Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
File: 5Kx1KYEdAQxOrpKbgmncse5gQn0.mft (raw, json)
Hash identifier: 8J9gga1Adw49pjNBu+9tqt/vnGaEOSwwMN9Pe21Te3w=
Subject key identifier: 8B:6D:14:68:2E:AC:67:F0:2E:CE:7D:7D:B6:30:6D:00:D5:7A:E6:EB
Authority key identifier: E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
Certificate issuer: /CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Certificate serial: 019F90913CE93BE1F5AC61E0154088085A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
Manifest number: 010F
Signing time: Thu 23 Jul 2026 20:01:05 +0000
Manifest this update: Thu 23 Jul 2026 20:01:05 +0000
Manifest next update: Fri 24 Jul 2026 20:01:05 +0000
Files and hashes: 1: 5Kx1KYEdAQxOrpKbgmncse5gQn0.crl (hash: OL4PECPStkHV614ixdHXV3Nplyho7jAItcuNd/5GJZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:3c:e9:3b:e1:f5:ac:61:e0:15:40:88:08:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Validity
Not Before: Jul 23 20:01:05 2026 GMT
Not After : Jul 24 20:01:05 2026 GMT
Subject: CN=8b6d14682eac67f02ece7d7db6306d00d57ae6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:ab:70:a3:f9:46:df:fa:68:0e:a5:60:93:
93:be:aa:a2:d0:f8:e0:d3:a5:c9:6e:c2:eb:0c:96:
0b:2f:f0:4f:00:60:96:11:3a:4b:47:7a:50:3d:55:
e6:5a:ee:8f:96:8b:bf:00:91:b0:3c:d8:ea:ef:f3:
62:71:e3:d0:6d:e4:16:30:a1:22:3c:2b:1c:45:7c:
53:7b:55:4a:45:d0:ca:02:69:1d:d1:e3:76:ab:c0:
71:69:4d:8b:9f:15:e6:fd:6a:59:14:43:54:b7:29:
60:e3:57:46:a2:79:0c:98:d8:86:5e:15:42:a5:da:
4b:41:7f:3b:74:6f:aa:08:0d:d2:ab:76:1e:2a:48:
5d:86:d0:94:36:5d:4f:54:b5:8d:cc:3b:75:cc:0f:
68:ad:41:46:74:fe:2a:62:ed:a9:66:b8:e3:91:fc:
d6:92:da:4d:4f:d4:e2:3d:ea:38:d7:11:a4:65:b8:
79:a5:de:e7:0b:31:1e:3a:6e:23:23:11:28:09:b8:
27:00:75:06:4d:b0:97:e7:f1:e3:69:87:b2:b0:b7:
44:12:5e:05:a1:94:b8:3d:07:22:60:71:22:27:74:
79:a7:01:9b:9f:c2:fe:47:8e:9c:f9:3a:71:05:87:
bc:48:48:7d:8e:42:00:0f:59:35:68:1f:de:0c:78:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6D:14:68:2E:AC:67:F0:2E:CE:7D:7D:B6:30:6D:00:D5:7A:E6:EB
X509v3 Authority Key Identifier:
keyid:E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ab:f6:a9:a6:f0:b2:1f:be:09:4f:2a:f8:f4:b5:04:cc:37:
84:e5:4e:24:da:94:6f:07:a6:d3:c5:a1:9c:7b:be:a0:39:3c:
67:d9:87:64:02:4d:d3:c7:97:6d:6f:bf:b8:5f:a1:6e:94:6e:
16:fb:2d:b6:3a:4d:61:ae:ee:55:85:f2:5e:f1:41:70:4d:e3:
a7:58:bb:a8:33:b5:b1:87:94:2b:59:fa:9b:bd:54:3b:6b:21:
d8:05:ff:f2:a8:d3:d9:12:9d:24:33:e5:78:2b:23:36:ed:25:
31:45:24:7f:0b:29:39:e5:d4:66:bf:37:25:2d:ec:91:cb:35:
ef:23:76:01:41:6f:d0:96:e5:b7:72:04:a8:35:58:b9:a4:82:
51:c1:cf:ac:e8:a7:b5:43:a5:19:83:e0:0c:3f:96:3d:7a:fa:
42:a9:bf:0b:7d:54:04:c1:6e:c7:fe:7c:8e:c5:69:e0:bb:fd:
e8:6c:44:f7:bf:db:60:85:b3:1c:45:6a:f1:f4:85:eb:f7:03:
70:14:f9:18:94:4d:b6:44:23:f7:2d:64:41:88:e3:a2:3c:d0:
21:d4:c9:c2:66:58:46:20:ff:09:48:a5:06:46:cd:8e:26:df:
6f:4d:75:6f:c2:4b:bd:3a:60:08:25:08:d8:17:3d:68:db:25:
df:71:9a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkTzpO+H1rGHgFUCICFoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YWM3NTI5ODExZDAxMGM0ZWFlOTI5YjgyNjlkY2IxZWU2
MDQyN2QwHhcNMjYwNzIzMjAwMTA1WhcNMjYwNzI0MjAwMTA1WjAzMTEwLwYDVQQD
Eyg4YjZkMTQ2ODJlYWM2N2YwMmVjZTdkN2RiNjMwNmQwMGQ1N2FlNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApharcKP5Rt/6aA6lYJOTvqqi0Pjg
06XJbsLrDJYLL/BPAGCWETpLR3pQPVXmWu6Plou/AJGwPNjq7/NicePQbeQWMKEi
PCscRXxTe1VKRdDKAmkd0eN2q8BxaU2LnxXm/WpZFENUtylg41dGonkMmNiGXhVC
pdpLQX87dG+qCA3Sq3YeKkhdhtCUNl1PVLWNzDt1zA9orUFGdP4qYu2pZrjjkfzW
ktpNT9TiPeo41xGkZbh5pd7nCzEeOm4jIxEoCbgnAHUGTbCX5/HjaYeysLdEEl4F
oZS4PQciYHEiJ3R5pwGbn8L+R46c+TpxBYe8SEh9jkIAD1k1aB/eDHhpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIttFGgurGfwLs59fbYwbQDVeubrMB8GA1UdIwQY
MBaAFOSsdSmBHQEMTq6Sm4Jp3LHuYEJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUt4MUtZRWRBUXhPcnBLYmdtbmNzZTVnUW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85ZjdiYjEtOGFhNi00MThhLWJiZTMt
ODMxNTI2ZGViMzI3LzEvNUt4MUtZRWRBUXhPcnBLYmdtbmNzZTVnUW4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85ZjdiYjEtOGFhNi00MThhLWJiZTMtODMxNTI2ZGViMzI3
LzEvNUt4MUtZRWRBUXhPcnBLYmdtbmNzZTVnUW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmav2qabw
sh++CU8q+PS1BMw3hOVOJNqUbwem08WhnHu+oDk8Z9mHZAJN08eXbW+/uF+hbpRu
FvsttjpNYa7uVYXyXvFBcE3jp1i7qDO1sYeUK1n6m71UO2sh2AX/8qjT2RKdJDPl
eCsjNu0lMUUkfwspOeXUZr83JS3skcs17yN2AUFv0Jblt3IEqDVYuaSCUcHPrOin
tUOlGYPgDD+WPXr6Qqm/C31UBMFux/58jsVp4Lv96GxE97/bYIWzHEVq8fSF6/cD
cBT5GJRNtkQj9y1kQYjjojzQIdTJwmZYRiD/CUilBkbNjibfb011b8JLvTpgCCUI
2Bc9aNsl33GaKg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:00 2026 by rpki-client