Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
File: 5Kx1KYEdAQxOrpKbgmncse5gQn0.mft (raw, json)
Hash identifier: gj4KluKxwCU1C3qrnjxgUc6Bp1ZaUYLwFo88fARZ1Lo=
Subject key identifier: 2A:E5:1D:BC:06:CE:C5:B8:C4:71:8B:7D:55:FC:26:70:26:15:6D:B5
Authority key identifier: E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
Certificate issuer: /CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Certificate serial: 01A0DFF44D7732519C2B6D7C19D34DFD2379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
Manifest number: 01BD
Signing time: Sat 26 Sep 2026 23:02:04 +0000
Manifest this update: Sat 26 Sep 2026 23:02:04 +0000
Manifest next update: Sun 27 Sep 2026 23:02:04 +0000
Files and hashes: 1: 5Kx1KYEdAQxOrpKbgmncse5gQn0.crl (hash: Sd8jEcRoxDTf7NMxKocpJPNT+dW0LZH7ku+ID+4yJyI=)
2: BK4arnbSQ4B25pxDRE5Ie4tBFeQ.roa (hash: Z8/iluS8EAJmrvxxHXbWJHlRH0f/X4A6MDYigcnMSGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f4:4d:77:32:51:9c:2b:6d:7c:19:d3:4d:fd:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Validity
Not Before: Sep 26 23:02:04 2026 GMT
Not After : Sep 27 23:02:04 2026 GMT
Subject: CN=2ae51dbc06cec5b8c4718b7d55fc267026156db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:03:ff:38:ae:6f:63:03:cc:71:be:11:45:c9:
66:69:51:a2:06:4f:78:3f:55:e2:a2:3d:4e:22:9c:
62:e2:48:25:6c:94:92:d3:2f:b9:51:2e:6f:6d:50:
6d:96:3e:69:a9:82:0a:a8:61:9d:c2:13:13:fa:01:
f4:71:a6:92:7d:40:98:ae:fe:7a:93:72:de:08:d2:
32:97:75:39:a5:84:1f:70:b4:6f:71:40:11:cb:95:
8e:06:8e:a9:cb:96:da:3d:46:8d:44:1c:20:df:8c:
10:23:d2:60:e3:91:5c:79:0e:8f:04:b3:f8:3e:b5:
b2:6a:1a:5b:f3:a5:dc:f2:7e:f8:1f:ce:8f:4e:60:
01:b9:21:64:3f:7e:7e:57:8a:6e:05:c0:e0:9c:6e:
e4:28:05:ff:d9:72:63:05:e8:3e:ea:82:72:8a:72:
43:b1:2d:e6:c0:08:79:3a:c1:71:7a:ec:00:00:a1:
30:77:84:d8:5b:ba:c0:d1:65:73:b7:fc:b8:ba:85:
87:73:89:e9:17:9d:6b:36:03:12:ab:5c:8d:49:47:
de:66:3e:ca:70:ed:9a:f1:16:ab:51:ad:51:b6:2f:
a2:0c:41:18:a8:0b:c3:a5:4f:19:2f:ce:7d:c7:6c:
3d:ff:50:19:01:65:a0:a6:01:d6:c5:13:c8:45:b0:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:1D:BC:06:CE:C5:B8:C4:71:8B:7D:55:FC:26:70:26:15:6D:B5
X509v3 Authority Key Identifier:
keyid:E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ee:95:92:3e:fb:55:c3:33:d2:e2:60:1b:4a:11:4f:e7:19:
12:c4:f2:04:0a:82:e2:db:0a:91:42:2f:9c:8e:21:d4:bf:c1:
