Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
File: v5aJ0mM8sZFwKk5L480LMov9iDs.mft (raw, json)
Hash identifier: GPLuAxua+vEkFuQyxeHira9qkHzS4szRi979PBZt0As=
Subject key identifier: B7:D8:75:7E:AD:F8:B0:7F:98:A8:42:DD:82:44:0E:CC:97:3E:67:A1
Authority key identifier: BF:96:89:D2:63:3C:B1:91:70:2A:4E:4B:E3:CD:0B:32:8B:FD:88:3B
Certificate issuer: /CN=bf9689d2633cb191702a4e4be3cd0b328bfd883b
Certificate serial: 019D33E425A7DB25F068211CA7CBB0E08EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5aJ0mM8sZFwKk5L480LMov9iDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
Manifest number: 09
Signing time: Sat 28 Mar 2026 10:01:23 +0000
Manifest this update: Sat 28 Mar 2026 10:01:23 +0000
Manifest next update: Sun 29 Mar 2026 10:01:23 +0000
Files and hashes: 1: v5aJ0mM8sZFwKk5L480LMov9iDs.crl (hash: neE8h5gGJmZm+6gner/G0xLAWrX1Y822sjflTKPJP4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5aJ0mM8sZFwKk5L480LMov9iDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:25:a7:db:25:f0:68:21:1c:a7:cb:b0:e0:8e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9689d2633cb191702a4e4be3cd0b328bfd883b
Validity
Not Before: Mar 28 10:01:23 2026 GMT
Not After : Mar 29 10:01:23 2026 GMT
Subject: CN=b7d8757eadf8b07f98a842dd82440ecc973e67a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:ee:76:b5:52:ed:29:53:f3:e1:83:57:c9:
13:26:5f:b5:32:d0:c8:2e:fc:58:08:24:dc:4e:fa:
34:fe:ec:21:cd:b8:b4:ae:2f:f5:3c:18:a1:22:b8:
35:7d:5f:f6:8d:92:4a:69:01:53:e4:f9:57:f7:73:
4a:4b:d7:57:ed:f4:c2:27:d6:d4:71:8b:0f:b0:ab:
33:5a:1d:46:0b:e1:4b:e9:99:18:ef:d5:b9:88:be:
f2:2c:06:e6:8c:19:18:dd:9a:7f:42:12:02:53:df:
eb:47:34:94:51:0b:54:a6:a0:af:47:7c:de:60:b8:
ba:55:65:a7:6a:d4:1c:06:2c:a8:00:af:48:7e:bd:
de:42:71:ba:b3:a6:82:0c:10:aa:f7:dc:65:4a:fa:
0f:ed:6c:96:27:8b:e6:5b:bb:73:4d:5b:51:9e:af:
78:75:b9:a7:a6:aa:87:87:c9:2d:9f:da:ea:f5:7c:
e4:99:43:72:a3:71:dd:9e:e0:cd:de:7c:a9:fc:4d:
95:a7:ee:97:81:de:31:26:1c:01:fd:f4:de:39:5b:
f1:2d:f0:c1:2d:84:55:0d:ab:df:46:74:ec:c3:b6:
4c:9a:9c:a7:01:2a:c0:05:58:8c:8d:97:cc:36:77:
79:00:78:0c:78:8d:28:bc:d0:c6:f6:02:38:cb:c9:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:75:7E:AD:F8:B0:7F:98:A8:42:DD:82:44:0E:CC:97:3E:67:A1
X509v3 Authority Key Identifier:
keyid:BF:96:89:D2:63:3C:B1:91:70:2A:4E:4B:E3:CD:0B:32:8B:FD:88:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5aJ0mM8sZFwKk5L480LMov9iDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:06:99:3c:e8:bb:66:68:af:3c:26:8e:02:32:91:ea:37:59:
