Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: 36uk1wXhBiCUifH0Sge/hJ3gRBYAWN4079EOFigONtg=
Subject key identifier: F0:C6:52:7F:84:62:8B:5F:47:81:F9:CF:0D:91:88:10:C2:DB:FA:AA
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 01A0D94C5ACEDE6E371ED3AE0D60CE95E908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 16:00:54 +0000
Manifest this update: Fri 25 Sep 2026 16:00:54 +0000
Manifest next update: Sat 26 Sep 2026 16:00:54 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: JTrpQZf2uKG44aW/txBd7nOLb/qdd5IpZjpGhSuJEos=)
2: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (hash: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:5a:ce:de:6e:37:1e:d3:ae:0d:60:ce:95:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Sep 25 16:00:54 2026 GMT
Not After : Sep 26 16:00:54 2026 GMT
Subject: CN=f0c6527f84628b5f4781f9cf0d918810c2dbfaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:e2:99:ed:de:64:a3:10:c4:84:95:b6:3c:
82:3b:b7:e0:7f:d3:89:2f:fd:08:6c:c8:a2:3d:ec:
e9:ca:24:9e:00:ff:cd:07:c5:8d:f8:ee:de:0b:07:
cf:46:86:bd:49:03:3e:f9:56:8b:25:99:76:bf:c3:
71:08:a9:27:0d:a4:dc:2f:23:0d:33:c4:56:e3:18:
6e:73:64:2a:c0:00:6e:54:f4:6a:ee:31:cb:38:d4:
c2:9a:4d:29:fe:77:2f:9f:ad:93:51:6a:4f:9a:68:
de:4a:53:83:40:b5:86:96:09:dd:f7:3a:04:90:db:
8e:50:48:1f:ee:51:8a:7e:b1:a1:33:f9:42:9b:61:
56:da:08:53:47:cd:6d:1d:54:64:46:b2:74:30:1a:
29:f4:d1:69:a2:cc:e2:bc:9f:e6:cb:3d:d9:51:4b:
e2:43:54:76:0f:a1:77:07:e8:3d:71:c0:7c:66:56:
fa:a2:14:85:61:58:c4:88:09:53:d7:41:4a:c5:7e:
85:ae:44:e0:66:ec:87:f5:85:ac:ad:a1:c6:6a:6e:
07:a4:cc:6f:85:d0:52:91:dd:f9:34:22:fd:fe:11:
e6:ec:3b:ca:f7:c8:a8:13:ae:2d:b1:2b:3a:2a:4b:
07:1d:78:48:f9:a0:40:0c:9a:6d:e2:7d:a6:0d:14:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:52:7F:84:62:8B:5F:47:81:F9:CF:0D:91:88:10:C2:DB:FA:AA
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a1:a3:f3:51:3f:d6:02:d2:6c:6e:2e:7d:20:36:a2:32:46:
f7:bc:05:bd:20:8a:0c:a7:0b:62:15:d1:30:0c:63:55:11:6e:
58:a9:70:d6:d6:e4:f4:44:0d:4a:cc:80:ee:ff:86:4d:fa:6c:
34:53:39:fc:e4:b5:53:39:ec:e4:af:fb:2c:93:ed:3b:05:68:
0a:49:cb:73:42:80:4c:86:2f:49:f7:f0:8a:0a:d4:c5:d5:2c:
17:d8:7f:3b:30:f3:48:a3:0e:bf:d1:a9:5c:94:a2:97:06:05:
73:94:02:38:8d:12:e5:14:cd:f2:8d:d3:ff:34:27:09:8a:8e:
80:04:7a:58:20:cd:d0:35:1d:88:92:1b:70:8c:67:ac:f9:e5:
b8:74:ca:31:b9:d8:70:c0:b0:7c:8f:f2:a3:d2:44:a9:b2:18:
f7:e8:5c:86:26:6d:49:04:78:4e:1a:dc:7f:99:5b:65:01:54:
50:fe:ba:76:dc:84:5a:f5:9f:e9:46:b5:3f:b4:a8:1e:41:94:
48:e2:bb:05:22:c7:7a:b9:31:bc:3a:fe:2b:6b:1e:09:e1:02:
6f:8a:6c:95:71:25:f8:a6:f6:b6:c2:63:95:6c:d6:96:b0:be:
a7:d3:66:74:ac:22:6b:31:24:e9:19:84:d7:7b:7e:61:99:81:
23:07:7d:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTFrO3m43HtOuDWDOlekIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OWM5MmMzYjllZTYwYmEwMTNkOTQxODIyMDQyZjI1MDA0
Yzk1ZWMwHhcNMjYwOTI1MTYwMDU0WhcNMjYwOTI2MTYwMDU0WjAzMTEwLwYDVQQD
EyhmMGM2NTI3Zjg0NjI4YjVmNDc4MWY5Y2YwZDkxODgxMGMyZGJmYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt3ime3eZKMQxISVtjyCO7fgf9OJ
L/0IbMiiPezpyiSeAP/NB8WN+O7eCwfPRoa9SQM++VaLJZl2v8NxCKknDaTcLyMN
M8RW4xhuc2QqwABuVPRq7jHLONTCmk0p/ncvn62TUWpPmmjeSlODQLWGlgnd9zoE
kNuOUEgf7lGKfrGhM/lCm2FW2ghTR81tHVRkRrJ0MBop9NFposzivJ/myz3ZUUvi
Q1R2D6F3B+g9ccB8Zlb6ohSFYVjEiAlT10FKxX6FrkTgZuyH9YWsraHGam4HpMxv
hdBSkd35NCL9/hHm7DvK98ioE64tsSs6KksHHXhI+aBADJpt4n2mDRQxjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDGUn+EYotfR4H5zw2RiBDC2/qqMB8GA1UdIwQY
MBaAFOacksO57mC6AT2UGCIELyUATJXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEt
OTEzNzEwM2M5M2VmLzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEtOTEzNzEwM2M5M2Vm
LzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKGj81E/
1gLSbG4ufSA2ojJG97wFvSCKDKcLYhXRMAxjVRFuWKlw1tbk9EQNSsyA7v+GTfps
NFM5/OS1Uzns5K/7LJPtOwVoCknLc0KATIYvSffwigrUxdUsF9h/OzDzSKMOv9Gp
XJSilwYFc5QCOI0S5RTN8o3T/zQnCYqOgAR6WCDN0DUdiJIbcIxnrPnluHTKMbnY
cMCwfI/yo9JEqbIY9+hchiZtSQR4Thrcf5lbZQFUUP66dtyEWvWf6Ua1P7SoHkGU
SOK7BSLHerkxvDr+K2seCeECb4pslXEl+Kb2tsJjlWzWlrC+p9NmdKwiazEk6RmE
13t+YZmBIwd9kg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:53:01 2026 by rpki-client