Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
File: 5vxHDvW4iHmlId3t94cHhZubDjc.mft (raw, json)
Hash identifier: 4i/rZFiWzncf0oEvqlTHXfYZo6guscKeyJ25dJUhJh0=
Subject key identifier: 35:EC:24:50:D8:53:5A:14:4B:E6:ED:6A:E5:D1:4F:B8:F7:F7:50:42
Authority key identifier: E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37
Certificate issuer: /CN=e6fc470ef5b88879a521ddedf78707859b9b0e37
Certificate serial: 019E1DFE07D025E8D869DD3255EEC07262FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
Manifest number: 027C
Signing time: Tue 12 May 2026 21:00:47 +0000
Manifest this update: Tue 12 May 2026 21:00:47 +0000
Manifest next update: Wed 13 May 2026 21:00:47 +0000
Files and hashes: 1: 5vxHDvW4iHmlId3t94cHhZubDjc.crl (hash: BuAKIFrR+p3mn/ytkQF/s3nlzI7TnG/O7K+rRK0hSQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:07:d0:25:e8:d8:69:dd:32:55:ee:c0:72:62:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc470ef5b88879a521ddedf78707859b9b0e37
Validity
Not Before: May 12 21:00:47 2026 GMT
Not After : May 13 21:00:47 2026 GMT
Subject: CN=35ec2450d8535a144be6ed6ae5d14fb8f7f75042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:49:89:b3:4a:62:9a:99:b7:61:64:88:a9:
66:ee:d6:a6:5e:96:50:c6:2c:1d:0b:79:f7:06:0c:
11:42:8d:5c:4d:0e:0a:e2:4a:6a:16:26:c5:75:80:
65:9e:05:54:02:9c:99:76:e7:cf:95:6e:f4:2d:a1:
35:15:e8:59:05:99:80:ce:36:b2:36:bd:76:d9:6f:
ba:f0:42:30:b7:d6:07:ed:44:49:dc:b7:07:30:da:
19:88:be:e6:41:b4:3e:01:f0:26:42:6b:2b:25:69:
13:db:a1:17:5b:62:68:3d:57:24:3a:d6:bd:a6:73:
55:fc:13:c0:21:f8:5e:93:37:9a:0a:53:34:db:58:
ff:85:21:38:0e:9f:77:cd:a4:29:cf:a5:89:ae:bc:
b7:88:15:86:a0:32:a4:4d:a2:1f:7d:bf:bd:3d:fd:
e7:84:44:03:68:36:77:6a:90:46:b9:0e:92:f8:73:
41:28:0c:32:6a:9d:e8:6c:6b:8d:8e:76:00:c0:f4:
cc:0c:7b:50:d3:bf:6e:f9:d6:73:e1:7b:f6:b9:41:
b4:c4:18:49:ee:f5:2f:a4:4f:94:92:91:bc:4c:3d:
0d:bd:19:ac:6c:2a:a1:49:db:78:0d:05:36:ca:f0:
d1:81:ce:16:c1:93:50:ae:29:3c:04:21:a4:1f:33:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EC:24:50:D8:53:5A:14:4B:E6:ED:6A:E5:D1:4F:B8:F7:F7:50:42
X509v3 Authority Key Identifier:
keyid:E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:71:6d:a9:d3:f0:c8:d0:25:4f:c4:8f:f8:b3:65:62:c2:fc:
93:c7:24:28:68:46:07:73:79:b4:71:d5:18:dc:2d:62:1f:52:
dc:89:c2:cd:7c:83:31:a8:5e:2c:7e:d4:69:79:72:dd:e8:df:
cc:c2:cf:ce:05:a8:08:27:43:70:83:bf:77:95:75:30:20:5c:
81:12:f5:0c:33:12:49:6d:7d:f9:25:78:ba:bc:90:2f:19:04:
77:5c:18:1e:d5:1b:53:03:07:27:12:19:7a:cf:86:3e:f8:12:
42:a0:9f:43:d9:9c:a1:7b:e8:8e:d7:71:b6:23:21:57:c5:0e:
51:21:fa:af:de:e1:70:54:15:a5:2e:25:9c:be:d6:2b:0a:34:
96:1e:b2:3b:41:7a:5e:95:d2:5b:1b:d1:6c:2b:36:7f:03:ff:
75:84:5a:8a:0e:d2:86:95:94:00:d0:05:cd:30:ae:e5:29:f4:
35:98:75:26:92:7f:c2:94:d6:93:f0:84:85:de:e2:60:65:75:
d4:f0:15:5c:3a:e5:1e:c7:b8:ad:f0:75:a2:04:0c:89:86:da:
ce:f2:54:72:7f:21:66:70:49:30:8a:b3:a5:a5:82:7c:68:9e:
d0:e4:b3:eb:08:d6:48:01:b8:a5:52:25:59:37:3c:42:db:6e:
82:39:af:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/gfQJejYad0yVe7AcmL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZmM0NzBlZjViODg4NzlhNTIxZGRlZGY3ODcwNzg1OWI5
YjBlMzcwHhcNMjYwNTEyMjEwMDQ3WhcNMjYwNTEzMjEwMDQ3WjAzMTEwLwYDVQQD
EygzNWVjMjQ1MGQ4NTM1YTE0NGJlNmVkNmFlNWQxNGZiOGY3Zjc1MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZhJibNKYpqZt2FkiKlm7tamXpZQ
xiwdC3n3BgwRQo1cTQ4K4kpqFibFdYBlngVUApyZdufPlW70LaE1FehZBZmAzjay
Nr122W+68EIwt9YH7URJ3LcHMNoZiL7mQbQ+AfAmQmsrJWkT26EXW2JoPVckOta9
pnNV/BPAIfhekzeaClM021j/hSE4Dp93zaQpz6WJrry3iBWGoDKkTaIffb+9Pf3n
hEQDaDZ3apBGuQ6S+HNBKAwyap3obGuNjnYAwPTMDHtQ079u+dZz4Xv2uUG0xBhJ
7vUvpE+UkpG8TD0NvRmsbCqhSdt4DQU2yvDRgc4WwZNQrik8BCGkHzNcLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXsJFDYU1oUS+btauXRT7j391BCMB8GA1UdIwQY
MBaAFOb8Rw71uIh5pSHd7feHB4Wbmw43MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZ4SER2VzRpSG1sSWQzdDk0Y0hoWnViRGpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMGQ1YTEtNWZiMi00ZDMxLTkwNGUt
NzAzN2VmNDlhYzJkLzEvNXZ4SER2VzRpSG1sSWQzdDk0Y0hoWnViRGpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMGQ1YTEtNWZiMi00ZDMxLTkwNGUtNzAzN2VmNDlhYzJk
LzEvNXZ4SER2VzRpSG1sSWQzdDk0Y0hoWnViRGpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3FtqdPw
yNAlT8SP+LNlYsL8k8ckKGhGB3N5tHHVGNwtYh9S3InCzXyDMaheLH7UaXly3ejf
zMLPzgWoCCdDcIO/d5V1MCBcgRL1DDMSSW19+SV4uryQLxkEd1wYHtUbUwMHJxIZ
es+GPvgSQqCfQ9mcoXvojtdxtiMhV8UOUSH6r97hcFQVpS4lnL7WKwo0lh6yO0F6
XpXSWxvRbCs2fwP/dYRaig7ShpWUANAFzTCu5Sn0NZh1JpJ/wpTWk/CEhd7iYGV1
1PAVXDrlHse4rfB1ogQMiYbazvJUcn8hZnBJMIqzpaWCfGie0OSz6wjWSAG4pVIl
WTc8Qttugjmv4g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:04 2026 by rpki-client