78:15:20:a9:72:bc:64:da:08:ac:08:36:e0:3b:38:3a:7d:73:
4d:b4:5c:9f:0d:cf:55:a8:ee:f3:48:9c:14:90:8d:67:af:f5:
92:6b:a5:b6:1e:93:0a:82:2a:98:d4:e0:e9:7c:bd:c1:74:2e:
88:04:ce:8d:b4:61:bc:7f:9f:49:b6:dc:22:63:a6:4b:32:35:
ce:91:31:7a:c2:72:46:c7:9f:7c:66:56:10:64:0c:e8:61:31:
dd:4b:66:09:49:38:63:3d:24:48:ba:c8:f5:d6:c8:ad:36:bc:
1d:69:1e:5a:a1:2e:c0:2e:7b:50:fb:40:bb:60:cc:bf:fa:b3:
d6:7f:ec:08:d6:92:56:14:fa:c9:79:79:51:57:de:86:87:1e:
c4:b0:95:c6:67:37:5b:0e:dd:af:b4:1e:17:f7:0d:bd:01:20:
d5:57:d7:24:39:fa:db:11:9d:c8:14:6f:cb:d9:83:60:5c:4e:
6a:60:14:35:27:83:fa:61:68:d3:1e:02:48:55:2b:b7:6b:92:
5d:49:89:9b:02:11:ca:e5:fc:4b:1d:4c:59:ea:97:93:77:8f:
e1:1b:4f:8f:ff:ff:9a:5e:96:95:34:bc:a9:f9:ca:82:b4:5c:
58:a3:af:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0z5CWn2yXwaCEcp8uw4I64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOTY4OWQyNjMzY2IxOTE3MDJhNGU0YmUzY2QwYjMyOGJm
ZDg4M2IwHhcNMjYwMzI4MTAwMTIzWhcNMjYwMzI5MTAwMTIzWjAzMTEwLwYDVQQD
EyhiN2Q4NzU3ZWFkZjhiMDdmOThhODQyZGQ4MjQ0MGVjYzk3M2U2N2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6DudrVS7SlT8+GDV8kTJl+1MtDI
LvxYCCTcTvo0/uwhzbi0ri/1PBihIrg1fV/2jZJKaQFT5PlX93NKS9dX7fTCJ9bU
cYsPsKszWh1GC+FL6ZkY79W5iL7yLAbmjBkY3Zp/QhICU9/rRzSUUQtUpqCvR3ze
YLi6VWWnatQcBiyoAK9Ifr3eQnG6s6aCDBCq99xlSvoP7WyWJ4vmW7tzTVtRnq94
dbmnpqqHh8ktn9rq9XzkmUNyo3HdnuDN3nyp/E2Vp+6Xgd4xJhwB/fTeOVvxLfDB
LYRVDavfRnTsw7ZMmpynASrABViMjZfMNnd5AHgMeI0ovNDG9gI4y8k71QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfYdX6t+LB/mKhC3YJEDsyXPmehMB8GA1UdIwQY
MBaAFL+WidJjPLGRcCpOS+PNCzKL/Yg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVhSjBtTThzWkZ3S2s1TDQ4MExNb3Y5aURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS84NDVhMGEtMmEyNi00YmI4LTk3ZTMt
OTUyYmE2Zjc1NTEzLzEvdjVhSjBtTThzWkZ3S2s1TDQ4MExNb3Y5aURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS84NDVhMGEtMmEyNi00YmI4LTk3ZTMtOTUyYmE2Zjc1NTEz
LzEvdjVhSjBtTThzWkZ3S2s1TDQ4MExNb3Y5aURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwaZPOi7
ZmivPCaOAjKR6jdZeBUgqXK8ZNoIrAg24Ds4On1zTbRcnw3PVaju80icFJCNZ6/1
kmulth6TCoIqmNTg6Xy9wXQuiATOjbRhvH+fSbbcImOmSzI1zpExesJyRseffGZW
EGQM6GEx3UtmCUk4Yz0kSLrI9dbIrTa8HWkeWqEuwC57UPtAu2DMv/qz1n/sCNaS
VhT6yXl5UVfehocexLCVxmc3Ww7dr7QeF/cNvQEg1VfXJDn62xGdyBRvy9mDYFxO
amAUNSeD+mFo0x4CSFUrt2uSXUmJmwIRyuX8Sx1MWeqXk3eP4RtPj///ml6WlTS8
qfnKgrRcWKOvAA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:45 2026 by rpki-client