Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: Ua+gXJ/qtZ6tX3gBJnoKb2IElR1hLLQr2hliDepe2nY=
Subject key identifier: 10:A2:37:D5:EF:18:9D:35:60:A5:A2:26:9B:4F:49:F4:A5:2A:66:3A
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 01A0D83C567DE60E6F25C8738CB01250A2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 11:03:47 +0000
Manifest this update: Fri 25 Sep 2026 11:03:47 +0000
Manifest next update: Sat 26 Sep 2026 11:03:47 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: laQXNXcgcy7BeQIf+sQu8xp7DCtsWVs1nGuFa+C4iNI=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:56:7d:e6:0e:6f:25:c8:73:8c:b0:12:50:a2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Sep 25 11:03:47 2026 GMT
Not After : Sep 26 11:03:47 2026 GMT
Subject: CN=10a237d5ef189d3560a5a2269b4f49f4a52a663a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:3d:f5:4b:87:46:31:93:fb:80:c0:be:1a:
93:25:bd:79:2e:9d:73:ba:ff:1a:1d:c4:1b:86:3e:
2a:f5:24:89:ac:e7:e0:55:49:e2:a5:a1:e9:59:f6:
40:65:e0:a7:8f:3a:fc:86:48:1e:60:86:67:fe:30:
ad:53:27:64:43:19:ee:c5:0a:19:0e:df:cb:67:2c:
87:d6:39:60:78:de:0c:4f:bc:40:86:b9:36:75:17:
30:45:d0:1d:7b:db:16:c7:2b:22:dd:6c:5b:fa:34:
c0:00:e1:78:bc:7e:a7:0f:a8:5d:80:23:90:d3:a0:
67:3f:d0:15:ce:97:d5:7b:d3:0c:42:b9:a5:a0:d8:
1e:7c:2b:e4:62:fa:a9:f2:99:f3:51:7c:9b:61:5a:
26:80:b0:f6:54:ce:9d:d7:b3:85:41:4a:fe:f5:a5:
a8:68:5c:08:de:4e:fd:14:87:b8:01:55:d6:23:d5:
5a:6e:50:1b:f6:d4:bd:1d:7d:cd:b6:00:ef:c3:c7:
09:78:34:67:5e:30:14:e8:26:ff:49:e8:2e:45:7b:
a1:22:04:50:e8:09:e2:04:75:4d:ef:aa:d4:e4:29:
ef:47:4e:d3:32:ef:c0:45:a8:0a:68:4e:b3:75:53:
b1:30:8d:81:56:1e:c2:f1:cd:e9:5e:08:da:5b:7a:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:37:D5:EF:18:9D:35:60:A5:A2:26:9B:4F:49:F4:A5:2A:66:3A
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bc:04:15:c5:4c:3f:e0:ef:f1:c8:3a:5e:66:d7:f8:77:c2:
03:29:2d:be:e0:0a:f9:24:63:3e:49:fe:81:56:4c:a4:da:ba:
64:7e:d2:c1:20:85:7b:56:e1:ce:6a:d6:b9:98:94:71:38:42:
ff:6b:3e:69:03:2d:b4:de:a4:ce:b9:58:c9:21:8f:d4:fa:00:
5c:28:39:de:a9:bb:26:46:60:ee:da:a7:da:7e:f6:82:c6:17:
9d:6d:c0:80:c1:87:ac:53:96:3b:c2:be:40:8d:2f:7a:95:ed:
c9:fe:c1:36:f0:b4:bc:f3:fd:85:85:56:1b:d5:7b:4a:8c:aa:
20:b4:65:3f:91:e8:ca:9d:f1:bd:3e:42:b5:52:e5:61:e5:10:
7f:15:1f:c6:73:7d:bd:51:3c:ec:d8:17:90:cd:1b:df:f6:e8:
f9:d4:c6:c8:43:0e:dc:a6:2e:44:2b:5d:96:05:e6:b1:88:89:
00:b6:33:8b:97:23:d8:13:98:e5:5b:a3:24:d5:a5:80:2e:b8:
18:56:2f:08:2a:8d:26:b8:a5:be:3b:c4:b0:e9:e8:f2:e2:e9:
13:94:4c:a1:66:b7:b7:7b:fa:f0:79:d7:5d:c4:57:e1:07:20:
c4:6e:c1:8c:42:11:48:fc:3f:2c:46:bd:9c:fe:f7:a1:b7:c2:
a8:7c:2f:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYPFZ95g5vJchzjLASUKKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5
MzViODgwHhcNMjYwOTI1MTEwMzQ3WhcNMjYwOTI2MTEwMzQ3WjAzMTEwLwYDVQQD
EygxMGEyMzdkNWVmMTg5ZDM1NjBhNWEyMjY5YjRmNDlmNGE1MmE2NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbQ99UuHRjGT+4DAvhqTJb15Lp1z
uv8aHcQbhj4q9SSJrOfgVUnipaHpWfZAZeCnjzr8hkgeYIZn/jCtUydkQxnuxQoZ
Dt/LZyyH1jlgeN4MT7xAhrk2dRcwRdAde9sWxysi3Wxb+jTAAOF4vH6nD6hdgCOQ
06BnP9AVzpfVe9MMQrmloNgefCvkYvqp8pnzUXybYVomgLD2VM6d17OFQUr+9aWo
aFwI3k79FIe4AVXWI9VablAb9tS9HX3NtgDvw8cJeDRnXjAU6Cb/SeguRXuhIgRQ
6AniBHVN76rU5CnvR07TMu/ARagKaE6zdVOxMI2BVh7C8c3pXgjaW3o1VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCiN9XvGJ01YKWiJptPSfSlKmY6MB8GA1UdIwQY
MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt
ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz
LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7wEFcVM
P+Dv8cg6XmbX+HfCAyktvuAK+SRjPkn+gVZMpNq6ZH7SwSCFe1bhzmrWuZiUcThC
/2s+aQMttN6kzrlYySGP1PoAXCg53qm7JkZg7tqn2n72gsYXnW3AgMGHrFOWO8K+
QI0vepXtyf7BNvC0vPP9hYVWG9V7SoyqILRlP5Hoyp3xvT5CtVLlYeUQfxUfxnN9
vVE87NgXkM0b3/bo+dTGyEMO3KYuRCtdlgXmsYiJALYzi5cj2BOY5VujJNWlgC64
GFYvCCqNJrilvjvEsOno8uLpE5RMoWa3t3v68HnXXcRX4QcgxG7BjEIRSPw/LEa9
nP73obfCqHwvHg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:00:49 2026 by rpki-client