb:
bc:d7:39:c0:06:11:d8:57:9f:7d:a8:07:4a:a3:a9:7d:4b:cd:
2d:c9:d6:04:0b:5e:23:90:94:42:a6:5d:61:7d:f2:48:66:3d:
81:94:ad:f3:c6:49:d9:6e:20:4c:32:b5:1e:be:dd:2e:0a:0e:
84:5b:bf:a4:2b:01:ff:4c:dd:f5:6d:3f:62:f7:65:73:06:1c:
06:c4:c3:1d:5b:fa:56:48:a8:71:36:23:08:61:6d:5e:0d:13:
98:a3:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 07:54:21 2026 by rpki-client