Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
File: 5jAbF0RrPssIF-QA6YL3Km2AHTE.mft (raw, json)
Hash identifier: O1mnBNB4GRqhj2BeovmZ+cfsBPILEs+6abrC2Udsu9w=
Subject key identifier: 3E:10:9A:A0:B5:15:9B:FF:30:23:0F:2B:82:84:5D:64:C3:59:32:D0
Authority key identifier: E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
Certificate issuer: /CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Certificate serial: 01A0D50228815829E1B6223ABA06D285FC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
Manifest number: 011E
Signing time: Thu 24 Sep 2026 20:01:23 +0000
Manifest this update: Thu 24 Sep 2026 20:01:23 +0000
Manifest next update: Fri 25 Sep 2026 20:01:23 +0000
Files and hashes: 1: 5jAbF0RrPssIF-QA6YL3Km2AHTE.crl (hash: 6IlLSjK88oZkEzClbSBq1KF6RKWYWWZIm5nM5A+rjvU=)
2: y8-zYgb68sCKmok28fSORVZTV7k.roa (hash: kb393sHwSxydXSQ1l80qzXOkKVqcGzDmY/nU6zerbuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:28:81:58:29:e1:b6:22:3a:ba:06:d2:85:fc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Validity
Not Before: Sep 24 20:01:23 2026 GMT
Not After : Sep 25 20:01:23 2026 GMT
Subject: CN=3e109aa0b5159bff30230f2b82845d64c35932d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:c6:50:c4:f7:e1:2a:9b:ee:48:f0:c4:2e:
23:36:e9:fa:2d:59:d6:e7:1a:62:66:c3:41:45:8f:
1f:d4:ac:05:89:2d:85:29:34:8b:09:51:30:36:0a:
df:70:35:86:8e:bd:9d:c0:79:56:b2:b6:bc:c3:df:
8c:ff:65:2c:18:bd:c6:a4:ff:fe:0c:95:bf:a5:9d:
11:96:61:59:23:24:70:ac:ab:e9:17:bc:24:08:6c:
9c:9b:cb:d1:c4:c6:af:d2:2a:48:75:34:b0:18:22:
65:93:93:da:a7:51:d6:08:d3:4b:c3:a9:ea:b5:14:
91:03:2e:a9:ba:bd:9c:3a:d7:9a:5a:04:66:23:83:
65:26:86:03:33:de:3b:e4:11:8c:d3:7a:58:0e:e9:
77:7f:97:f4:81:33:d9:34:8c:f3:c6:64:eb:e7:57:
e4:51:c4:63:ac:92:cf:6f:26:c1:63:b8:39:6e:7d:
fb:95:40:3d:87:2d:b5:e2:14:15:03:a6:f1:7f:cb:
57:f8:52:f0:dc:37:c1:f4:58:1a:03:d8:89:42:bf:
b7:72:d7:b7:01:f8:4a:ba:ab:7a:94:56:06:17:6c:
40:ad:d1:69:11:21:15:04:62:62:c5:dc:a6:42:60:
94:e6:d1:1f:49:b5:68:30:9a:c1:78:11:c0:b8:21:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:9A:A0:B5:15:9B:FF:30:23:0F:2B:82:84:5D:64:C3:59:32:D0
X509v3 Authority Key Identifier:
keyid:E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:4a:39:f9:09:ea:43:d1:c5:e4:75:d7:e2:3d:fc:0b:41:
c2:fc:9d:0a:19:10:b3:a9:11:ac:aa:fa:bc:12:21:59:e1:ac:
4d:04:1d:ca:43:34:6b:35:4a:a2:b1:cb:6b:1a:46:3f:b6:e4:
01:57:91:92:74:ea:df:6d:4c:79:fe:8a:5e:06:a2:d0:96:81:
d4:8f:de:07:c8:49:4a:68:2c:78:41:c2:2e:66:cd:8a:0d:4c:
28:1b:f0:a8:c6:01:8b:96:76:af:3a:94:c6:9e:17:e3:75:1a:
ba:45:ce:89:c8:fb:a1:94:24:a9:bf:b8:49:0a:6a:d9:0e:74:
30:3f:4e:d5:a3:86:ca:ae:46:7c:51:c1:9c:14:ec:db:b7:91:
0b:b6:d1:f1:67:e2:ce:78:37:13:60:d2:f0:80:2d:5b:cd:1c:
b8:e3:64:55:92:d3:e3:3b:75:cb:a5:59:e8:3d:2d:47:40:46:
7d:49:65:c7:33:dc:28:b4:2e:1e:09:72:b6:97:bb:39:fa:ec:
ba:29:9b:24:6f:ea:25:e9:5c:b5:d5:4a:f3:a3:34:b0:19:3c:
d1:13:94:00:db:e5:9c:29:8c:c6:4f:5f:2b:c5:83:26:53:33:
82:f6:c5:62:e0:1f:44:59:f2:0e:75:6d:fd:8a:1b:cc:da:49:
21:0f:1a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAiiBWCnhtiI6ugbShfw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzAxYjE3NDQ2YjNlY2IwODE3ZTQwMGU5ODJmNzJhNmQ4
MDFkMzEwHhcNMjYwOTI0MjAwMTIzWhcNMjYwOTI1MjAwMTIzWjAzMTEwLwYDVQQD
EygzZTEwOWFhMGI1MTU5YmZmMzAyMzBmMmI4Mjg0NWQ2NGMzNTkzMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPvGUMT34Sqb7kjwxC4jNun6LVnW
5xpiZsNBRY8f1KwFiS2FKTSLCVEwNgrfcDWGjr2dwHlWsra8w9+M/2UsGL3GpP/+
DJW/pZ0RlmFZIyRwrKvpF7wkCGycm8vRxMav0ipIdTSwGCJlk5Pap1HWCNNLw6nq
tRSRAy6pur2cOteaWgRmI4NlJoYDM9475BGM03pYDul3f5f0gTPZNIzzxmTr51fk
UcRjrJLPbybBY7g5bn37lUA9hy214hQVA6bxf8tX+FLw3DfB9FgaA9iJQr+3cte3
AfhKuqt6lFYGF2xArdFpESEVBGJixdymQmCU5tEfSbVoMJrBeBHAuCEf5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4QmqC1FZv/MCMPK4KEXWTDWTLQMB8GA1UdIwQY
MBaAFOYwGxdEaz7LCBfkAOmC9yptgB0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zZDNiOTMtMDNkNy00OGFmLTllOTYt
ZDcyMDNjNTZkZmVmLzEvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zZDNiOTMtMDNkNy00OGFmLTllOTYtZDcyMDNjNTZkZmVm
LzEvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwFKOfkJ
6kPRxeR11+I9/AtBwvydChkQs6kRrKr6vBIhWeGsTQQdykM0azVKorHLaxpGP7bk
AVeRknTq321Mef6KXgai0JaB1I/eB8hJSmgseEHCLmbNig1MKBvwqMYBi5Z2rzqU
xp4X43UaukXOicj7oZQkqb+4SQpq2Q50MD9O1aOGyq5GfFHBnBTs27eRC7bR8Wfi
zng3E2DS8IAtW80cuONkVZLT4zt1y6VZ6D0tR0BGfUllxzPcKLQuHglytpe7Ofrs
uimbJG/qJelctdVK86M0sBk80ROUANvlnCmMxk9fK8WDJlMzgvbFYuAfRFnyDnVt
/YobzNpJIQ8aWQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:34:43 2026 by rpki-client