Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.mft
File: 5RSCeKg1Fp8UqoviixjhLKBJYFs.mft (raw, json)
Hash identifier: QAVjC3BNNxXhAHl34lGorfonfKO8NROPN9bexK3hGEM=
Subject key identifier: 8E:C2:8E:7E:7E:4E:3D:2E:BC:8A:60:39:65:9E:0A:F8:73:E1:7D:60
Authority key identifier: E5:14:82:78:A8:35:16:9F:14:AA:8B:E2:8B:18:E1:2C:A0:49:60:5B
Certificate issuer: /CN=e5148278a835169f14aa8be28b18e12ca049605b
Certificate serial: 01A040BBAA36529A097609C888975953E381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RSCeKg1Fp8UqoviixjhLKBJYFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.mft
Manifest number: 012D
Signing time: Thu 27 Aug 2026 01:00:35 +0000
Manifest this update: Thu 27 Aug 2026 01:00:35 +0000
Manifest next update: Fri 28 Aug 2026 01:00:35 +0000
Files and hashes: 1: 5RSCeKg1Fp8UqoviixjhLKBJYFs.crl (hash: bdLKuqKTHAhQyGE60s3ggB9L6rHk1dp0Ex9EOeQwl9A=)
2: OUoJvoWH8pOpVRM1-JGyTDYnKo0.roa (hash: Wg7N+IAl1TJAnxWuhOrKXbJO2MhgSDNe7L2xICbhWLk=)
3: TCTGRzqSGldb6_pvAymudJpBUXs.asa (hash: nRHD6B5pftCmqLg02vSi52KLz4itUs5HYD7LzZnUa5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RSCeKg1Fp8UqoviixjhLKBJYFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:aa:36:52:9a:09:76:09:c8:88:97:59:53:e3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5148278a835169f14aa8be28b18e12ca049605b
Validity
Not Before: Aug 27 01:00:35 2026 GMT
Not After : Aug 28 01:00:35 2026 GMT
Subject: CN=8ec28e7e7e4e3d2ebc8a6039659e0af873e17d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:7b:a2:32:ec:aa:ba:80:d9:5d:93:5c:85:
92:f9:90:95:1a:44:a5:db:67:d6:0d:a0:5e:62:fe:
01:41:c4:db:34:87:17:29:61:8b:5d:e1:a3:b7:59:
ba:7f:bb:5e:98:36:06:7b:31:1a:7f:e1:ed:55:1d:
23:35:08:91:f5:05:a8:be:db:01:94:93:f8:08:c2:
aa:d4:d3:1f:78:fb:bb:38:ce:cd:20:5c:0d:85:c0:
cc:48:0b:81:6f:7c:b2:9b:5d:11:14:4f:b0:eb:40:
b9:82:17:3e:41:21:13:75:0b:f3:10:fa:95:31:44:
23:ba:7d:67:cc:2b:39:82:be:29:82:b4:22:63:88:
6a:6a:99:bd:1d:28:73:e2:f0:ed:f5:1c:de:1d:d7:
36:78:70:24:0d:72:1c:d5:59:52:d9:7e:1d:55:a0:
2e:3d:92:f4:f2:4b:ef:80:d6:1e:d2:cf:eb:1c:31:
71:08:a5:82:dd:c5:5e:a4:95:b6:fc:b0:fa:97:0a:
4b:1a:8f:9e:52:28:70:c7:5d:50:73:f4:40:e8:37:
c2:03:52:92:7d:f6:ed:0a:7a:00:81:be:c4:aa:97:
df:0c:8e:0f:f2:f9:44:18:5f:6e:60:f0:20:4b:80:
b9:60:e3:80:f2:ad:73:de:5d:f5:98:e8:0b:5b:a5:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C2:8E:7E:7E:4E:3D:2E:BC:8A:60:39:65:9E:0A:F8:73:E1:7D:60
X509v3 Authority Key Identifier:
keyid:E5:14:82:78:A8:35:16:9F:14:AA:8B:E2:8B:18:E1:2C:A0:49:60:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RSCeKg1Fp8UqoviixjhLKBJYFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/827325-11b9-4510-ab10-dbae4bb3331e/1/5RSCeKg1Fp8UqoviixjhLKBJYFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:76:b4:fc:e1:1a:ce:26:51:ef:5b:a8:22:2b:77:37:78:98:
df:26:8f:55:c1:fc:28:12:55:c3:14:75:01:8d:e9:29:36:5b:
40:e6:40:67:e8:ab:31:3b:4a:f2:e7:84:d7:94:6f:ee:3e:ac:
3f:c3:a8:02:b7:70:f8:34:9d:8c:6f:82:81:99:ad:00:7d:71:
14:30:b3:d2:f7:fc:21:4a:91:97:93:10:4b:c7:c2:fd:54:ba:
31:97:9d:b4:d4:df:26:70:50:de:3a:5c:f2:c1:8b:d5:f2:a0:
31:45:3d:6e:83:db:3d:de:5f:71:df:54:8a:49:48:b8:d7:6e:
a5:52:20:86:91:7e:36:54:10:69:d7:4f:a6:a8:d7:03:38:36:
b1:89:bb:3d:48:6d:43:62:f1:02:ee:79:f3:1a:36:76:16:3d:
26:3f:5e:ff:41:c1:c4:32:fa:b8:aa:40:ff:f6:cd:c0:10:0e:
85:41:95:af:9a:cd:af:dc:de:24:9b:41:a2:96:1d:c0:da:8a:
ff:90:a3:25:6d:8d:fb:18:9a:ed:6e:1f:0e:8e:98:04:f7:e0:
52:e5:1c:ee:9f:f5:05:55:33:e2:73:78:96:00:f5:7d:37:9e:
d1:01:48:b1:1a:ef:ff:da:44:7a:15:7d:e2:d2:f1:4c:41:69:
6e:fa:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:42 2026 by rpki-client