Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
File: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft (raw, json)
Hash identifier: sja+L3HRIXVo9gGstJyG02mLfwmIpDvY6gzPtpSiyx0=
Subject key identifier: AE:03:8D:DF:2B:97:99:26:E4:E3:C5:EC:0C:14:93:31:D0:40:15:F9
Authority key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Certificate issuer: /CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Certificate serial: 01A13C3752912EAE4BDA0AAEB44310C8B224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
Manifest number: 19E4
Signing time: Wed 14 Oct 2026 21:00:20 +0000
Manifest this update: Wed 14 Oct 2026 21:00:20 +0000
Manifest next update: Thu 15 Oct 2026 21:00:20 +0000
Files and hashes: 1: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl (hash: MjcP0A+t6a4Kudwy1aiGkON5bigYOZdR9E7IAJSA80k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:37:52:91:2e:ae:4b:da:0a:ae:b4:43:10:c8:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Validity
Not Before: Oct 14 21:00:20 2026 GMT
Not After : Oct 15 21:00:20 2026 GMT
Subject: CN=ae038ddf2b979926e4e3c5ec0c149331d04015f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:3c:68:12:de:c1:06:b5:f7:d0:aa:f1:69:
c7:33:51:03:b4:70:a8:83:63:50:6a:3b:cf:18:f8:
86:91:26:44:a2:5a:d5:5c:02:32:89:7e:b0:d5:86:
69:bd:ff:5b:53:f8:58:e7:ac:ca:83:83:8d:0a:0a:
ff:92:d9:db:25:30:ca:7c:24:74:89:fa:ff:94:2e:
d0:e3:50:02:02:77:db:02:03:7a:e8:9a:76:79:79:
93:84:b3:bb:38:d9:e5:6e:a5:f6:69:af:00:ac:28:
29:85:af:8b:80:90:27:f3:f3:fe:c8:5e:1f:4c:fa:
d4:23:7f:39:2d:6d:57:38:62:bb:ed:e6:82:a6:e8:
45:dc:23:81:ff:5c:ae:4c:18:f4:34:f5:3d:8c:9c:
92:c5:18:0b:24:60:2a:d2:73:66:e6:f2:a4:fa:0d:
b8:7b:7c:85:35:25:27:6f:67:b8:52:88:2c:0b:ac:
aa:b0:7a:e6:13:f8:01:ff:25:67:3a:69:1e:7b:8a:
4c:cc:a4:37:0e:5e:69:ba:3a:ca:c9:4b:5d:b1:cd:
d5:65:a7:7c:be:9f:4b:26:54:2e:2b:09:3a:ff:cd:
88:61:8e:51:d1:6e:75:f3:86:79:71:af:9d:2a:19:
f0:b7:05:31:8c:09:71:ea:a1:8d:32:7b:5a:bb:16:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:8D:DF:2B:97:99:26:E4:E3:C5:EC:0C:14:93:31:D0:40:15:F9
X509v3 Authority Key Identifier:
keyid:E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:3c:2a:30:df:6a:a2:e6:0f:dc:0a:60:d8:04:ff:40:3f:
15:20:89:10:e1:da:11:8d:45:dd:5a:dd:74:e7:d6:11:4c:6e:
59:2c:62:c8:83:41:6b:dc:b8:56:f3:1b:6d:3a:62:60:eb:ed:
46:2a:e4:0e:2a:1d:aa:cb:2e:fe:13:38:33:1d:ce:2f:2e:50:
41:9f:0b:d9:a1:f8:7f:8b:03:33:4b:eb:d4:d2:d9:35:b0:7a:
ce:9e:c3:10:75:ef:74:a0:aa:33:f8:24:fa:3c:6e:39:d3:1e:
b7:9e:92:ed:af:06:67:a3:ff:3c:dd:49:15:2b:2b:a6:ad:46:
7f:d9:5f:99:00:87:6b:e8:3f:bf:bd:70:58:14:cd:33:df:71:
f9:ff:55:86:53:13:11:31:a4:43:5d:04:3c:74:3c:f7:cd:8a:
19:06:c0:9f:d8:9d:0a:fb:8a:a9:20:0b:bf:ec:b6:a8:4a:6d:
9b:db:1a:12:47:80:fb:d0:14:78:00:ac:ca:1c:e8:5a:d3:5f:
d4:c0:b3:41:c7:a1:ae:e4:28:39:3a:dc:00:4f:89:93:23:71:
8f:c8:60:e5:e1:82:00:91:1b:5c:20:43:de:8b:16:25:8d:9a:
6a:e6:b6:11:5a:9a:65:58:40:f3:b3:73:e9:1c:7f:76:27:b4:
34:b7:d1:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8N1KRLq5L2gqutEMQyLIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDA5ZThlZjE3MWU5YWUyMTYyN2NjYTc2ZWQ2NGZkMTdl
NmVlZDIwHhcNMjYxMDE0MjEwMDIwWhcNMjYxMDE1MjEwMDIwWjAzMTEwLwYDVQQD
EyhhZTAzOGRkZjJiOTc5OTI2ZTRlM2M1ZWMwYzE0OTMzMWQwNDAxNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHw8aBLewQa199Cq8WnHM1EDtHCo
g2NQajvPGPiGkSZEolrVXAIyiX6w1YZpvf9bU/hY56zKg4ONCgr/ktnbJTDKfCR0
ifr/lC7Q41ACAnfbAgN66Jp2eXmThLO7ONnlbqX2aa8ArCgpha+LgJAn8/P+yF4f
TPrUI385LW1XOGK77eaCpuhF3COB/1yuTBj0NPU9jJySxRgLJGAq0nNm5vKk+g24
e3yFNSUnb2e4UogsC6yqsHrmE/gB/yVnOmkee4pMzKQ3Dl5pujrKyUtdsc3VZad8
vp9LJlQuKwk6/82IYY5R0W5184Z5ca+dKhnwtwUxjAlx6qGNMntauxabbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4Djd8rl5km5OPF7AwUkzHQQBX5MB8GA1UdIwQY
MBaAFOTQno7xcemuIWJ8ynbtZP0X5u7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5DZWp2Rng2YTRoWW56S2R1MWtfUmZtN3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84Yzg4MTEtMDFjNi00N2MyLWI1ZjAt
M2MxNjI0MTAwNzUyLzEvNU5DZWp2Rng2YTRoWW56S2R1MWtfUmZtN3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84Yzg4MTEtMDFjNi00N2MyLWI1ZjAtM2MxNjI0MTAwNzUy
LzEvNU5DZWp2Rng2YTRoWW56S2R1MWtfUmZtN3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgQ8KjDf
aqLmD9wKYNgE/0A/FSCJEOHaEY1F3VrddOfWEUxuWSxiyINBa9y4VvMbbTpiYOvt
RirkDiodqssu/hM4Mx3OLy5QQZ8L2aH4f4sDM0vr1NLZNbB6zp7DEHXvdKCqM/gk
+jxuOdMet56S7a8GZ6P/PN1JFSsrpq1Gf9lfmQCHa+g/v71wWBTNM99x+f9VhlMT
ETGkQ10EPHQ8982KGQbAn9idCvuKqSALv+y2qEptm9saEkeA+9AUeACsyhzoWtNf
1MCzQcehruQoOTrcAE+JkyNxj8hg5eGCAJEbXCBD3osWJY2aaua2EVqaZVhA87Nz
6Rx/die0NLfR2Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:43:31 2026 by rpki-client