Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: qjsCVFrm5isr2zXY4wL3KX9pBvGbO2rd2hrKAKo8wpY=
Subject key identifier: 88:34:8D:0B:4A:7A:3F:FB:26:92:46:94:4C:EB:96:BE:8A:B4:3D:E0
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 019F8F7DE058F92A831108997BAB436C4219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: C5
Signing time: Thu 23 Jul 2026 15:00:18 +0000
Manifest this update: Thu 23 Jul 2026 15:00:18 +0000
Manifest next update: Fri 24 Jul 2026 15:00:18 +0000
Files and hashes: 1: 6ktBmS6SHlobAW5cvJeOvutHtZs.asa (hash: 7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=)
2: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: k1apJCeuCeqyPgXijT9bfUh0o+3VjT0B0HrTz3Wd48E=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e0:58:f9:2a:83:11:08:99:7b:ab:43:6c:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: Jul 23 15:00:18 2026 GMT
Not After : Jul 24 15:00:18 2026 GMT
Subject: CN=88348d0b4a7a3ffb269246944ceb96be8ab43de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:1a:36:ad:76:93:1e:5a:94:5d:9c:e9:b1:
e7:e5:e7:6f:b6:ee:c1:38:19:1a:e9:fe:4c:7c:ab:
01:36:57:36:74:d8:96:f6:16:a0:9f:14:e4:2f:28:
94:65:f0:d5:02:3d:a6:b1:04:26:04:6c:1f:2b:a6:
e6:83:74:5f:63:ef:60:fb:ef:8e:b4:2e:ef:c3:63:
5a:7f:2e:fc:0a:1e:11:e2:59:53:9c:d5:8b:30:95:
bd:4c:a3:7f:fa:52:ec:a7:40:d9:29:f8:c1:e5:95:
cc:e8:30:5a:80:d7:ef:23:47:26:6e:24:8e:5c:aa:
e9:88:20:a9:a2:9e:28:8c:4b:25:e7:47:8f:28:f5:
42:05:be:65:db:ae:49:7d:fb:6b:69:93:76:54:a0:
3c:6e:03:eb:98:b6:ad:fb:26:22:1e:46:08:95:02:
d2:9d:1f:86:ab:ce:7d:bf:88:c9:51:65:fd:1c:7c:
ea:05:7e:b0:42:d1:03:a4:41:cf:cf:40:f7:a3:96:
80:96:ee:23:85:cb:44:78:b6:05:16:bd:a0:11:c7:
fa:76:8f:da:14:12:54:ea:01:0a:f4:15:80:ca:c7:
1b:2e:5c:a7:71:bc:a4:0d:c6:bb:dd:1d:39:ed:d1:
3f:01:77:cf:78:50:2d:a9:bc:ea:1e:aa:b7:ae:91:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:8D:0B:4A:7A:3F:FB:26:92:46:94:4C:EB:96:BE:8A:B4:3D:E0
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:36:1e:84:b8:28:86:b0:8d:7b:0c:cf:c3:77:ca:a5:87:8a:
f3:bf:2c:29:a7:1e:13:6b:96:19:85:a0:52:3a:7e:fb:0f:02:
0a:ab:96:04:3b:29:71:9e:c1:41:66:eb:05:2c:11:a1:21:8f:
98:56:f5:89:06:0c:99:04:83:22:08:6e:e6:25:e5:cf:92:da:
7f:e3:42:ab:6b:e7:6a:16:5f:e4:c9:94:4c:9e:f1:6f:8b:60:
52:fb:56:67:be:c7:96:15:04:ef:90:62:a6:3a:80:29:3b:cd:
d2:79:89:b7:92:0c:75:c0:d1:7e:f1:a6:56:54:97:cc:34:9e:
bd:67:6a:0f:69:bf:a8:db:af:b0:6c:8f:1d:b6:68:89:e2:df:
b0:db:84:3a:78:9b:20:48:4b:38:38:ae:98:63:fd:70:6d:a4:
5a:fb:39:7b:c2:7a:cc:8c:c1:ec:b6:fa:1e:bb:b1:6a:ce:db:
22:b1:13:b1:b1:be:63:04:18:ed:a3:f0:71:b6:30:98:72:e5:
03:85:88:8b:04:09:fe:82:79:d6:41:0c:79:fe:2c:4d:53:5b:
c5:f3:c0:4d:1c:ee:6f:a7:e3:1f:45:02:a7:ba:b9:0f:4a:8c:
88:32:83:54:1d:0c:2a:f6:0b:92:5b:67:f6:19:28:27:fb:ab:
15:82:5a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfeBY+SqDEQiZe6tDbEIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTc3NDRiYTljNGYxMDFhNDg5M2U0Nzk2NzY5YzQ5MTM1
MTA2N2IwHhcNMjYwNzIzMTUwMDE4WhcNMjYwNzI0MTUwMDE4WjAzMTEwLwYDVQQD
Eyg4ODM0OGQwYjRhN2EzZmZiMjY5MjQ2OTQ0Y2ViOTZiZThhYjQzZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUYaNq12kx5alF2c6bHn5edvtu7B
OBka6f5MfKsBNlc2dNiW9hagnxTkLyiUZfDVAj2msQQmBGwfK6bmg3RfY+9g+++O
tC7vw2Nafy78Ch4R4llTnNWLMJW9TKN/+lLsp0DZKfjB5ZXM6DBagNfvI0cmbiSO
XKrpiCCpop4ojEsl50ePKPVCBb5l265JfftraZN2VKA8bgPrmLat+yYiHkYIlQLS
nR+Gq859v4jJUWX9HHzqBX6wQtEDpEHPz0D3o5aAlu4jhctEeLYFFr2gEcf6do/a
FBJU6gEK9BWAyscbLlyncbykDca73R057dE/AXfPeFAtqbzqHqq3rpFbuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg0jQtKej/7JpJGlEzrlr6KtD3gMB8GA1UdIwQY
MBaAFAmndEupxPEBpIk+R5Z2nEkTUQZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYt
OTcyNzgzNDFhNjFmLzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYtOTcyNzgzNDFhNjFm
LzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDYehLgo
hrCNewzPw3fKpYeK878sKaceE2uWGYWgUjp++w8CCquWBDspcZ7BQWbrBSwRoSGP
mFb1iQYMmQSDIghu5iXlz5Laf+NCq2vnahZf5MmUTJ7xb4tgUvtWZ77HlhUE75Bi
pjqAKTvN0nmJt5IMdcDRfvGmVlSXzDSevWdqD2m/qNuvsGyPHbZoieLfsNuEOnib
IEhLODiumGP9cG2kWvs5e8J6zIzB7Lb6Hruxas7bIrETsbG+YwQY7aPwcbYwmHLl
A4WIiwQJ/oJ51kEMef4sTVNbxfPATRzub6fjH0UCp7q5D0qMiDKDVB0MKvYLkltn
9hkoJ/urFYJa5A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:07 2026 by rpki-client