Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: r/TwVPwQB0/SCPoNhVz5HT5zdmLcp02LcKFcWWJzrVc=
Subject key identifier: 5D:6B:8C:D3:0A:2F:C8:FA:5E:EB:98:BF:8C:1F:40:91:89:3C:21:45
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 01A03FE071C790A79CF0624041F965859C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 05FC
Signing time: Wed 26 Aug 2026 21:01:08 +0000
Manifest this update: Wed 26 Aug 2026 21:01:08 +0000
Manifest next update: Thu 27 Aug 2026 21:01:08 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: sLO1DY+d1Ttf+josQX7ibXah+kvbiqs7YEsRuzQSH00=)
2: PBcKVUNT6cnzq3vzaBEo4gtl5Z8.roa (hash: HYfjlIXaOozI/rCMC4UWmLkpHij9kD07KSE4H24zW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:71:c7:90:a7:9c:f0:62:40:41:f9:65:85:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Aug 26 21:01:08 2026 GMT
Not After : Aug 27 21:01:08 2026 GMT
Subject: CN=5d6b8cd30a2fc8fa5eeb98bf8c1f4091893c2145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:28:05:df:52:53:cc:8a:55:5d:63:15:ba:
27:a4:36:bf:94:5f:38:d9:6c:68:ed:e2:66:03:89:
27:16:46:d9:2e:fd:4a:b8:b0:fd:77:9f:2d:25:a0:
59:2c:04:88:62:85:2c:47:c6:c8:ce:f6:cb:d0:a7:
39:e5:51:71:01:66:41:a6:1e:1d:30:00:64:4d:e2:
f4:f0:a4:20:b1:8a:2a:a9:23:d5:14:5d:a2:c9:aa:
c1:36:0a:30:81:0a:77:f0:d4:3e:74:8c:44:62:45:
26:c8:d7:31:a0:57:38:71:db:69:b6:61:fd:e8:cb:
4d:58:d2:da:ac:5d:86:77:3a:78:82:33:ae:cc:b5:
6e:ee:64:28:ef:d0:74:d2:6f:4d:7b:4b:d4:6a:96:
ee:e2:21:aa:c9:9b:69:00:90:07:45:f0:85:4e:45:
29:9e:06:e1:91:3e:6e:50:77:dd:4f:6a:1d:20:7a:
90:b7:ea:32:f3:07:81:a3:99:0c:00:50:b8:13:73:
09:72:40:b2:2a:b0:df:62:92:dd:24:67:e5:d3:9d:
cd:a4:0a:11:8a:ff:77:75:5b:36:fa:1d:5b:ca:85:
4d:a5:66:24:7d:72:71:04:68:70:47:cd:71:0a:24:
52:78:78:22:a8:a7:ef:25:3e:02:d5:4a:c7:d6:d2:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:8C:D3:0A:2F:C8:FA:5E:EB:98:BF:8C:1F:40:91:89:3C:21:45
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7f:f5:51:db:a0:52:36:8d:39:9a:a2:81:13:19:ba:d7:06:
d6:64:e1:f1:06:2a:ca:b9:1a:33:2d:25:b1:86:ad:8f:dc:91:
07:db:0b:88:8c:5d:76:cc:e3:7b:ff:34:6e:9c:79:d0:d5:05:
f0:94:ee:b1:72:0a:ea:22:18:63:9e:d6:f5:6b:81:2b:30:5f:
87:18:51:8a:79:50:30:0b:7e:9b:07:f8:1e:7e:c7:26:0f:e0:
1a:79:f7:ff:77:73:9a:3f:6d:23:d3:69:6a:97:57:b1:b5:b9:
24:00:07:38:42:65:d4:e9:39:fc:fb:23:55:54:25:20:c3:56:
61:02:2b:1c:d0:ba:07:24:c2:1c:27:a4:69:93:66:e8:65:89:
64:27:37:32:ad:ee:c2:36:a5:f5:2d:2a:e0:3e:4c:c1:fd:31:
c4:99:5e:65:21:6a:19:f2:d0:72:d8:f0:fa:9a:ef:2d:26:1b:
3f:e9:45:31:3b:68:f8:78:b0:41:aa:40:2e:c6:28:b3:66:07:
19:68:ba:a7:66:a4:bc:b5:5e:b6:0f:93:56:23:56:53:b5:cc:
0b:65:4c:30:d9:5f:7c:21:64:b4:3a:db:e2:32:38:2b:57:f0:
e4:41:8d:91:eb:46:76:22:b4:00:07:46:ba:84:ad:72:67:1b:
d1:1a:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:27 2026 by rpki-client