Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: 4wYR2A4ftMuu3/dDe6VW7GigpQgx0pAPLSAHM2b0xqI=
Subject key identifier: C3:84:00:C7:56:AB:C6:DF:05:EE:7A:6F:A9:23:40:0C:B3:BC:03:A6
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 01A1DF833C31957CD3DAFDA6FD3BFFB18047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 14:01:22 +0000
Manifest this update: Sun 15 Nov 2026 14:01:22 +0000
Manifest next update: Mon 16 Nov 2026 14:01:22 +0000
Files and hashes: 1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: AUk+5X9uGZJmSQEnx1Hn5pXWJaDR/icivijzeJTSbX4=)
3: _Jzbksm-JMXJG_vIupQOGd5OWfA.asa (hash: Tb8L6c/yPd6zHGW5vozp+7vssh8lOxc/2tcpUf5JfNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:3c:31:95:7c:d3:da:fd:a6:fd:3b:ff:b1:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Nov 15 14:01:22 2026 GMT
Not After : Nov 16 14:01:22 2026 GMT
Subject: CN=c38400c756abc6df05ee7a6fa923400cb3bc03a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:cd:d6:e6:8b:20:fc:af:f5:56:c0:03:b4:
59:d9:52:b6:c1:9f:d7:91:f8:30:b2:18:e9:de:15:
81:47:48:8a:6f:27:94:cc:60:6f:84:7d:dc:d3:3a:
2f:e3:5c:15:0a:10:78:68:b7:2e:e5:80:f8:8e:81:
34:bf:10:d7:33:05:1e:47:54:87:9c:d8:98:cd:4e:
15:a9:fb:d2:c6:0c:91:08:1d:88:6b:41:ab:9a:8a:
e7:7f:a8:43:68:6d:40:ac:ed:aa:f1:51:3f:73:25:
05:7a:58:35:98:13:50:c4:7c:ab:d9:1c:70:72:ea:
ca:30:e7:7f:38:36:5d:f8:93:9a:5e:d8:d0:98:18:
7c:e6:3c:4b:2b:8c:01:ec:4c:67:fb:3c:aa:d5:2a:
a6:2d:91:09:81:8b:10:21:e7:68:bf:55:d4:12:a4:
ee:6e:74:bd:45:86:dd:61:5f:65:a5:9b:69:22:e2:
72:ff:c1:fa:e4:77:e7:34:71:ce:9d:ff:a8:e5:5f:
a9:1b:c3:76:ad:05:90:e3:5d:d2:57:e0:a9:1b:86:
b2:45:b9:12:95:aa:0a:12:ec:a9:6d:8f:b8:e0:8a:
f4:02:70:c9:20:9b:9c:72:5e:95:da:23:f9:95:9e:
f0:c3:85:22:d1:4f:0e:20:38:bd:c8:36:50:4b:76:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:00:C7:56:AB:C6:DF:05:EE:7A:6F:A9:23:40:0C:B3:BC:03:A6
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:71:86:7a:e9:f4:a7:6d:1a:d8:5f:fb:7e:06:fd:6d:18:c7:
8e:0f:eb:e7:23:ff:a5:2e:97:bf:c5:9a:be:0a:c7:50:71:a2:
e8:f3:29:e2:8c:1e:d3:3a:52:2b:df:43:22:7a:87:cc:80:0f:
e9:7e:c0:a5:97:7d:21:c9:dd:7e:d1:d8:70:fb:3b:5c:05:24:
72:33:b3:15:b7:5f:39:bf:c8:7b:c5:52:b9:ab:94:84:8d:90:
9c:78:57:a9:c0:12:9c:3d:63:ad:65:49:f7:df:47:dc:7b:fe:
7d:54:e4:98:1a:8a:1b:b7:65:ca:10:bc:4e:05:8b:33:2e:99:
60:b6:11:f1:c4:1a:8f:a0:61:b2:d7:9d:16:7d:c2:2a:ae:1f:
67:fa:76:42:72:b5:67:62:37:f9:5e:7a:4c:31:0b:82:6d:49:
7e:37:f4:e6:40:54:0e:7f:04:22:79:85:7c:bb:5d:9e:42:c6:
49:fe:ae:32:ec:38:88:92:75:a7:a5:c3:12:ee:74:31:28:63:
b6:61:87:80:89:09:d1:97:9f:f6:5a:24:79:f0:2e:25:81:e8:
b1:01:78:d3:c3:25:88:94:e0:95:e7:62:74:20:ac:21:67:65:
be:43:a8:f0:3f:3a:bc:6e:d7:64:bf:22:14:f1:bd:c4:82:98:
a6:d5:68:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfgzwxlXzT2v2m/Tv/sYBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NGQwOTIwNDdkYmU5YTk2OGExNjBmMzE1ZmFiOWJiOWM4
MzU2ZDcwHhcNMjYxMTE1MTQwMTIyWhcNMjYxMTE2MTQwMTIyWjAzMTEwLwYDVQQD
EyhjMzg0MDBjNzU2YWJjNmRmMDVlZTdhNmZhOTIzNDAwY2IzYmMwM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz67N1uaLIPyv9VbAA7RZ2VK2wZ/X
kfgwshjp3hWBR0iKbyeUzGBvhH3c0zov41wVChB4aLcu5YD4joE0vxDXMwUeR1SH
nNiYzU4VqfvSxgyRCB2Ia0Grmornf6hDaG1ArO2q8VE/cyUFelg1mBNQxHyr2Rxw
curKMOd/ODZd+JOaXtjQmBh85jxLK4wB7Exn+zyq1SqmLZEJgYsQIedov1XUEqTu
bnS9RYbdYV9lpZtpIuJy/8H65HfnNHHOnf+o5V+pG8N2rQWQ413SV+CpG4ayRbkS
laoKEuypbY+44Ir0AnDJIJuccl6V2iP5lZ7ww4Ui0U8OIDi9yDZQS3ZzCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOEAMdWq8bfBe56b6kjQAyzvAOmMB8GA1UdIwQY
MBaAFOVNCSBH2+mpaKFg8xX6ubucg1bXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQt
YTdmZDJmOWU3NGNmLzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQtYTdmZDJmOWU3NGNm
LzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3GGeun0
p20a2F/7fgb9bRjHjg/r5yP/pS6Xv8WavgrHUHGi6PMp4owe0zpSK99DInqHzIAP
6X7ApZd9IcndftHYcPs7XAUkcjOzFbdfOb/Ie8VSuauUhI2QnHhXqcASnD1jrWVJ
999H3Hv+fVTkmBqKG7dlyhC8TgWLMy6ZYLYR8cQaj6BhstedFn3CKq4fZ/p2QnK1
Z2I3+V56TDELgm1Jfjf05kBUDn8EInmFfLtdnkLGSf6uMuw4iJJ1p6XDEu50MShj
tmGHgIkJ0Zef9lokefAuJYHosQF408MliJTgledidCCsIWdlvkOo8D86vG7XZL8i
FPG9xIKYptVoYg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:45 2026 by rpki-client