
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: aNP+hVlfsP7IxE9AVNuXmCGPHqno+O+FZbGfoEXErRs=
Subject key identifier: 28:8A:53:F7:40:69:E8:AE:4E:99:F8:5C:57:0D:D1:5B:96:4A:BD:74
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 01A0D07F7C95A18D31527F7D0FA33AFD2175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 09EF
Signing time: Wed 23 Sep 2026 23:00:10 +0000
Manifest this update: Wed 23 Sep 2026 23:00:10 +0000
Manifest next update: Thu 24 Sep 2026 23:00:10 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: 06+k4VCfYsSHXIbEwbLFOASjHqiVr2viEqGaJpnGAdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:7c:95:a1:8d:31:52:7f:7d:0f:a3:3a:fd:21:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Sep 23 23:00:10 2026 GMT
Not After : Sep 24 23:00:10 2026 GMT
Subject: CN=288a53f74069e8ae4e99f85c570dd15b964abd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:75:c9:f4:78:18:06:4a:db:30:ef:be:2a:
49:b2:49:24:9a:d5:c9:33:e7:19:e1:d6:52:b3:b4:
05:34:3d:d1:27:af:2f:85:5b:70:23:fa:08:11:3a:
26:08:a5:95:de:e9:3c:69:bc:bb:cd:1b:2e:33:59:
11:8e:d5:0d:dc:de:bb:f6:bb:4c:b9:69:4b:59:88:
ef:f6:f2:75:e6:59:be:8e:5a:aa:6e:7f:63:6c:e0:
e2:d4:3d:80:e9:09:e0:ef:a6:ea:e9:2c:4c:18:2d:
b5:dc:fd:59:eb:b0:94:9e:75:dc:16:1f:8a:d2:51:
15:a6:93:96:d1:9d:8a:9e:ba:c0:68:c7:65:14:f7:
6c:0e:7e:9e:c9:d7:5f:a0:69:c3:f9:6d:97:00:37:
60:34:75:80:c7:04:0f:35:9e:ef:6e:6e:5e:d5:a5:
af:37:de:59:97:a7:81:cb:b1:5d:b6:49:3b:7e:e0:
76:a3:e0:19:4e:9b:ef:a1:dc:d0:61:14:b6:fe:0f:
76:bb:d4:69:df:68:45:07:4f:e2:34:f6:db:a5:07:
78:a0:e3:d0:a3:31:8e:ae:55:d1:cf:90:ba:34:e2:
a9:47:cd:67:3e:bf:1c:1d:43:7c:99:7f:4f:dd:ec:
24:18:19:c7:e5:cd:ff:41:b6:11:cd:bd:78:75:81:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:53:F7:40:69:E8:AE:4E:99:F8:5C:57:0D:D1:5B:96:4A:BD:74
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:df:10:0b:a4:0d:85:be:69:c8:ac:69:5f:e1:24:c2:d3:98:
17:0a:4d:a5:be:bf:c6:aa:96:6e:b4:3c:05:0f:17:59:0e:34:
ab:82:47:9a:81:5d:5f:f5:7b:bd:dd:af:1e:82:f3:2a:79:fb:
4e:b2:aa:86:a2:87:7d:0a:91:ed:47:bb:3e:c3:43:6b:8f:66:
29:28:79:00:f7:c6:8c:47:a6:57:39:4c:8b:ac:0c:9b:07:23:
51:aa:0f:b0:fb:34:df:f8:17:7c:b8:69:7b:21:31:cc:37:f3:
03:b5:2b:d2:ce:c1:f1:c3:52:f8:28:b6:ad:a1:4f:4d:5b:f7:
fc:82:8f:61:6b:52:97:4b:1c:a0:65:44:0d:4d:f2:fa:70:ce:
4e:51:a3:8d:36:6d:18:64:33:57:e0:87:7a:1c:bf:1b:29:09:
ce:97:7d:8d:9a:89:c2:3e:b1:91:b0:5f:3b:d7:af:17:75:6a:
f1:79:8c:37:51:f0:7e:d4:05:13:b5:07:30:be:58:7b:81:e4:
ae:52:89:f5:62:59:55:db:5a:73:59:05:4a:bc:09:2e:c5:d8:
f9:a3:df:41:76:24:37:8a:bd:c7:32:85:a6:59:5c:e4:aa:ec:
6d:b5:7a:55:db:0a:6e:57:d1:13:96:53:90:30:38:e4:1e:8f:
b3:d2:cd:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf3yVoY0xUn99D6M6/SF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmFkNTFiZmFkZDI0NTMyMWJlMDkyZTY4MWQ4ZGU2ZTJk
Mjc1YzMwHhcNMjYwOTIzMjMwMDEwWhcNMjYwOTI0MjMwMDEwWjAzMTEwLwYDVQQD
EygyODhhNTNmNzQwNjllOGFlNGU5OWY4NWM1NzBkZDE1Yjk2NGFiZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aR1yfR4GAZK2zDvvipJskkkmtXJ
M+cZ4dZSs7QFND3RJ68vhVtwI/oIETomCKWV3uk8aby7zRsuM1kRjtUN3N679rtM
uWlLWYjv9vJ15lm+jlqqbn9jbODi1D2A6Qng76bq6SxMGC213P1Z67CUnnXcFh+K
0lEVppOW0Z2KnrrAaMdlFPdsDn6eyddfoGnD+W2XADdgNHWAxwQPNZ7vbm5e1aWv
N95Zl6eBy7Fdtkk7fuB2o+AZTpvvodzQYRS2/g92u9Rp32hFB0/iNPbbpQd4oOPQ
ozGOrlXRz5C6NOKpR81nPr8cHUN8mX9P3ewkGBnH5c3/QbYRzb14dYEscwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiKU/dAaeiuTpn4XFcN0VuWSr10MB8GA1UdIwQY
MBaAFOX61Rv63SRTIb4JLmgdjebi0nXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYt
ZDViZGI2MzlmYmNhLzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYtZDViZGI2MzlmYmNh
LzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt8QC6QN
hb5pyKxpX+EkwtOYFwpNpb6/xqqWbrQ8BQ8XWQ40q4JHmoFdX/V7vd2vHoLzKnn7
TrKqhqKHfQqR7Ue7PsNDa49mKSh5APfGjEemVzlMi6wMmwcjUaoPsPs03/gXfLhp
eyExzDfzA7Ur0s7B8cNS+Ci2raFPTVv3/IKPYWtSl0scoGVEDU3y+nDOTlGjjTZt
GGQzV+CHehy/GykJzpd9jZqJwj6xkbBfO9evF3Vq8XmMN1HwftQFE7UHML5Ye4Hk
rlKJ9WJZVdtac1kFSrwJLsXY+aPfQXYkN4q9xzKFpllc5KrsbbV6VdsKblfRE5ZT
kDA45B6Ps9LN2Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:23:09 2026 by rpki-client