Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
File: 71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json)
Hash identifier: QXlUo1ZyIkq6HtLJRTyS1DxsCfWltdlvD6pIy78/Q/Y=
Subject key identifier: 28:B8:AB:5E:58:8C:42:87:EB:FA:B4:18:89:54:0F:B8:38:E8:B7:74
Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
Certificate issuer: /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Certificate serial: 01A0D4CB8F850EC0526AF78963728D7AF76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
Manifest number: 05E9
Signing time: Thu 24 Sep 2026 19:01:45 +0000
Manifest this update: Thu 24 Sep 2026 19:01:45 +0000
Manifest next update: Fri 25 Sep 2026 19:01:45 +0000
Files and hashes: 1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: mXwbtXCUWaavtVexsG+gKG3C4bLF178p95LrNgsE/Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:8f:85:0e:c0:52:6a:f7:89:63:72:8d:7a:f7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Validity
Not Before: Sep 24 19:01:45 2026 GMT
Not After : Sep 25 19:01:45 2026 GMT
Subject: CN=28b8ab5e588c4287ebfab41889540fb838e8b774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:c0:df:b0:85:4b:77:d7:a9:91:66:3d:b3:
1f:64:0d:36:63:9a:e9:ae:f8:cc:23:c7:89:e1:c9:
bc:a0:f6:8e:3d:ce:84:0a:d6:ff:0c:fb:cf:4b:21:
fb:8d:fa:84:26:3c:4e:4f:15:c3:6d:df:cd:c6:1d:
99:23:46:0b:0d:c3:fc:e7:18:44:21:14:b3:63:66:
d6:ba:a3:1a:6a:c3:0e:7a:9d:2a:53:df:62:66:13:
18:18:e6:89:6c:f7:c0:8a:e0:48:a4:c3:1c:32:42:
49:41:ed:1a:6e:7a:fa:71:06:c8:ee:19:c6:84:90:
58:de:6a:dc:75:16:d6:35:d6:b7:1d:37:95:d8:de:
81:38:90:d1:a6:cd:99:d6:33:eb:1f:96:8d:c1:0f:
08:23:bf:19:10:c5:86:a4:37:94:9a:7f:57:f9:e2:
e7:8c:c3:b7:5f:4d:aa:50:da:b8:68:20:e2:c2:44:
e6:41:bb:57:88:f9:c7:ea:ae:8b:76:e8:b8:54:aa:
d9:f6:5f:83:98:c5:ed:05:86:05:16:b1:37:ba:3a:
9b:51:f4:a1:80:9e:89:bc:bb:bd:4e:7d:ce:ce:08:
82:31:f7:9c:9e:db:8a:bd:f4:41:e3:c9:67:a9:b0:
bc:ae:cc:fa:c4:c2:0e:8d:5e:b5:64:55:90:ca:a7:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:AB:5E:58:8C:42:87:EB:FA:B4:18:89:54:0F:B8:38:E8:B7:74
X509v3 Authority Key Identifier:
keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ae:83:5c:72:68:d6:18:59:0a:cb:32:04:e0:fd:e9:93:87:
39:d7:7b:6d:b5:e3:54:06:ec:ed:7c:6c:7b:ca:5c:0a:bf:c1:
a7:0f:db:d2:7d:1b:41:ef:a2:17:21:c1:54:b1:aa:30:80:00:
e9:e4:d7:ad:5a:38:91:a6:77:23:61:df:a9:60:4a:7e:d6:dd:
00:64:8b:b0:ef:36:7e:5b:b1:0a:95:00:a8:7c:47:a0:07:eb:
c3:86:42:76:85:98:ff:2b:9b:39:04:3a:5b:f6:1f:6c:7b:c1:
0f:ed:50:dc:db:47:6c:30:72:ae:0f:a3:7d:eb:d0:9c:6d:3d:
7d:52:9d:1b:cc:a2:20:f8:a1:79:29:f0:a2:46:e0:55:be:fd:
64:32:73:be:47:57:3f:4f:8e:cf:ef:63:50:62:eb:a4:23:dc:
18:6a:1c:35:8b:e7:d6:09:e4:3f:28:bd:6f:54:88:db:f3:aa:
6f:41:d8:79:14:a4:ef:7b:dd:38:97:43:49:1b:be:81:ff:86:
b0:a7:58:5f:16:bd:3d:06:3b:8a:83:26:94:e2:6b:2c:c8:9f:
58:0f:63:06:54:fc:4b:21:90:cf:ac:9a:93:fd:8b:5b:e9:f5:
09:e1:e8:60:b8:5e:42:4c:59:94:65:0b:c4:97:0c:47:34:03:
49:7b:a9:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy4+FDsBSaveJY3KNevdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNThmODU3MmJkZDc3ZDk4MTQxMTE4MGUyZWY5YThhODAy
Yzc2YWMwHhcNMjYwOTI0MTkwMTQ1WhcNMjYwOTI1MTkwMTQ1WjAzMTEwLwYDVQQD
EygyOGI4YWI1ZTU4OGM0Mjg3ZWJmYWI0MTg4OTU0MGZiODM4ZThiNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rzA37CFS3fXqZFmPbMfZA02Y5rp
rvjMI8eJ4cm8oPaOPc6ECtb/DPvPSyH7jfqEJjxOTxXDbd/Nxh2ZI0YLDcP85xhE
IRSzY2bWuqMaasMOep0qU99iZhMYGOaJbPfAiuBIpMMcMkJJQe0abnr6cQbI7hnG
hJBY3mrcdRbWNda3HTeV2N6BOJDRps2Z1jPrH5aNwQ8II78ZEMWGpDeUmn9X+eLn
jMO3X02qUNq4aCDiwkTmQbtXiPnH6q6Ldui4VKrZ9l+DmMXtBYYFFrE3ujqbUfSh
gJ6JvLu9Tn3OzgiCMfecntuKvfRB48lnqbC8rsz6xMIOjV61ZFWQyqeiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi4q15YjEKH6/q0GIlUD7g46Ld0MB8GA1UdIwQY
MBaAFO9Y+Fcr3XfZgUERgOLvmoqALHasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85YjcxMDgtZTEyZi00ZjhhLWE1ZTAt
MzhlODA1ZmY0YzczLzEvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85YjcxMDgtZTEyZi00ZjhhLWE1ZTAtMzhlODA1ZmY0Yzcz
LzEvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAha6DXHJo
1hhZCssyBOD96ZOHOdd7bbXjVAbs7Xxse8pcCr/Bpw/b0n0bQe+iFyHBVLGqMIAA
6eTXrVo4kaZ3I2HfqWBKftbdAGSLsO82fluxCpUAqHxHoAfrw4ZCdoWY/yubOQQ6
W/YfbHvBD+1Q3NtHbDByrg+jfevQnG09fVKdG8yiIPiheSnwokbgVb79ZDJzvkdX
P0+Oz+9jUGLrpCPcGGocNYvn1gnkPyi9b1SI2/Oqb0HYeRSk73vdOJdDSRu+gf+G
sKdYXxa9PQY7ioMmlOJrLMifWA9jBlT8SyGQz6yak/2LW+n1CeHoYLheQkxZlGUL
xJcMRzQDSXupig==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:30:43 2026 by rpki-client