Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: 8bjqVSxzC1Oco7ywppiv7W+pKJyxJHFx9K5k/0yGCZI=
Subject key identifier: A3:8F:71:B3:E2:AE:B0:51:C1:E6:E1:95:8D:E3:B7:9F:99:D6:27:24
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 01A13FA7EB10F5C780DDEDFA01EB3DB95D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0DEE
Signing time: Thu 15 Oct 2026 13:02:11 +0000
Manifest this update: Thu 15 Oct 2026 13:02:11 +0000
Manifest next update: Fri 16 Oct 2026 13:02:11 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: Grr6RxZ/PaXdsbZEkU9O/2xqhIBvKnw6fUOIJ2hSxAM=)
2: BKcITDKaED0cGQdWAamGXP2H6VQ.roa (hash: oxdjRtXrDb5brd5dPagdNNJkmg5Fehu5EkVlamNhiwA=)
3: ZUTF7_8DLVs6iqcU7D91xWqe-Xo.asa (hash: 5QirNPUcmtsZHwaskv1RmSE7lmilnNlyy8Kqg9ckis0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:eb:10:f5:c7:80:dd:ed:fa:01:eb:3d:b9:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Oct 15 13:02:11 2026 GMT
Not After : Oct 16 13:02:11 2026 GMT
Subject: CN=a38f71b3e2aeb051c1e6e1958de3b79f99d62724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:ec:bc:82:64:63:a9:02:ca:7e:c5:66:d3:
50:04:79:a5:e3:08:51:43:30:7d:92:d6:67:64:17:
42:59:44:dc:48:69:0c:ac:a8:7f:de:23:80:80:fb:
cf:b7:fb:e3:9f:a8:6b:92:a4:fe:d1:c4:3a:69:90:
4a:ae:a0:f2:79:e6:6f:bd:45:26:d6:92:bd:2b:fe:
c5:e0:35:d4:be:1c:3d:2c:1f:2b:72:61:49:89:ff:
32:46:cd:c9:6f:33:1b:c1:02:80:1d:9f:92:19:b4:
ad:ee:63:90:e2:6c:11:e3:4a:74:1b:bd:c2:1d:8d:
c4:9b:49:86:f4:8f:f6:9e:56:be:42:e8:9a:1b:9e:
86:b3:1f:a5:fa:34:3d:04:5c:d9:83:9b:fa:fa:b8:
09:cf:fd:64:1f:45:75:1b:7d:55:ef:34:19:33:2d:
8c:41:1d:2e:e4:5b:21:bf:60:91:9a:a9:fa:76:3c:
bc:37:08:f0:55:98:ca:6c:e4:dc:fe:9c:a6:06:90:
52:a2:f3:87:b1:fa:88:d8:0c:b7:cb:81:18:21:3f:
88:32:bd:92:78:99:18:7c:81:4e:eb:69:ee:c9:c8:
bc:d9:3a:2d:8e:51:8a:be:86:ed:85:eb:b7:61:72:
e5:33:92:e6:7b:a3:67:07:83:ad:8c:61:2c:14:96:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:71:B3:E2:AE:B0:51:C1:E6:E1:95:8D:E3:B7:9F:99:D6:27:24
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:31:13:1e:7f:d1:6a:de:e6:71:54:a3:d9:ee:71:80:76:5c:
7b:d1:25:ff:89:41:ec:90:49:af:6c:35:6e:70:6e:15:eb:37:
54:49:24:b5:2c:cd:87:b6:67:a0:17:23:67:48:20:0e:23:77:
66:ae:4c:c5:ff:45:66:87:8f:bf:70:13:5d:90:0c:c0:20:9c:
07:44:85:3d:87:91:de:70:64:5d:d5:4b:f6:11:3a:d3:78:20:
c0:5a:89:a7:c2:77:97:ea:a6:e2:6e:0c:b3:11:dc:62:a1:7f:
c4:3f:e4:66:59:fd:03:b6:c5:b6:ef:07:c3:62:8d:75:5f:87:
ac:a4:3b:df:64:2f:af:81:a1:cb:17:37:44:6a:53:cb:8d:48:
56:df:fc:27:fe:6f:3f:a3:7c:58:c9:ef:86:33:2f:a5:2a:6b:
d4:df:0d:3e:85:c6:dc:c0:ec:82:5c:5c:98:e6:a2:4d:ca:dd:
12:b8:9e:7d:9e:e8:0c:83:35:91:af:99:53:d6:6e:86:a7:e2:
67:61:33:13:60:5b:8c:15:7e:1e:11:5d:1d:f4:43:35:e4:32:
74:9c:62:52:6b:e8:03:ec:0e:a8:dc:39:40:02:05:b9:d7:7b:
07:db:18:95:16:c7:fa:81:59:3d:01:2f:ed:75:ff:b9:79:20:
ca:a3:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:32 2026 by rpki-client