Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: lDuwLY5TE6BfydiYvPUOfPuGEzACQhSAutdxK2tMksA=
Subject key identifier: 5E:5A:91:A1:4F:29:18:50:9B:96:8B:90:03:E6:25:08:71:91:3C:B3
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 01A0CA47DADB08E71107C5DAE24EFF25915B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: 0168
Signing time: Tue 22 Sep 2026 18:01:41 +0000
Manifest this update: Tue 22 Sep 2026 18:01:41 +0000
Manifest next update: Wed 23 Sep 2026 18:01:41 +0000
Files and hashes: 1: 6ktBmS6SHlobAW5cvJeOvutHtZs.asa (hash: 7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=)
2: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: RCmdAZyCGQMms4qFSlLcpxApdPw4ZfgbDO2/atPZh08=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:da:db:08:e7:11:07:c5:da:e2:4e:ff:25:91:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: Sep 22 18:01:41 2026 GMT
Not After : Sep 23 18:01:41 2026 GMT
Subject: CN=5e5a91a14f2918509b968b9003e6250871913cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:48:e9:7e:90:d7:e0:2c:88:de:04:90:b5:
8b:d6:39:87:e0:ab:8d:1f:f5:9f:ad:60:3e:1f:12:
ab:7b:90:e3:b9:96:3b:91:a4:b4:51:e2:7b:08:e8:
57:6a:88:56:90:70:ee:e5:32:91:b5:16:76:47:08:
b8:f4:2c:bf:81:17:69:8e:3f:2d:a2:3d:6f:76:fe:
2a:ce:ee:d7:65:1e:0d:78:8a:38:84:73:92:eb:6f:
03:b6:eb:54:cb:25:49:3f:07:fc:7b:17:0b:a7:cd:
b1:79:22:33:46:50:9d:8f:db:14:87:d5:11:cd:e5:
56:e3:f1:b1:de:96:c2:b3:55:22:7e:4e:ff:a2:37:
c3:62:f0:73:65:78:d8:44:eb:b5:9e:26:cb:7a:48:
04:4f:1c:46:8c:b9:0c:41:54:1e:81:20:b7:05:b7:
5a:91:d1:b6:8e:35:fb:ed:55:0f:be:86:80:b7:ad:
8c:e7:dc:80:60:19:ac:23:4f:54:19:a6:86:8a:df:
d9:03:96:b4:e5:03:37:48:48:f4:3b:44:3e:bc:65:
cd:75:ed:f8:28:18:d5:60:c1:d6:3e:e1:99:e0:a1:
e5:ee:cf:31:76:01:da:41:07:27:59:71:b9:2c:8b:
c8:30:cf:c8:cf:82:c4:9b:22:28:72:f5:4e:9c:a3:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5A:91:A1:4F:29:18:50:9B:96:8B:90:03:E6:25:08:71:91:3C:B3
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4a:44:86:a8:d0:65:9f:7d:45:41:a1:a4:0b:49:59:15:9b:
27:d7:c3:70:3e:6a:cb:94:20:b4:b3:59:a6:19:fb:40:dd:d5:
74:13:ae:a4:77:f6:d2:37:ac:f3:96:54:3f:76:49:22:ea:9b:
e4:0b:69:64:53:8c:20:df:87:f0:4a:1f:79:cf:0b:98:50:bd:
68:a6:b6:0b:08:15:b2:24:ff:10:b1:a4:d4:87:43:14:b4:0b:
1b:77:68:c5:5f:31:33:fc:ee:c9:80:f1:15:38:18:5c:57:84:
21:c0:10:d2:ce:fa:65:85:88:85:a5:99:f8:24:b0:8e:a2:d0:
99:85:e3:a8:f8:0d:66:46:77:af:01:fc:db:39:22:3f:19:b1:
64:60:65:06:2c:67:03:df:50:e2:86:0c:c6:88:10:94:b5:91:
ed:21:4b:63:27:91:dd:49:e5:f1:f8:3c:8e:c7:11:73:5f:2c:
13:b2:e0:51:0d:7a:60:75:87:3d:28:fc:6b:a6:04:90:da:1c:
7e:5c:f4:10:47:97:af:2a:08:c9:f1:75:16:71:04:e5:e5:59:
b3:cf:40:bc:42:a9:9b:6d:7e:29:8f:55:96:63:ee:f0:2e:d8:
8e:a8:5f:d5:b2:ed:0e:83:87:29:13:33:3a:be:fb:f0:dd:a2:
66:f2:77:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR9rbCOcRB8Xa4k7/JZFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTc3NDRiYTljNGYxMDFhNDg5M2U0Nzk2NzY5YzQ5MTM1
MTA2N2IwHhcNMjYwOTIyMTgwMTQxWhcNMjYwOTIzMTgwMTQxWjAzMTEwLwYDVQQD
Eyg1ZTVhOTFhMTRmMjkxODUwOWI5NjhiOTAwM2U2MjUwODcxOTEzY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArklI6X6Q1+AsiN4EkLWL1jmH4KuN
H/WfrWA+HxKre5DjuZY7kaS0UeJ7COhXaohWkHDu5TKRtRZ2Rwi49Cy/gRdpjj8t
oj1vdv4qzu7XZR4NeIo4hHOS628DtutUyyVJPwf8excLp82xeSIzRlCdj9sUh9UR
zeVW4/Gx3pbCs1Uifk7/ojfDYvBzZXjYROu1nibLekgETxxGjLkMQVQegSC3Bbda
kdG2jjX77VUPvoaAt62M59yAYBmsI09UGaaGit/ZA5a05QM3SEj0O0Q+vGXNde34
KBjVYMHWPuGZ4KHl7s8xdgHaQQcnWXG5LIvIMM/Iz4LEmyIocvVOnKNJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5akaFPKRhQm5aLkAPmJQhxkTyzMB8GA1UdIwQY
MBaAFAmndEupxPEBpIk+R5Z2nEkTUQZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYt
OTcyNzgzNDFhNjFmLzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYtOTcyNzgzNDFhNjFm
LzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0pEhqjQ
ZZ99RUGhpAtJWRWbJ9fDcD5qy5QgtLNZphn7QN3VdBOupHf20jes85ZUP3ZJIuqb
5AtpZFOMIN+H8Eofec8LmFC9aKa2CwgVsiT/ELGk1IdDFLQLG3doxV8xM/zuyYDx
FTgYXFeEIcAQ0s76ZYWIhaWZ+CSwjqLQmYXjqPgNZkZ3rwH82zkiPxmxZGBlBixn
A99Q4oYMxogQlLWR7SFLYyeR3Unl8fg8jscRc18sE7LgUQ16YHWHPSj8a6YEkNoc
flz0EEeXryoIyfF1FnEE5eVZs89AvEKpm21+KY9VlmPu8C7Yjqhf1bLtDoOHKRMz
Or778N2iZvJ39w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:10:49 2026 by rpki-client