Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: 6aueIsBbu0N/BY3m5lEw3ui0Mb+64Clv9iAoz+zykXs=
Subject key identifier: 5D:BA:25:A3:7A:04:26:5D:4A:1D:13:A9:00:21:7D:C1:4B:2B:20:70
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 01A001DD61BA5E0C14AA250566B404C1ACE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 1150
Signing time: Fri 14 Aug 2026 20:01:20 +0000
Manifest this update: Fri 14 Aug 2026 20:01:20 +0000
Manifest next update: Sat 15 Aug 2026 20:01:20 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: NibgeY2U1YH487+UrGTf9wwFF9hDQvSkypFwm2GkdeY=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:61:ba:5e:0c:14:aa:25:05:66:b4:04:c1:ac:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Aug 14 20:01:20 2026 GMT
Not After : Aug 15 20:01:20 2026 GMT
Subject: CN=5dba25a37a04265d4a1d13a900217dc14b2b2070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:9d:b1:da:9e:b1:cb:84:f0:9e:fa:0b:4c:
81:ad:32:28:90:c8:f8:d6:7a:24:4a:b7:7d:db:8e:
0f:32:96:f0:d5:cc:93:6b:f7:9c:4c:28:42:de:6d:
77:8a:31:0f:44:e0:cd:d1:8d:9c:e6:47:83:dd:a5:
5e:e7:ca:c1:b3:2e:b1:ab:2a:7f:bd:10:7e:ed:0b:
49:b6:eb:a7:8d:95:33:c9:ad:f6:85:c1:3c:fa:44:
ba:12:bb:72:33:13:4f:fc:1e:1a:91:8f:1a:2b:72:
8a:64:97:ba:1a:4b:37:3c:50:b6:93:a7:27:ba:b7:
32:18:fe:d6:2a:ad:1b:21:70:9c:d4:b8:a2:4d:97:
34:c2:98:b7:c4:5e:1f:3b:60:57:b3:7d:2a:a4:28:
e7:28:5f:b4:53:61:38:18:36:66:0b:09:2a:ae:5e:
b9:8d:81:89:c7:31:c8:2c:4a:f2:74:58:7f:46:77:
24:10:b5:1b:92:1f:3d:a7:fb:87:61:52:51:1d:bb:
7f:10:5c:76:06:55:f1:a8:95:86:3c:c3:f8:cc:87:
5a:9f:94:01:61:7a:34:17:59:d4:3d:96:69:07:de:
5e:a8:d7:f9:44:20:41:5d:04:8d:92:d9:e7:8d:cd:
0a:f1:14:41:8f:a4:4c:ff:1f:e9:2a:df:bc:fb:52:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:25:A3:7A:04:26:5D:4A:1D:13:A9:00:21:7D:C1:4B:2B:20:70
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:23:90:21:13:39:c7:a6:a5:8f:52:a4:8f:2c:56:f7:7d:ad:
4c:67:59:f3:db:50:90:6b:4b:b5:0d:fc:17:a1:4b:df:8c:ab:
dc:8b:4a:e2:8d:59:d4:09:1b:3b:c1:f3:f0:66:e9:f3:7d:ea:
b0:1d:62:a2:95:ca:ba:c9:31:ed:e5:f2:81:b5:ac:35:b9:2d:
6a:0f:2f:eb:ec:43:d9:31:98:72:d0:40:4a:35:de:41:00:36:
fb:fc:8a:c5:ff:c5:4d:a2:9f:16:f6:86:26:ed:5d:4a:b3:33:
ea:6a:09:71:f5:df:9c:34:3d:ce:94:95:52:02:8a:47:f4:f6:
91:fd:ee:77:59:56:6c:3b:53:d2:e0:5c:f9:7a:64:46:83:30:
83:19:9a:b3:19:5f:4a:c2:e3:1a:f5:18:fe:2c:3e:95:56:82:
47:20:4c:48:f1:a3:ff:27:87:a1:33:95:97:0d:b1:85:de:e5:
44:c0:2f:90:51:a5:2a:df:34:25:79:81:3b:f4:6b:f7:bb:4f:
0e:83:15:3c:04:af:74:81:ec:82:d4:1f:0f:94:f0:fc:0f:67:
50:bd:d8:87:96:a2:4d:da:4c:30:53:9b:3b:de:79:83:68:f4:
91:b9:fa:70:96:5f:46:3d:b5:54:52:7f:33:33:0b:04:49:de:
45:37:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:28 2026 by rpki-client