Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: EtMUANtr5Y21S9Jhv+KQr7uG81VmI61GO/b3klAX30o=
Subject key identifier: 01:09:66:6B:EC:F7:EA:B0:96:D0:54:88:01:81:34:18:09:78:47:41
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 01A13E5CC076B9A87EA8BC69F3D827CC9C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 1A36
Signing time: Thu 15 Oct 2026 07:00:28 +0000
Manifest this update: Thu 15 Oct 2026 07:00:28 +0000
Manifest next update: Fri 16 Oct 2026 07:00:28 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: VvthiXCHw9l1s86QVB99HtlKgL5MZj+RTf9y72XIgP8=)
2: sZxrSzhn7wD6WFSw7UC6NwZuEFk.roa (hash: kEkaa7N2aenPpjJ1vqccMcmAKJMsk4dI56LBorB67HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:c0:76:b9:a8:7e:a8:bc:69:f3:d8:27:cc:9c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Oct 15 07:00:28 2026 GMT
Not After : Oct 16 07:00:28 2026 GMT
Subject: CN=0109666becf7eab096d054880181341809784741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:43:d5:7d:d0:cf:ba:b9:7e:95:96:f1:9d:
2c:32:7a:b8:b4:47:f8:f8:48:77:fe:e8:e0:c6:1e:
c4:71:92:1e:64:ca:cf:40:b0:7b:80:b0:ea:33:a0:
a3:04:e6:27:1e:10:ed:14:d9:31:00:43:ed:f1:9a:
66:d8:c8:f2:63:db:25:72:71:d2:2e:30:78:6b:4d:
e5:c7:c2:92:61:1b:88:38:ff:0a:49:d9:df:4e:1a:
d6:ec:bb:32:90:59:f5:83:9e:01:43:1f:a1:96:54:
5e:c9:58:6c:87:65:50:95:64:c7:4f:ce:3c:e2:97:
a2:aa:d0:01:e5:a4:b4:77:5a:5f:1e:0c:8c:0d:15:
5e:a4:c5:41:57:eb:e8:59:fe:1a:4c:f3:56:a6:d2:
8e:f8:c3:34:3e:6e:ce:ad:ae:e0:26:1c:69:02:52:
3c:13:c3:61:8b:95:58:16:43:6c:51:fa:73:42:a0:
82:43:f2:16:b6:28:54:f1:50:b4:8c:ad:91:26:21:
76:24:7e:46:ee:e9:2b:79:15:f4:16:41:a8:43:63:
91:68:c5:60:b4:37:33:f3:00:38:ca:a3:6d:1e:71:
16:a2:67:0f:5a:a3:b6:67:d5:83:a4:02:43:35:32:
6b:60:b3:83:70:ea:7e:6c:88:d7:24:97:90:5c:4d:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:09:66:6B:EC:F7:EA:B0:96:D0:54:88:01:81:34:18:09:78:47:41
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:17:b0:29:ae:07:0f:48:e3:0f:e3:30:80:50:20:e7:0b:5b:
55:21:62:5e:c5:26:bf:1f:d8:a8:a1:3d:e2:27:f2:be:c3:1e:
57:07:32:1b:ff:cb:a2:f0:67:1f:c5:e7:f0:94:05:fa:46:4b:
49:ad:ce:ba:ca:51:55:c4:1e:15:77:14:e8:47:d5:6e:a5:7d:
f3:9e:35:72:19:76:08:ba:1b:79:c0:24:92:5c:1d:48:1b:15:
85:47:37:8b:e7:48:bc:da:ad:6d:0e:22:d0:40:58:5c:10:2c:
dc:6a:2f:70:00:c6:3a:5d:10:52:1a:43:f7:ae:c5:6b:2d:4c:
ed:71:84:ac:30:d5:ad:7f:74:51:9d:5e:fc:88:13:5f:1c:47:
00:81:16:df:97:92:b7:bc:ae:b2:13:37:0e:d9:b5:9e:18:1f:
51:2c:c8:e1:82:fa:61:ff:40:9d:44:3b:59:35:23:50:e2:6c:
fb:d6:2a:5b:75:82:21:25:c7:6c:25:72:ed:ed:a9:68:2a:a2:
7f:bc:9e:31:cf:56:d9:f1:d2:d6:45:c1:d4:02:63:a5:07:26:
fc:3e:53:c3:1c:e5:93:87:47:b8:07:23:a0:0d:0f:58:42:d6:
a5:9c:4a:c6:87:7e:c6:42:9c:bb:ea:c8:22:e6:f7:40:8a:27:
92:36:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:55:49 2026 by rpki-client