Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File: 5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier: SMNX44Z2Lm6P9wwhSv5rhHqySFdFBKGpioOMmCD4SL8=
Subject key identifier: D8:1A:48:AE:BF:5E:B7:45:CB:29:C7:16:27:1B:38:66:27:5C:62:C2
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer: /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial: 01A00101BA9DAC06403D9CA93EDEFE048B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number: 0D1D
Signing time: Fri 14 Aug 2026 16:01:25 +0000
Manifest this update: Fri 14 Aug 2026 16:01:25 +0000
Manifest next update: Sat 15 Aug 2026 16:01:25 +0000
Files and hashes: 1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: QQu4weHM3A+Oo7A34KyvrwUwKZUhv6AiyWWAnYqmJ8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:ba:9d:ac:06:40:3d:9c:a9:3e:de:fe:04:8b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Validity
Not Before: Aug 14 16:01:25 2026 GMT
Not After : Aug 15 16:01:25 2026 GMT
Subject: CN=d81a48aebf5eb745cb29c716271b3866275c62c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:50:8c:8f:da:28:d8:8b:b4:f0:34:69:84:
fc:e9:a8:76:76:32:18:48:5d:4b:bb:94:48:43:23:
69:7a:9c:8d:63:78:74:b4:01:ed:62:57:30:46:81:
7c:7c:45:48:ad:3c:72:f8:ed:9a:cd:65:1d:2f:0e:
58:d6:f2:61:07:96:e1:62:69:51:41:d6:86:79:7a:
a8:38:f9:e2:59:5c:9d:7f:19:67:96:01:58:3d:e8:
86:59:56:1e:66:f3:e1:24:f1:a6:62:88:bb:d6:dc:
1e:e4:08:71:54:ac:90:d0:e5:5e:2d:b0:96:73:44:
be:c4:b9:22:b6:a7:b7:88:49:02:6e:3c:c1:e9:24:
4d:55:ea:95:19:01:32:ed:1b:09:9b:1b:bd:24:ce:
a9:a4:49:db:5f:bf:5b:19:88:1b:16:94:34:25:73:
b7:44:97:58:fd:62:70:fd:eb:f9:59:24:f7:9c:9a:
23:85:6f:00:af:79:5f:e1:13:de:3c:e8:2f:3b:ea:
43:a9:3e:5f:dd:1b:c9:21:fe:11:03:ee:55:32:87:
ca:b8:84:d5:ba:2c:a3:47:7e:90:79:97:3b:dc:28:
d3:b3:39:74:c5:49:8f:62:3a:cb:33:f7:5d:d8:c6:
98:33:d7:2a:e9:f7:59:40:dc:5d:65:6b:40:68:82:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:48:AE:BF:5E:B7:45:CB:29:C7:16:27:1B:38:66:27:5C:62:C2
X509v3 Authority Key Identifier:
keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5f:94:d9:26:3f:74:c6:60:6c:b2:91:10:ec:15:b2:5b:95:
6c:e0:1f:72:a3:ea:e4:2e:82:f5:1f:dc:34:58:47:73:6a:f0:
69:35:a7:36:95:05:a7:60:03:25:78:40:3a:c3:e0:d1:f6:55:
95:fd:91:09:57:bd:db:12:4a:9a:65:77:e0:ef:60:1d:b6:0c:
6c:d0:47:94:e8:de:75:17:fe:b3:24:c9:79:dc:c3:4e:c4:92:
a2:df:93:0a:d1:be:cb:57:cc:26:4e:6f:8d:09:67:bb:39:0e:
77:a4:14:e1:87:83:d8:a5:13:02:16:cc:e3:d2:22:27:cc:8c:
23:26:6b:64:d8:d5:c4:bf:88:d7:62:42:95:a5:e4:47:81:3e:
d2:7f:30:75:33:79:b4:1b:66:e4:86:b0:cd:21:9e:45:b7:1a:
79:47:aa:fc:e8:ad:cb:1f:18:2b:ac:82:ce:fe:4c:bf:73:36:
44:aa:d9:3e:e1:74:ce:70:30:80:78:df:55:ef:ec:e1:f2:ac:
c8:f3:18:47:9f:2a:37:71:57:e3:df:55:e8:f8:df:72:5c:15:
40:6d:b1:2f:22:eb:d6:20:98:2e:a7:39:e4:e1:c4:f4:1a:c6:
fd:4d:32:f3:24:e5:ce:c4:94:cb:83:32:cd:ce:e6:de:6d:b5:
61:c0:2f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:27 2026 by rpki-client