Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
File: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft (raw, json)
Hash identifier: eD3pa5BefrVUB9X1n6yl5kGt2ThO5wRHjCD37GkexhU=
Subject key identifier: 83:4B:43:83:EF:62:1B:AC:5B:B6:B7:BA:28:C2:E2:E5:62:30:34:1A
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Certificate issuer: /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial: 019F8F47386C0C1D8374AAAC0A89D6E47AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
Manifest number: 104A
Signing time: Thu 23 Jul 2026 14:00:37 +0000
Manifest this update: Thu 23 Jul 2026 14:00:37 +0000
Manifest next update: Fri 24 Jul 2026 14:00:37 +0000
Files and hashes: 1: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl (hash: MNvJO68kglYeiW23iAqmv9zLf/Elh2DT/6oINCxOW+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:38:6c:0c:1d:83:74:aa:ac:0a:89:d6:e4:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Validity
Not Before: Jul 23 14:00:37 2026 GMT
Not After : Jul 24 14:00:37 2026 GMT
Subject: CN=834b4383ef621bac5bb6b7ba28c2e2e56230341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:f5:46:b9:3e:f0:87:b9:44:fe:ab:1c:7a:
a0:e9:ec:6b:71:a3:f1:be:bc:c6:81:66:ca:d0:50:
ba:b5:d0:4a:1b:08:f6:75:06:ca:7f:d9:fc:56:e9:
01:e9:22:73:53:e2:4b:00:dc:d6:1e:80:67:2c:84:
9b:e0:98:b8:41:67:5c:31:79:88:df:e3:ad:96:80:
fb:07:5c:a0:74:44:63:8a:d4:46:0c:ad:15:db:b9:
7a:28:cd:90:83:4f:cd:91:71:3d:8e:af:29:3e:a6:
e9:f4:e4:f7:6e:9e:57:e7:0f:68:e5:0f:20:ad:63:
8e:e2:78:b2:b8:46:e8:c2:2f:64:6e:fc:da:9d:6c:
8f:a3:e0:b1:e4:98:47:64:8b:73:a0:ed:66:40:5e:
48:34:64:cc:20:00:66:20:ea:4c:fc:6f:5c:a5:ad:
ac:ca:2f:f2:c9:48:17:e5:c3:47:84:86:39:a2:74:
24:cf:bc:dc:15:ef:63:73:22:0b:25:95:d0:0a:45:
f4:06:ce:bb:24:d3:a3:67:0f:11:d4:ac:bf:82:67:
5f:4c:71:75:28:f2:77:45:4f:31:62:86:8f:df:c3:
09:b5:69:2d:3d:eb:cd:a8:5d:eb:3c:ec:2b:db:12:
31:6d:27:85:88:37:a5:0e:29:0e:dd:80:d7:ad:36:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:43:83:EF:62:1B:AC:5B:B6:B7:BA:28:C2:E2:E5:62:30:34:1A
X509v3 Authority Key Identifier:
keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d0:00:cb:5d:a9:a4:65:8e:11:cc:ce:14:a6:8f:af:23:4f:
f9:58:89:94:70:ee:f9:0a:9d:1d:9c:dd:89:39:fa:e8:a4:e3:
26:d8:f7:27:c5:e7:f9:d0:09:4e:87:8e:0c:b5:02:83:f2:e8:
8b:07:ce:5f:6c:1d:3f:f5:36:8d:cb:ac:0a:82:27:97:e0:56:
12:8e:41:c1:34:eb:36:ce:b4:6f:3b:10:ff:3c:27:12:f5:8c:
57:82:43:84:08:7e:5c:30:74:c7:41:2e:90:13:a3:72:a4:6b:
fd:16:e4:b7:b8:ef:41:2b:50:08:45:6d:94:99:83:58:96:fa:
eb:f8:61:42:f5:c4:d9:77:96:27:bd:99:72:28:d9:e3:d2:cd:
86:15:77:9e:47:9a:8b:79:55:7f:7d:c5:6f:98:f1:7f:ab:91:
bf:61:9b:55:00:45:92:e9:49:df:ba:03:bb:f5:f5:f3:2f:d8:
af:d7:56:2c:e7:6d:f7:f2:e2:3c:25:d8:78:80:24:de:cf:c6:
34:13:71:23:7b:1a:40:a4:4f:3c:22:f5:74:08:d9:20:ea:b1:
0e:fc:c9:83:db:a1:c5:20:2a:75:7c:97:37:2b:2f:16:74:b2:
9e:79:8a:42:b8:d0:3c:b2:b7:1b:53:5b:ac:97:59:d7:73:1f:
30:e7:f7:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRzhsDB2DdKqsConW5HqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MmNiODVjYTc5M2ZhZDU2NWI0NjA4ZTI2ZDgyYTZhZTI3
ZGMyMzIwHhcNMjYwNzIzMTQwMDM3WhcNMjYwNzI0MTQwMDM3WjAzMTEwLwYDVQQD
Eyg4MzRiNDM4M2VmNjIxYmFjNWJiNmI3YmEyOGMyZTJlNTYyMzAzNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsn1Rrk+8Ie5RP6rHHqg6exrcaPx
vrzGgWbK0FC6tdBKGwj2dQbKf9n8VukB6SJzU+JLANzWHoBnLISb4Ji4QWdcMXmI
3+OtloD7B1ygdERjitRGDK0V27l6KM2Qg0/NkXE9jq8pPqbp9OT3bp5X5w9o5Q8g
rWOO4niyuEbowi9kbvzanWyPo+Cx5JhHZItzoO1mQF5INGTMIABmIOpM/G9cpa2s
yi/yyUgX5cNHhIY5onQkz7zcFe9jcyILJZXQCkX0Bs67JNOjZw8R1Ky/gmdfTHF1
KPJ3RU8xYoaP38MJtWktPevNqF3rPOwr2xIxbSeFiDelDikO3YDXrTYyyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINLQ4PvYhusW7a3uijC4uViMDQaMB8GA1UdIwQY
MBaAFOUsuFynk/rVZbRgjibYKmrifcIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVN5NFhLZVQtdFZsdEdDT0p0Z3FhdUo5d2pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85NWJhZDktMjBmZS00YjhkLThmMDMt
OWMyOTk5ZDA5YjhmLzEvNVN5NFhLZVQtdFZsdEdDT0p0Z3FhdUo5d2pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85NWJhZDktMjBmZS00YjhkLThmMDMtOWMyOTk5ZDA5Yjhm
LzEvNVN5NFhLZVQtdFZsdEdDT0p0Z3FhdUo5d2pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNAAy12p
pGWOEczOFKaPryNP+ViJlHDu+QqdHZzdiTn66KTjJtj3J8Xn+dAJToeODLUCg/Lo
iwfOX2wdP/U2jcusCoInl+BWEo5BwTTrNs60bzsQ/zwnEvWMV4JDhAh+XDB0x0Eu
kBOjcqRr/Rbkt7jvQStQCEVtlJmDWJb66/hhQvXE2XeWJ72ZcijZ49LNhhV3nkea
i3lVf33Fb5jxf6uRv2GbVQBFkulJ37oDu/X18y/Yr9dWLOdt9/LiPCXYeIAk3s/G
NBNxI3saQKRPPCL1dAjZIOqxDvzJg9uhxSAqdXyXNysvFnSynnmKQrjQPLK3G1Nb
rJdZ13MfMOf3Xg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:26 2026 by rpki-client