Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: LSk4EHki9Yw/1XXJE/mQqpfM0g4XZYLTcEt5QLGMwrU=
Subject key identifier: 04:38:0F:FC:E5:3C:EF:73:7C:0B:05:2F:15:77:6E:F3:20:0F:FD:8B
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 01A1841A0249B5FD3206D44CFD8E56DFB037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 0ACA
Signing time: Wed 28 Oct 2026 20:00:59 +0000
Manifest this update: Wed 28 Oct 2026 20:00:59 +0000
Manifest next update: Thu 29 Oct 2026 20:00:59 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: rQI0mTLdf31wCx/nP81Q0tL20Gb0QX2N2LlRkzXFnsY=)
2: om31b6FWDBGxEuwor71QHsugvxY.roa (hash: nmUcpfkGCJ2B9JhtJKk02OVz3WisKOfii97PhUxXZVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:02:49:b5:fd:32:06:d4:4c:fd:8e:56:df:b0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Oct 28 20:00:59 2026 GMT
Not After : Oct 29 20:00:59 2026 GMT
Subject: CN=04380ffce53cef737c0b052f15776ef3200ffd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:92:a8:11:5e:90:d1:24:c4:64:f8:74:c9:
c5:b0:f4:4e:2d:9f:54:13:69:72:84:32:20:8b:8f:
1b:98:16:a5:3e:fd:0f:71:fc:44:85:ad:1f:0f:fc:
67:53:ed:0c:f4:26:0a:97:77:f6:b6:39:37:4b:16:
9a:1b:d6:96:89:78:2f:31:9e:62:6b:65:08:4f:20:
ad:11:6c:4b:a7:84:d4:61:a7:eb:5f:2f:73:8d:11:
9b:00:e2:ea:71:e8:5d:05:a2:21:e1:f8:7b:89:d2:
fe:88:40:f2:e9:4c:a5:69:12:3b:d7:b1:74:d3:0c:
f6:53:ca:54:08:01:55:1e:e8:ed:15:65:4c:9c:e2:
15:5f:f6:08:0b:20:1c:44:51:67:c5:74:6a:13:84:
3b:53:75:92:22:0b:e7:f2:cb:17:ae:fb:9d:2c:9a:
e4:09:ea:43:1d:9a:31:fd:1f:39:ff:02:ec:95:8d:
2d:a7:fa:99:35:d1:4b:ab:c1:08:93:a5:3f:dc:25:
7b:d2:0a:d1:e2:6f:fc:fa:2a:e9:20:29:c1:0f:b9:
ca:83:99:00:ac:39:ee:52:07:ed:b9:52:7b:ab:49:
a9:07:b4:dd:55:5a:2d:78:07:39:c7:ec:43:45:1c:
25:6f:bf:8a:2b:46:d7:3a:c8:bc:83:27:9a:1b:80:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:0F:FC:E5:3C:EF:73:7C:0B:05:2F:15:77:6E:F3:20:0F:FD:8B
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:19:3e:57:12:6c:79:0a:d0:11:ea:a9:ca:a7:0f:b7:d1:96:
f7:ab:55:ec:46:a1:ba:48:a6:2e:25:82:67:72:52:37:7c:88:
f6:fc:c2:a5:48:0d:b7:32:7f:a2:71:8c:91:61:3b:c3:88:be:
a4:21:a7:92:17:1e:a3:a2:dd:63:93:d0:0d:07:7a:81:df:bc:
11:fd:43:b7:9d:a5:a8:28:d9:7d:45:20:b5:7e:e4:44:f5:0b:
0a:f9:75:80:95:76:e4:d9:92:9d:be:56:da:1f:ce:71:a2:bd:
96:ef:27:20:5b:46:47:66:9e:b7:6c:e9:84:8e:43:46:7d:bf:
57:9a:dd:f3:96:15:93:18:f4:6c:4a:bb:eb:e3:ab:de:9e:bb:
b3:c9:1c:a5:4f:18:1b:87:f3:fd:0a:09:98:ce:a8:50:bf:8e:
f7:a5:0b:01:a7:b3:fa:86:b0:ee:a8:15:71:ce:27:b9:db:68:
c9:00:39:65:35:69:13:a0:e3:65:bf:4d:e2:7c:e8:2c:b6:2a:
36:29:82:74:ae:39:3e:39:03:9d:6a:98:73:14:11:3d:4a:07:
41:c0:2e:5f:be:5b:47:e6:d4:dd:a2:15:1d:57:88:46:ca:3e:
c5:a0:b2:2f:af:ba:49:23:51:27:b9:5a:78:28:eb:f6:9e:b8:
5a:0a:b5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:51:38 2026 by rpki-client