Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: ld3iyJ/XNVzMFCtGGBsEMMwCdR4B3W1zAx4R/QPKcnc=
Subject key identifier: 42:72:29:79:4F:88:67:8A:28:FE:7E:6F:A4:47:9F:04:B1:2B:4A:D4
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 01A1569D2191C9736F84AEA0AD95CAB3FEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1AB2
Signing time: Tue 20 Oct 2026 00:01:40 +0000
Manifest this update: Tue 20 Oct 2026 00:01:40 +0000
Manifest next update: Wed 21 Oct 2026 00:01:40 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: 8vrUK1CyZ/mtvye6uFoF1/mhXZDJQAanDDXhAiG4OIk=)
2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9d:21:91:c9:73:6f:84:ae:a0:ad:95:ca:b3:fe:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Oct 20 00:01:40 2026 GMT
Not After : Oct 21 00:01:40 2026 GMT
Subject: CN=427229794f88678a28fe7e6fa4479f04b12b4ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:84:70:15:f7:0a:c9:50:ad:5c:72:5a:d5:
1f:e5:24:8e:fd:47:7d:a1:0b:8c:06:e2:6f:cb:7b:
86:1d:3b:64:75:01:f1:45:b8:bc:70:25:b4:bf:84:
42:92:5f:0b:7b:dd:09:8e:58:11:aa:8c:64:02:4a:
1a:45:2b:91:bd:4a:d3:7d:1c:16:12:47:26:ba:7a:
f2:27:b6:7d:e8:96:ce:bf:5f:83:51:26:4d:95:1d:
36:ad:39:d3:cd:0f:bb:9b:2e:de:51:1b:fd:44:12:
93:a5:59:9a:3d:12:03:15:0d:2c:91:44:b5:ce:97:
03:4b:5d:fb:9b:4e:70:ef:6a:f2:52:08:a4:6f:14:
26:08:fd:c5:94:92:38:d5:5e:80:ee:93:44:a7:5d:
20:24:b4:6b:a4:d4:e2:31:6f:30:e3:d9:78:d6:e6:
29:4e:6c:06:24:1b:04:54:fd:18:9e:73:6a:96:6b:
c4:86:6e:9f:65:f3:30:6d:ee:0d:91:ed:d6:0c:70:
39:91:4a:6f:12:29:b6:69:97:2a:67:e2:d1:02:70:
86:82:37:d3:ab:bd:d2:23:24:a1:15:ef:11:03:b9:
96:f9:4c:e9:cf:7d:32:1f:a8:dd:4b:56:98:26:19:
47:a8:de:97:e0:0e:5a:fa:45:de:e9:26:8f:f9:7e:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:29:79:4F:88:67:8A:28:FE:7E:6F:A4:47:9F:04:B1:2B:4A:D4
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d0:79:9a:ce:e0:92:8d:39:08:1e:72:7d:4e:01:86:4e:3c:
1f:45:b9:7f:c0:5e:d9:4c:97:4d:1d:5f:f4:29:9c:68:79:6d:
c9:9a:1b:2e:eb:68:4b:72:9e:8c:74:33:c5:58:b3:71:98:a1:
5d:41:b7:1a:ad:7d:25:26:a4:9c:60:b1:f4:a9:d9:2f:a0:9e:
b4:21:59:b5:2c:06:91:c3:82:b0:42:00:4f:93:da:12:7a:dc:
f7:1d:b9:e6:10:3d:43:9a:55:1a:0f:c9:b4:2b:f0:34:82:b5:
f5:20:21:03:a0:29:08:23:8e:08:32:f4:97:f1:8b:b2:a4:a7:
08:30:23:3d:15:13:f2:c5:34:9c:e4:0f:d5:db:e1:44:b4:16:
72:64:35:a1:3a:07:ea:60:3d:43:3a:a1:8d:85:10:eb:5f:1b:
76:1a:19:bf:9e:e3:08:75:76:b3:e0:cc:ab:0f:30:f9:67:b4:
f1:c4:ee:bd:a9:74:d4:ae:d3:4f:4d:27:0f:db:7a:7d:91:4e:
ea:4d:ed:52:24:ad:19:c7:53:59:af:39:e0:ec:a0:9f:c0:72:
22:c7:db:d5:0e:85:33:9a:17:62:41:a6:54:98:12:6f:c0:1f:
31:2d:a5:d0:d0:0a:fb:8d:74:6c:26:3c:9a:90:bb:2a:c5:ae:
f3:fe:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:56:30 2026 by rpki-client