Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File: 5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier: T46tf9e+pS1SReN/hsxUyf+la7NKiwmBvRrmUCiHhIg=
Subject key identifier: 48:A4:38:23:A5:B9:42:28:18:C7:48:49:32:39:44:36:DB:72:05:E6
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer: /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial: 019A71B7A692B3C54D7AC4F076B9E86D377D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number: 101E
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: bK03+AYZfpFCqQsPlmRsK0AhOZSZE48fofTKa90+xnA=)
2: MN9DXXfhSKbEIdYAeS63OJtTNTM.roa (hash: IbJiyeetvwoy/pj327xJTH6HMYNK/ZCgaJ8rwR+7loE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a6:92:b3:c5:4d:7a:c4:f0:76:b9:e8:6d:37:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=48a43823a5b9422818c7484932394436db7205e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:72:54:6e:dd:97:ba:22:7a:4d:25:d6:d3:
59:73:90:c1:d4:ba:5d:0d:51:f2:b6:53:3f:4f:a6:
51:e0:20:bc:dc:aa:bc:0f:8f:b3:86:df:60:95:55:
54:24:fc:be:5b:a8:69:32:ce:40:4c:22:07:81:48:
dd:6d:c5:78:a6:40:dc:62:c1:ec:6b:5a:cc:dd:3a:
4b:67:60:2e:55:71:81:d7:93:44:98:9c:55:4a:e9:
59:94:92:b4:d9:87:06:f7:64:6a:c6:d3:b7:96:eb:
09:d5:61:d9:cb:31:7e:84:2d:ff:d9:39:0a:9c:d1:
71:8f:e9:9f:c7:5b:9f:43:f9:f9:1b:7e:1f:e8:60:
9d:f5:35:8e:97:43:ac:80:9f:cc:5a:b1:b2:ef:8e:
b8:a8:64:37:64:f4:76:e4:8d:8c:ac:9c:62:86:1d:
48:26:fb:8b:d5:8b:43:99:8a:ee:1d:8f:73:66:97:
b5:10:9d:b5:b0:21:89:a1:42:6c:4d:e6:e3:b6:44:
b9:12:33:42:bc:2b:4c:43:38:32:39:68:e1:40:50:
f0:e6:93:0d:95:86:4e:ff:c0:56:33:e7:ee:3d:ea:
f0:6d:71:06:8c:e8:61:eb:8b:0c:17:47:aa:71:09:
e2:ca:43:6c:79:fd:3d:3b:61:e4:09:92:34:22:ed:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:38:23:A5:B9:42:28:18:C7:48:49:32:39:44:36:DB:72:05:E6
X509v3 Authority Key Identifier:
keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:13:ac:08:a3:34:40:d4:c2:6c:61:bd:c5:39:c0:b3:ef:
a7:d8:05:53:1a:d5:ca:e9:0e:4c:27:da:1b:56:7a:5b:72:45:
5d:cd:36:11:3f:ce:bc:ac:06:e1:5b:21:b3:c5:cb:e9:1f:7b:
3c:29:b7:a8:6c:38:af:99:21:c9:a9:ea:58:52:6a:24:fb:e9:
9e:c3:f1:5b:81:23:68:4f:5c:fe:f9:75:da:6b:e2:5e:b2:e3:
05:20:41:e0:1f:bf:84:a1:0e:9d:6c:db:d4:ba:cd:d7:d3:33:
98:ba:1f:b7:b8:f4:7d:12:0d:01:3f:86:8e:c7:e0:ec:ed:2e:
71:2a:be:bd:81:9a:bf:c2:f6:29:63:4c:a3:16:8d:ee:4a:22:
dd:cf:ed:68:06:b0:2c:8f:18:76:8b:20:b0:7b:d7:50:ca:d3:
6b:f3:57:5d:aa:e7:de:94:f1:7b:13:93:a9:54:ed:76:bd:bb:
c2:79:5f:02:7a:7c:fd:93:56:5b:08:de:40:fa:6c:fc:d7:a7:
cc:21:59:8e:dd:8a:7a:67:ae:28:cc:b4:e8:98:1b:c1:7e:72:
55:65:44:be:95:f1:93:5b:46:34:bb:63:90:ae:74:e4:f4:94:
3e:9d:e2:9c:0e:a3:fd:b2:39:ba:94:17:19:c8:09:7f:ac:4c:
d5:5c:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:43 2025 by rpki-client