Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: 4s5xFZVkjvzPVGULkh1wFjhNrewPQ16td8EXsaGIbkk=
Subject key identifier: 9C:3E:94:30:5C:C7:B1:25:24:1B:01:08:99:AB:48:FD:C9:F1:F4:65
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 01A1DEDE0351043C10CCC2BE434C5F17D9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 0761
Signing time: Sun 15 Nov 2026 11:00:53 +0000
Manifest this update: Sun 15 Nov 2026 11:00:53 +0000
Manifest next update: Mon 16 Nov 2026 11:00:53 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: NSF1T+1lBvhEEFO5jwtGxwYDqAbW5+WdXLz8L0iL2sc=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:03:51:04:3c:10:cc:c2:be:43:4c:5f:17:d9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Nov 15 11:00:53 2026 GMT
Not After : Nov 16 11:00:53 2026 GMT
Subject: CN=9c3e94305cc7b125241b010899ab48fdc9f1f465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:07:ab:ec:3a:cc:5f:26:c4:dd:e0:ef:8f:
f9:7a:ce:f8:ec:22:fe:5a:3e:41:c2:6f:85:49:6e:
71:ad:dd:67:87:57:4c:2c:64:1d:c9:23:ff:9e:90:
c6:19:06:74:13:77:af:94:f7:72:08:20:80:33:2f:
4f:3f:57:bc:4a:9f:76:53:76:c1:46:c8:ff:b3:95:
29:ba:e8:86:a0:55:31:d4:3c:5f:60:de:81:33:3e:
1b:af:0a:b1:fb:59:3f:9a:be:31:10:4e:03:49:57:
3b:c1:18:8a:97:f3:01:48:b2:07:90:56:76:bc:b2:
96:bb:d1:43:25:f2:40:df:41:c8:4b:08:f7:d1:6f:
63:32:f3:7a:8c:2e:14:66:11:ce:3d:f7:5e:c3:53:
ca:02:36:6e:84:16:ec:5a:5d:6b:6c:7f:df:a0:12:
6b:69:4a:8a:21:e8:8a:71:92:b4:ec:1c:06:84:7c:
fc:c5:1b:3b:a7:48:aa:47:db:15:ea:09:0a:58:6a:
cc:09:6e:2a:a3:03:69:3c:22:b8:9b:24:06:95:cb:
6b:8b:93:63:38:f5:fd:bc:9e:db:97:fe:3f:cf:c3:
15:02:ba:f2:31:e8:cf:a4:cd:2a:14:2d:8b:c3:af:
f1:d2:ed:d7:76:8c:1e:55:e6:b3:b9:f4:c7:2b:f1:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3E:94:30:5C:C7:B1:25:24:1B:01:08:99:AB:48:FD:C9:F1:F4:65
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:71:dd:ec:f2:e7:27:ff:a5:7a:60:a7:ad:e1:b6:45:d3:db:
39:5f:b2:74:c4:dc:a0:0c:70:8d:ab:07:75:35:85:b9:0b:bc:
e5:26:9e:34:bf:70:22:89:7a:de:20:fb:09:04:b3:0b:9f:6e:
bf:b2:fa:9e:77:f8:ac:49:c6:01:89:5e:ac:94:e1:e8:48:96:
85:c4:5a:af:6e:3b:47:d1:d9:2e:9e:29:af:5c:46:db:6e:ab:
f9:ed:80:a6:92:e7:89:85:63:50:30:6c:ae:1b:8b:e7:29:fd:
50:4a:ea:10:0a:30:be:0d:03:3e:1d:db:c3:2a:23:00:28:85:
73:2d:95:29:47:5b:ad:18:5a:cc:62:ed:ba:91:fd:60:fc:f4:
bf:8d:47:39:83:86:98:a6:ee:83:25:13:65:72:da:10:f7:89:
0e:65:cd:29:cf:44:21:d5:01:38:2d:1c:b7:34:5c:cc:36:eb:
31:c2:4d:31:4c:c2:76:75:1f:42:b8:bb:f8:f1:07:8f:98:27:
b8:37:ba:da:3f:e3:bc:b7:84:8f:b3:12:d3:0d:66:ff:a3:48:
b3:9d:9d:c2:30:b1:05:87:32:77:91:fd:6c:ea:75:71:12:bd:
3a:8d:5e:e6:21:93:4d:08:d7:5d:a5:65:0a:c6:d8:54:f0:35:
cc:32:76:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3gNRBDwQzMK+Q0xfF9n+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2
MTdjNmEwHhcNMjYxMTE1MTEwMDUzWhcNMjYxMTE2MTEwMDUzWjAzMTEwLwYDVQQD
Eyg5YzNlOTQzMDVjYzdiMTI1MjQxYjAxMDg5OWFiNDhmZGM5ZjFmNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU0Hq+w6zF8mxN3g74/5es747CL+
Wj5Bwm+FSW5xrd1nh1dMLGQdySP/npDGGQZ0E3evlPdyCCCAMy9PP1e8Sp92U3bB
Rsj/s5UpuuiGoFUx1DxfYN6BMz4brwqx+1k/mr4xEE4DSVc7wRiKl/MBSLIHkFZ2
vLKWu9FDJfJA30HISwj30W9jMvN6jC4UZhHOPfdew1PKAjZuhBbsWl1rbH/foBJr
aUqKIeiKcZK07BwGhHz8xRs7p0iqR9sV6gkKWGrMCW4qowNpPCK4myQGlctri5Nj
OPX9vJ7bl/4/z8MVArryMejPpM0qFC2Lw6/x0u3XdoweVeazufTHK/EiRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw+lDBcx7ElJBsBCJmrSP3J8fRlMB8GA1UdIwQY
MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt
ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5
LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3Hd7PLn
J/+lemCnreG2RdPbOV+ydMTcoAxwjasHdTWFuQu85SaeNL9wIol63iD7CQSzC59u
v7L6nnf4rEnGAYlerJTh6EiWhcRar247R9HZLp4pr1xG226r+e2AppLniYVjUDBs
rhuL5yn9UErqEAowvg0DPh3bwyojACiFcy2VKUdbrRhazGLtupH9YPz0v41HOYOG
mKbugyUTZXLaEPeJDmXNKc9EIdUBOC0ctzRczDbrMcJNMUzCdnUfQri7+PEHj5gn
uDe62j/jvLeEj7MS0w1m/6NIs52dwjCxBYcyd5H9bOp1cRK9Oo1e5iGTTQjXXaVl
CsbYVPA1zDJ28w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:38:13 2026 by rpki-client