Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: iK5Z42bnr1sGiJ2fQrDSdbWMznjkdEeaRm5clkjioww=
Subject key identifier: C6:66:3E:DA:C7:A1:F0:CF:A3:F4:B4:57:1F:77:05:5B:88:83:35:C9
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 01A13CA54D83B858D1BA9DBFEC1AC759EB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 23:00:28 +0000
Manifest this update: Wed 14 Oct 2026 23:00:28 +0000
Manifest next update: Thu 15 Oct 2026 23:00:28 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: TtnTnvrheGxESojwQ9wXnhqqVgDj2ARJv6A7xk80Ac0=)
2: l26a7R_zJZToxzZfQDSNdGwONXo.roa (hash: f6mXkllCRchDTdmRlgeark5dgGsFI7jH1YE/DCr29Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:4d:83:b8:58:d1:ba:9d:bf:ec:1a:c7:59:eb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Oct 14 23:00:28 2026 GMT
Not After : Oct 15 23:00:28 2026 GMT
Subject: CN=c6663edac7a1f0cfa3f4b4571f77055b888335c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:b1:fc:47:1e:e6:1a:31:3d:8e:3d:b8:b3:
f3:ef:ca:71:d5:d0:d3:1c:05:1d:61:9e:17:c6:cb:
49:ec:dd:71:70:50:bc:4e:34:a3:5d:f7:25:be:31:
ce:cd:38:fc:60:88:89:67:cd:bf:16:4d:65:48:db:
ba:2f:60:da:5f:fa:c7:9b:42:2d:97:e0:d1:ad:85:
fa:5f:0b:e4:50:7a:81:3e:95:e7:46:34:cc:67:87:
aa:ee:9e:b2:e4:cc:67:17:31:b6:59:23:2a:a6:65:
a9:e7:48:96:c0:c1:2f:da:93:6f:fb:c9:11:e2:2e:
89:cc:1f:ed:6c:da:b1:3e:ba:4c:ef:86:de:d9:4d:
81:75:5f:d9:f3:35:c9:af:ca:5c:91:a7:66:d6:d1:
4c:b1:24:27:b2:99:ba:4d:fe:c8:a2:0e:6f:63:26:
f8:84:7e:52:60:22:a7:31:05:34:e4:72:91:02:ab:
47:fe:df:8e:5f:c3:49:99:d5:47:f1:e3:04:11:33:
f9:9d:86:17:cc:a0:97:ef:8e:c1:de:e6:62:98:98:
05:be:8b:8c:45:99:30:96:15:ea:ab:94:15:a3:68:
ad:a8:cb:b3:0f:ce:6e:e3:48:37:3c:e1:2f:ff:c5:
8a:e5:07:75:b7:71:cd:46:5a:cb:9d:61:39:fb:4c:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:3E:DA:C7:A1:F0:CF:A3:F4:B4:57:1F:77:05:5B:88:83:35:C9
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:25:dd:e5:d6:fd:e1:bc:e1:95:06:57:e8:3e:1e:4d:04:bc:
bb:2e:3b:2a:a2:9e:91:ce:c2:bc:6c:a4:fe:be:97:bc:37:36:
8e:8f:13:c7:e5:45:f0:e1:1a:a8:ba:dc:04:17:e7:3c:93:48:
52:c1:99:81:39:99:11:12:31:47:52:36:87:94:6f:33:25:02:
39:2d:46:d3:cd:bb:93:e9:63:a7:6c:db:a9:ae:94:df:9e:57:
8b:52:7c:c9:ef:fe:06:51:e3:f1:d3:00:11:26:60:91:1b:55:
1d:93:5a:26:ff:4f:b6:ac:4c:6d:7e:fc:e7:34:e8:27:9f:ad:
dc:3b:f7:9c:73:f7:1c:f5:66:ef:e7:f7:29:d9:3d:54:77:b7:
6d:99:c3:f6:12:b7:6b:9c:68:62:65:3a:ca:7d:df:97:34:70:
99:f6:ba:21:df:a5:d6:eb:22:09:30:e2:31:7a:47:ad:84:ec:
fa:93:1c:9f:50:a8:40:b8:4f:56:35:32:83:6f:1c:d9:f7:ea:
64:7b:4a:15:fb:fb:0e:16:64:67:1a:25:76:ca:aa:21:63:1c:
7d:24:4c:a5:b2:13:8b:f0:e3:33:c2:4f:0f:ef:d6:13:64:de:
9d:8c:ae:8f:df:76:99:0d:2b:73:1b:75:ec:2e:99:25:d6:30:
39:9b:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:23 2026 by rpki-client