Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier: YYnjkoBQWRp4jfadEAK6WusM59T9T2rQN9DkPx2SeFk=
Subject key identifier: 54:BA:CF:00:20:DE:95:1C:C1:BB:7D:5C:38:32:A9:4F:C5:89:92:6C
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial: 019F935BA48D78CF707F9C5A8A8EAB1CDF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number: 0686
Signing time: Fri 24 Jul 2026 09:01:24 +0000
Manifest this update: Fri 24 Jul 2026 09:01:24 +0000
Manifest next update: Sat 25 Jul 2026 09:01:24 +0000
Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: PzbCovxK0IFoGZ4jRog5PMd986y6ikkclVKbdBPz570=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a4:8d:78:cf:70:7f:9c:5a:8a:8e:ab:1c:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Validity
Not Before: Jul 24 09:01:24 2026 GMT
Not After : Jul 25 09:01:24 2026 GMT
Subject: CN=54bacf0020de951cc1bb7d5c3832a94fc589926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:d6:a2:0e:46:58:b8:e5:9f:b8:2d:cd:f8:
f9:c7:1b:0d:ca:be:69:c0:7b:f1:6f:db:eb:5a:ca:
52:54:3d:43:c4:b6:47:12:16:3b:d2:5b:e4:e1:29:
47:cf:a0:dd:21:ed:70:ba:35:52:f3:d0:67:fe:43:
2e:77:ae:95:4e:f2:15:e9:35:b9:f7:d8:17:6a:15:
0f:2c:b7:e2:54:59:d8:31:95:d0:a0:6c:6a:a2:fa:
3d:dd:c9:62:3f:c3:1b:28:0d:44:fe:26:5e:73:23:
e8:b2:4c:57:39:24:bc:d0:47:50:1f:6e:35:89:a9:
c8:e0:7e:d4:e3:53:19:23:77:77:c1:2d:22:b5:5a:
c1:9c:19:8e:07:79:8c:36:95:6c:16:0e:61:fc:1b:
4e:aa:74:98:bf:1f:e3:02:38:3e:e7:70:65:87:60:
aa:f1:71:7e:62:9c:68:e4:03:d0:ba:14:79:fa:5e:
5d:91:86:8a:3a:c4:17:36:e6:f8:82:a4:e4:6c:d8:
86:7b:99:2d:9e:0f:9f:05:53:88:a2:8d:b0:44:90:
f4:18:84:d7:a1:0d:10:b1:e2:25:07:c6:e4:ab:91:
63:34:ff:85:5e:2c:9e:3b:ad:1f:b9:24:1b:d8:17:
10:2d:2d:ec:f1:73:82:0a:25:65:df:05:ee:95:53:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BA:CF:00:20:DE:95:1C:C1:BB:7D:5C:38:32:A9:4F:C5:89:92:6C
X509v3 Authority Key Identifier:
keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:06:68:31:cd:0e:04:fe:1c:97:c6:08:73:df:18:81:e4:b1:
79:60:70:ab:ad:87:fa:2e:9e:68:3e:de:b1:78:ec:b7:ba:50:
ca:b0:d8:e0:85:9b:a8:33:01:b6:bb:d2:e3:75:bd:29:c9:4f:
e4:3c:25:c1:42:7f:c8:e1:bd:64:25:93:0e:1e:a8:5a:af:0d:
28:d7:59:8e:a5:5d:f4:df:76:71:8b:1d:67:24:7b:66:ba:fe:
d9:65:61:2a:72:1d:14:46:df:16:25:ee:31:64:51:24:b6:58:
91:de:c8:6e:2f:b5:a6:27:35:d7:32:9b:02:2f:44:a2:ce:b0:
28:d4:b8:7e:28:cb:cd:49:09:08:47:63:cd:3b:7b:24:0a:45:
36:70:6c:71:e8:ea:f4:c5:52:c8:90:21:8e:ae:48:2f:ed:85:
66:33:87:a6:33:2d:24:04:d5:7c:b5:df:2f:96:0f:39:68:81:
55:23:5f:25:e0:5a:17:7f:58:2d:aa:05:b5:41:96:4e:6c:4a:
f4:cb:e3:2c:d6:0e:0e:60:02:d8:73:59:1b:07:30:e0:11:dd:
74:f8:5e:c4:34:44:a4:a3:02:fe:7f:e7:12:3e:94:b8:ff:1e:
88:5b:d8:b5:74:3d:8f:aa:1e:7f:c2:ed:c6:30:27:87:62:f7:
ee:af:8e:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW6SNeM9wf5xaio6rHN8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk0NGU0ZmFlMTljMTVhMjZmY2I1ZjI3MzJmZjFiYTIz
ZDM1NGQwHhcNMjYwNzI0MDkwMTI0WhcNMjYwNzI1MDkwMTI0WjAzMTEwLwYDVQQD
Eyg1NGJhY2YwMDIwZGU5NTFjYzFiYjdkNWMzODMyYTk0ZmM1ODk5MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw7Wog5GWLjln7gtzfj5xxsNyr5p
wHvxb9vrWspSVD1DxLZHEhY70lvk4SlHz6DdIe1wujVS89Bn/kMud66VTvIV6TW5
99gXahUPLLfiVFnYMZXQoGxqovo93cliP8MbKA1E/iZecyPoskxXOSS80EdQH241
ianI4H7U41MZI3d3wS0itVrBnBmOB3mMNpVsFg5h/BtOqnSYvx/jAjg+53Blh2Cq
8XF+Ypxo5APQuhR5+l5dkYaKOsQXNub4gqTkbNiGe5ktng+fBVOIoo2wRJD0GITX
oQ0QseIlB8bkq5FjNP+FXiyeO60fuSQb2BcQLS3s8XOCCiVl3wXulVMA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS6zwAg3pUcwbt9XDgyqU/FiZJsMB8GA1UdIwQY
MBaAFOZZROT64ZwVom/LXycy/xuiPTVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMt
Njk4Y2M3MjY4ODgwLzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMtNjk4Y2M3MjY4ODgw
LzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwZoMc0O
BP4cl8YIc98YgeSxeWBwq62H+i6eaD7esXjst7pQyrDY4IWbqDMBtrvS43W9KclP
5DwlwUJ/yOG9ZCWTDh6oWq8NKNdZjqVd9N92cYsdZyR7Zrr+2WVhKnIdFEbfFiXu
MWRRJLZYkd7Ibi+1pic11zKbAi9Eos6wKNS4fijLzUkJCEdjzTt7JApFNnBscejq
9MVSyJAhjq5IL+2FZjOHpjMtJATVfLXfL5YPOWiBVSNfJeBaF39YLaoFtUGWTmxK
9MvjLNYODmAC2HNZGwcw4BHddPhexDREpKMC/n/nEj6UuP8eiFvYtXQ9j6oef8Lt
xjAnh2L37q+OKA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:55 2026 by rpki-client