24:46:3a:5f:c5:10:06:40:bd:5a:d6:28:3f:ce:72:e8:f8:fe:
4d:67:3c:57:40:97:61:90:c4:47:b9:37:05:48:11:36:5e:de:
1d:32:f6:d6:1b:b9:15:6c:05:68:81:ec:2f:e4:0f:99:9d:44:
ca:1c:cb:b0:b8:c1:67:5e:32:31:44:81:a3:8d:d8:94:92:07:
70:2d:b4:91:a1:56:4e:44:6f:f9:23:8d:db:fe:8a:f0:d3:9a:
3d:3e:f4:54:a0:bb:20:df:5f:2e:8b:f9:b3:4e:4a:d4:8e:ba:
65:a0:b9:cb:51:2a:21:bf:c6:27:f3:85:a0:4c:32:7d:0d:b5:
48:ec:4e:8c:ad:97:df:87:77:b7:43:a7:bf:f8:9d:38:25:a2:
e7:d5:f4:2a:c6:cc:ec:74:c5:7f:c4:ac:98:9c:47:36:3b:b4:
ac:9d:53:15:30:c4:31:e2:d3:c8:d0:37:0d:27:92:ae:37:26:
6c:99:39:de:92:c7:c5:07:75:60:73:95:65:ba:e9:c8:29:22:
64:47:48:c7:37:11:05:50:d2:96:a0:59:9a:d8:30:27:56:45:
4f:8f:37:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDf9E13MlGcK218GdNN/SN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YWM3NTI5ODExZDAxMGM0ZWFlOTI5YjgyNjlkY2IxZWU2
MDQyN2QwHhcNMjYwOTI2MjMwMjA0WhcNMjYwOTI3MjMwMjA0WjAzMTEwLwYDVQQD
EygyYWU1MWRiYzA2Y2VjNWI4YzQ3MThiN2Q1NWZjMjY3MDI2MTU2ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wP/OK5vYwPMcb4RRclmaVGiBk94
P1Xioj1OIpxi4kglbJSS0y+5US5vbVBtlj5pqYIKqGGdwhMT+gH0caaSfUCYrv56
k3LeCNIyl3U5pYQfcLRvcUARy5WOBo6py5baPUaNRBwg34wQI9Jg45FceQ6PBLP4
PrWyahpb86Xc8n74H86PTmABuSFkP35+V4puBcDgnG7kKAX/2XJjBeg+6oJyinJD
sS3mwAh5OsFxeuwAAKEwd4TYW7rA0WVzt/y4uoWHc4npF51rNgMSq1yNSUfeZj7K
cO2a8RarUa1Rti+iDEEYqAvDpU8ZL859x2w9/1AZAWWgpgHWxRPIRbCQSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrlHbwGzsW4xHGLfVX8JnAmFW21MB8GA1UdIwQY
MBaAFOSsdSmBHQEMTq6Sm4Jp3LHuYEJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUt4MUtZRWRBUXhPcnBLYmdtbmNzZTVnUW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85ZjdiYjEtOGFhNi00MThhLWJiZTMt
ODMxNTI2ZGViMzI3LzEvNUt4MUtZRWRBUXhPcnBLYmdtbmNzZTVnUW4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85ZjdiYjEtOGFhNi00MThhLWJiZTMtODMxNTI2ZGViMzI3
LzEvNUt4MUtZRWRBUXhPcnBLYmdtbmNzZTVnUW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO6Vkj77
VcMz0uJgG0oRT+cZEsTyBAqC4tsKkUIvnI4h1L/BJEY6X8UQBkC9WtYoP85y6Pj+
TWc8V0CXYZDER7k3BUgRNl7eHTL21hu5FWwFaIHsL+QPmZ1EyhzLsLjBZ14yMUSB
o43YlJIHcC20kaFWTkRv+SON2/6K8NOaPT70VKC7IN9fLov5s05K1I66ZaC5y1Eq
Ib/GJ/OFoEwyfQ21SOxOjK2X34d3t0Onv/idOCWi59X0KsbM7HTFf8SsmJxHNju0
rJ1TFTDEMeLTyNA3DSeSrjcmbJk53pLHxQd1YHOVZbrpyCkiZEdIxzcRBVDSlqBZ
mtgwJ1ZFT483Mw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:00:50 2026 by rpki-client