Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: dl9tVVkzjS3o6KhCFA+oEltH4+8Ozt61Nha6i2u0su8=
Subject key identifier: B2:CB:FF:D1:03:4D:AE:4C:EC:45:99:04:B2:DE:4C:BE:17:30:F2:1A
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 01A08A8D0DFD64CEF0B52EB57190DA19AAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 09:01:34 +0000
Manifest this update: Thu 10 Sep 2026 09:01:34 +0000
Manifest next update: Fri 11 Sep 2026 09:01:34 +0000
Files and hashes: 1: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: sgcUBFW75+nGRsU522EgE/3oCQbRDn17i8ebXgehbaI=)
2: ycQ9UZI7n07LVhcSojHNBe-1YKE.roa (hash: lff+KvYO2g0/AePrhAZf5pu7/6YYDH+6BXgpxI3UwiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:0d:fd:64:ce:f0:b5:2e:b5:71:90:da:19:aa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Sep 10 09:01:34 2026 GMT
Not After : Sep 11 09:01:34 2026 GMT
Subject: CN=b2cbffd1034dae4cec459904b2de4cbe1730f21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:11:77:1b:bf:d7:b6:02:31:80:fa:04:ad:76:
c2:f7:b6:48:df:55:d0:cd:01:8a:9e:2f:f1:51:66:
cc:49:2e:a1:1a:5f:b2:49:02:d8:06:a8:b4:64:d8:
9e:52:b0:e3:8b:72:f3:3b:e2:2c:ec:d6:e3:f9:f9:
10:92:cf:0d:81:0e:01:9d:a7:9a:b8:e0:1b:5f:fc:
72:9d:70:a7:4e:f3:c0:01:cd:16:4f:b9:d1:c7:fb:
e1:96:f9:a1:ff:37:92:b8:c2:fe:e6:6e:2e:9f:f4:
fd:ec:c0:3f:96:e0:de:1e:95:d5:05:40:63:b1:55:
1e:5d:b1:4c:4c:cb:29:78:d6:7d:58:9c:ec:19:20:
18:0d:c4:81:9b:20:72:a6:dd:71:e0:64:0c:54:52:
d7:4d:92:fe:24:39:b4:72:d8:c0:15:80:95:6a:53:
61:f6:b7:5c:fd:3b:a3:ff:db:e7:ee:1c:bf:76:56:
54:1f:7b:ef:35:02:dc:b4:b1:0d:36:fb:14:27:47:
06:97:18:e1:e5:9d:95:9e:8d:17:a9:88:0c:bd:9d:
e9:5c:00:32:d0:4e:01:04:55:3b:20:81:4d:26:a9:
5a:31:ef:36:05:d3:51:df:43:08:3d:95:b6:bb:da:
11:fa:4b:85:24:3c:30:f3:cc:e0:c2:b6:c0:db:07:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CB:FF:D1:03:4D:AE:4C:EC:45:99:04:B2:DE:4C:BE:17:30:F2:1A
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:13:8e:d0:d3:b8:d3:c3:d1:b2:8d:f3:e5:6e:bd:16:98:62:
bc:41:27:c4:00:19:92:2f:82:72:b1:f5:49:c1:f1:ec:15:56:
9d:13:d5:a0:b2:3d:82:62:90:34:6d:38:a3:5c:cc:2f:9f:43:
b5:dd:4b:bf:d5:92:90:9d:ee:c1:6a:a1:06:4d:2c:4d:b7:42:
c4:3b:df:67:93:ea:50:d2:15:04:38:4c:fb:17:d4:92:e9:2a:
5a:66:3d:3f:38:ab:89:62:70:2e:f0:dd:4f:2c:d6:24:de:6e:
bb:ac:a9:38:81:61:e2:99:a2:13:c7:c8:b1:bd:d2:ff:48:58:
dc:d1:aa:d2:39:24:01:37:3e:3b:c8:fb:6b:ff:b9:94:72:ea:
7d:00:a0:63:f6:0f:a7:96:bf:a5:56:b3:f8:d7:17:65:a9:30:
8c:ee:31:fc:b2:02:58:10:9f:73:8b:80:8b:d6:1c:8e:52:bb:
3e:38:f9:fa:82:80:48:03:fb:c2:c6:59:53:02:1c:5e:5c:fe:
63:41:27:3b:30:3c:cc:c9:d0:d7:13:13:08:74:ec:5c:07:9b:
87:3b:5f:f3:a7:4e:b7:f9:bf:af:eb:cb:e6:5a:fb:e7:c8:63:
7d:ef:71:e3:47:b6:fd:d5:3b:49:b1:2d:4b:20:ac:fd:3f:ce:
0b:e4:78:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:07:51 2026 by rpki-client