Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: 5k8GB1QqasOQdkfBhLivse8Uq62Eyya8n/vhxXyskWc=
Subject key identifier: FA:D9:05:9A:03:30:A0:6F:DF:57:11:91:06:DA:4D:94:01:C7:DD:2C
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 01A0D6F0AD2298C3A93947EFD9B23188D8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 1560
Signing time: Fri 25 Sep 2026 05:01:32 +0000
Manifest this update: Fri 25 Sep 2026 05:01:32 +0000
Manifest next update: Sat 26 Sep 2026 05:01:32 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: lB+iaLXpR+1UcTTB5JCQwRidAaxxmxxGOnr6lq7zr/M=)
2: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (hash: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:ad:22:98:c3:a9:39:47:ef:d9:b2:31:88:d8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Sep 25 05:01:32 2026 GMT
Not After : Sep 26 05:01:32 2026 GMT
Subject: CN=fad9059a0330a06fdf57119106da4d9401c7dd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:60:6b:63:e7:e6:86:66:7d:92:bb:89:59:
88:f4:2a:47:46:54:a0:93:a7:d0:d8:50:5d:12:7a:
86:7d:91:d2:ea:6c:37:c2:e7:b2:75:21:ac:ce:94:
ef:90:55:08:e8:25:a3:96:bf:02:ec:bf:62:b0:15:
b9:17:34:67:bc:2f:a8:57:30:c9:2e:12:1f:a9:61:
68:bf:cb:87:44:75:a0:c5:f9:19:d7:ea:9f:89:be:
6e:a9:cf:d5:34:5a:b2:5e:4f:ae:86:61:31:9e:56:
96:be:de:10:b0:3a:a9:65:c5:c2:92:7f:ce:a4:18:
fe:0e:72:28:69:fe:c6:e2:f9:e0:27:92:de:40:40:
cc:47:9c:b2:bd:0d:aa:a5:bd:be:6b:d4:93:ba:b3:
b8:91:c6:25:89:f2:3d:a7:d2:6e:a0:de:95:f2:ba:
30:6e:82:36:dd:f0:b8:ca:43:58:90:cc:e2:65:db:
f8:7f:bc:1c:71:9e:8c:9c:db:2e:cc:26:4f:45:71:
68:57:0d:d3:59:b8:85:88:93:ea:d5:8e:9e:3a:ad:
da:5d:51:68:32:3c:a0:ea:46:c0:bc:5e:63:cd:c4:
07:8a:d0:e7:0e:bb:6f:2a:bc:9d:f5:7c:0e:a5:6b:
21:2c:6d:f0:ff:dd:63:00:c3:dd:7d:ea:b0:39:72:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:05:9A:03:30:A0:6F:DF:57:11:91:06:DA:4D:94:01:C7:DD:2C
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:57:2d:04:24:ae:28:78:37:44:4d:cc:43:48:c2:c2:63:ee:
fc:a9:41:36:b7:42:be:81:2a:da:ea:59:51:c2:4a:5a:79:51:
56:b0:0e:e3:9f:81:57:82:18:0b:ab:89:12:41:48:96:75:f4:
a7:6c:06:cd:22:54:d4:cf:96:81:eb:c6:28:c7:94:5e:cd:fe:
cc:ee:3b:dc:dd:cb:79:0c:67:f1:fa:a1:04:70:e0:7b:f8:48:
89:0e:be:2b:69:f2:7d:e5:05:d1:f7:c4:5d:a4:45:49:dc:d2:
7d:a3:39:dc:e1:ac:70:53:78:b4:ea:e6:25:55:a1:1f:51:1c:
17:b5:9d:8f:72:b4:e1:dc:72:70:b1:3a:3f:ba:95:83:0d:6e:
e7:85:a5:a1:3a:4d:2f:f1:19:36:da:dc:bc:78:2b:fe:79:b8:
a5:56:e8:5d:16:2c:72:3a:00:5d:a1:6d:c7:19:0d:b6:b5:55:
2b:d3:94:d3:fc:1f:c6:8d:c2:0a:99:6d:06:58:e0:34:49:43:
cb:86:9c:b8:d9:77:dd:a3:3b:d8:57:ca:66:bd:ca:96:f3:fa:
f9:69:6d:3a:0d:84:64:19:db:ee:f0:43:4a:b3:19:61:b4:5b:
4c:d9:d4:41:8d:c4:fa:3a:72:4c:89:32:c0:69:3e:9a:3b:12:
6a:27:c9:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8K0imMOpOUfv2bIxiNizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy
Zjg4OGIwHhcNMjYwOTI1MDUwMTMyWhcNMjYwOTI2MDUwMTMyWjAzMTEwLwYDVQQD
EyhmYWQ5MDU5YTAzMzBhMDZmZGY1NzExOTEwNmRhNGQ5NDAxYzdkZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvlga2Pn5oZmfZK7iVmI9CpHRlSg
k6fQ2FBdEnqGfZHS6mw3wueydSGszpTvkFUI6CWjlr8C7L9isBW5FzRnvC+oVzDJ
LhIfqWFov8uHRHWgxfkZ1+qfib5uqc/VNFqyXk+uhmExnlaWvt4QsDqpZcXCkn/O
pBj+DnIoaf7G4vngJ5LeQEDMR5yyvQ2qpb2+a9STurO4kcYlifI9p9JuoN6V8row
boI23fC4ykNYkMziZdv4f7wccZ6MnNsuzCZPRXFoVw3TWbiFiJPq1Y6eOq3aXVFo
Mjyg6kbAvF5jzcQHitDnDrtvKryd9XwOpWshLG3w/91jAMPdfeqwOXJBMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrZBZoDMKBv31cRkQbaTZQBx90sMB8GA1UdIwQY
MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt
Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj
LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVctBCSu
KHg3RE3MQ0jCwmPu/KlBNrdCvoEq2upZUcJKWnlRVrAO45+BV4IYC6uJEkFIlnX0
p2wGzSJU1M+WgevGKMeUXs3+zO473N3LeQxn8fqhBHDge/hIiQ6+K2nyfeUF0ffE
XaRFSdzSfaM53OGscFN4tOrmJVWhH1EcF7Wdj3K04dxycLE6P7qVgw1u54WloTpN
L/EZNtrcvHgr/nm4pVboXRYscjoAXaFtxxkNtrVVK9OU0/wfxo3CCpltBljgNElD
y4acuNl33aM72FfKZr3KlvP6+WltOg2EZBnb7vBDSrMZYbRbTNnUQY3E+jpyTIky
wGk+mjsSaifJkA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:47:26 2026 by rpki-client