Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: OHQT3/PyS2NZv9pVoGtXnS8dKfY/DH8SGU/wmY1+56M=
Subject key identifier: E2:FB:2F:F9:B1:C4:09:4C:25:24:F9:39:E2:61:B2:4D:19:A1:A8:66
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 019F9022D13108FF7CD561A4C6DDBAC690DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 1508
Signing time: Thu 23 Jul 2026 18:00:28 +0000
Manifest this update: Thu 23 Jul 2026 18:00:28 +0000
Manifest next update: Fri 24 Jul 2026 18:00:28 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: ueScHQEs4xaZWKd5Edv+qD+3RUG9psogl+NXz/1eUjQ=)
2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
4: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:d1:31:08:ff:7c:d5:61:a4:c6:dd:ba:c6:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Jul 23 18:00:28 2026 GMT
Not After : Jul 24 18:00:28 2026 GMT
Subject: CN=e2fb2ff9b1c4094c2524f939e261b24d19a1a866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:65:21:e1:79:6b:8c:8f:5d:05:3f:95:d7:
31:b9:b3:69:40:2f:af:ae:f1:a1:1c:45:17:39:93:
69:73:fa:3c:52:31:49:1d:1b:ff:ac:e6:f7:29:e5:
9a:8d:01:37:20:ae:0d:0c:9d:11:c3:cd:fd:bb:a8:
21:d2:ee:24:b5:2a:96:28:4c:18:0e:db:24:0a:af:
11:41:db:c1:99:5d:09:dd:46:75:30:1f:fe:1c:97:
42:2d:52:14:b1:32:da:33:d1:f0:41:81:eb:ed:63:
7a:cc:25:0d:88:1d:2a:9b:38:1e:6c:d4:b2:c4:93:
b5:92:53:fd:61:ad:25:f3:68:8b:5c:96:5a:6f:4e:
1e:8d:89:72:e4:be:8e:81:9a:27:04:6a:c6:26:a3:
29:e7:e9:82:d7:3b:4c:a4:4b:17:0d:22:4e:a5:3e:
5c:2c:90:eb:74:c3:50:d0:b1:eb:ef:76:4e:65:fc:
cd:fa:7d:81:a8:e9:80:71:c5:6a:80:84:77:2c:b9:
fb:f8:b9:af:63:ec:f9:af:a2:78:85:ef:90:26:ca:
04:48:83:e1:7f:69:86:a9:75:e3:bb:77:0b:18:a6:
70:cd:13:26:a8:2e:10:39:2f:bc:d7:9f:41:03:12:
d2:09:21:43:1c:98:b2:b1:f1:13:f2:82:d7:b9:47:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FB:2F:F9:B1:C4:09:4C:25:24:F9:39:E2:61:B2:4D:19:A1:A8:66
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5d:44:57:2f:e4:fe:17:b5:4e:a4:7d:aa:64:58:0b:7e:a2:
e2:7c:ad:9d:6e:c1:6e:50:ed:81:60:b4:65:c0:0b:e8:f7:d5:
de:98:df:59:16:6c:f4:70:a1:82:a2:83:19:f5:43:c9:86:9c:
73:71:1c:68:c9:9c:6b:25:75:db:a7:1d:1f:a4:93:6a:3a:80:
d1:34:39:e0:dd:63:2e:ff:2b:92:59:b6:01:a2:8a:5d:74:bc:
a5:b2:f1:20:d0:17:f8:f7:ad:9e:cc:b5:e8:dd:5b:3f:41:1c:
fa:d8:22:a1:9f:fb:bd:63:76:c1:11:62:ae:be:b8:60:4c:f9:
8f:76:28:23:73:f4:b8:59:0e:5c:10:98:e7:86:a0:4d:59:1c:
ac:e1:2b:ec:48:8f:c5:78:a3:7c:6d:22:24:bb:eb:fd:54:02:
76:5c:89:0d:76:1c:e2:6f:62:f4:fd:c6:be:33:cc:3b:03:66:
7e:8f:52:25:51:6c:d1:d4:6b:9d:29:9a:84:aa:a0:e9:4f:56:
2d:6b:7b:27:5f:1a:61:a2:1f:4b:7b:fd:ac:72:30:01:11:c2:
92:d2:f0:c0:f3:37:b6:45:c0:23:3f:70:63:50:c1:3c:39:3a:
4f:1e:bf:ad:76:b4:82:e8:7c:ef:6e:0c:a7:fe:c3:d0:f0:8a:
3d:f7:44:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QItExCP981WGkxt26xpDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjYwNzIzMTgwMDI4WhcNMjYwNzI0MTgwMDI4WjAzMTEwLwYDVQQD
EyhlMmZiMmZmOWIxYzQwOTRjMjUyNGY5MzllMjYxYjI0ZDE5YTFhODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+tlIeF5a4yPXQU/ldcxubNpQC+v
rvGhHEUXOZNpc/o8UjFJHRv/rOb3KeWajQE3IK4NDJ0Rw839u6gh0u4ktSqWKEwY
DtskCq8RQdvBmV0J3UZ1MB/+HJdCLVIUsTLaM9HwQYHr7WN6zCUNiB0qmzgebNSy
xJO1klP9Ya0l82iLXJZab04ejYly5L6OgZonBGrGJqMp5+mC1ztMpEsXDSJOpT5c
LJDrdMNQ0LHr73ZOZfzN+n2BqOmAccVqgIR3LLn7+LmvY+z5r6J4he+QJsoESIPh
f2mGqXXju3cLGKZwzRMmqC4QOS+8159BAxLSCSFDHJiysfET8oLXuUdxPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL7L/mxxAlMJST5OeJhsk0ZoahmMB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV1EVy/k
/he1TqR9qmRYC36i4nytnW7BblDtgWC0ZcAL6PfV3pjfWRZs9HChgqKDGfVDyYac
c3EcaMmcayV126cdH6STajqA0TQ54N1jLv8rklm2AaKKXXS8pbLxINAX+Petnsy1
6N1bP0Ec+tgioZ/7vWN2wRFirr64YEz5j3YoI3P0uFkOXBCY54agTVkcrOEr7EiP
xXijfG0iJLvr/VQCdlyJDXYc4m9i9P3GvjPMOwNmfo9SJVFs0dRrnSmahKqg6U9W
LWt7J18aYaIfS3v9rHIwARHCktLwwPM3tkXAIz9wY1DBPDk6Tx6/rXa0guh8724M
p/7D0PCKPfdEyA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:33 2026 by rpki-client