Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: kTFch1/WY3MU9LKgx4hrufbJOa68F63j0BoLWA8xU/8=
Subject key identifier: 5D:83:EB:D5:FF:4E:E2:8C:DF:92:8C:6F:FC:86:04:D2:49:E3:3A:D9
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 019F8F7EA11ADE609FF188E0F2D13A917206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 0598
Signing time: Thu 23 Jul 2026 15:01:08 +0000
Manifest this update: Thu 23 Jul 2026 15:01:08 +0000
Manifest next update: Fri 24 Jul 2026 15:01:08 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: 5frmFFABjHeM7n98wDBxBpv9sf9YtmqidWa+KKDqfEc=)
2: P-9Kjz1UfHMjTGFeahDrOs1ver0.asa (hash: W3pSYzCFr5OFf1TZYGacRWXPYdcekLj5JmITjzZJXho=)
3: vldYV3LWOW9tys3pjIJKZGnUQ1c.roa (hash: iuNVM1moJTBXO3h20HhJjEBtsYGf3s4iabPV9C2WSgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:a1:1a:de:60:9f:f1:88:e0:f2:d1:3a:91:72:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Jul 23 15:01:08 2026 GMT
Not After : Jul 24 15:01:08 2026 GMT
Subject: CN=5d83ebd5ff4ee28cdf928c6ffc8604d249e33ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:9e:04:22:18:25:58:d2:a1:b9:20:81:ff:
ba:27:97:f0:83:18:1b:03:db:e1:c4:64:0d:c7:1a:
02:1f:4e:73:a3:c3:66:d0:bf:35:d2:0c:61:5e:e5:
4c:b8:03:2e:3f:f7:3e:08:4f:c8:44:eb:f0:10:7e:
37:a6:4a:07:02:f8:be:16:cd:28:f0:d5:a6:60:23:
58:64:af:b9:dc:57:7b:74:97:db:33:b3:5f:eb:96:
05:f3:3a:aa:ac:5b:15:32:0b:fb:ca:59:f7:66:84:
0b:cd:82:b6:f2:5f:0f:74:99:5b:b6:1c:e2:ed:f1:
a3:4e:8f:b6:32:8c:0b:f9:2c:ec:68:82:f9:a2:41:
2d:5f:e2:cc:fa:d8:87:e2:74:57:6d:0a:7b:ec:d4:
f5:b2:22:94:ab:6d:58:e6:59:9b:47:4c:cb:e8:62:
a9:8d:cb:b2:bb:d0:85:fb:21:c2:f7:60:60:c7:3a:
ad:9f:d3:1d:d8:95:fc:1f:fa:5d:4b:94:65:2e:68:
a7:e8:7b:d9:33:30:bd:0a:e0:e0:59:52:67:67:52:
94:d9:19:64:4b:56:93:d0:37:93:20:50:b3:d1:7a:
ba:e4:99:d1:f5:41:e8:0a:f9:13:9d:21:04:6b:68:
0f:ca:db:38:1c:2a:71:ca:84:ee:f5:79:d4:89:d4:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:EB:D5:FF:4E:E2:8C:DF:92:8C:6F:FC:86:04:D2:49:E3:3A:D9
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:a0:a9:41:ac:35:10:8f:48:d7:52:79:92:2f:ab:4b:c1:
fb:f3:43:db:d4:26:6a:0a:47:80:20:70:cc:d6:3c:ad:34:b9:
48:a1:05:53:96:92:a5:55:7a:d0:97:50:8a:2e:31:b3:23:af:
c4:1a:3a:b8:26:32:9a:ca:89:c3:cf:c2:30:c4:08:ff:2e:4e:
59:c4:e4:50:0d:a2:55:52:30:90:dd:20:04:2f:e8:ad:94:e9:
b8:c8:e7:8b:83:28:d7:9d:20:33:47:22:21:eb:43:ce:de:04:
c6:a7:dc:b8:81:c0:cc:02:13:69:3a:b4:b9:5c:8f:2a:4b:41:
dc:ec:16:76:be:03:a1:ce:a8:49:2c:5f:9c:5b:e9:3d:42:a2:
e6:2a:c5:d2:db:90:e5:fe:3c:a5:d6:74:9d:b8:34:4e:e5:4a:
98:b6:9a:c5:71:37:07:1a:ae:7f:03:a7:40:20:81:b4:26:6d:
45:98:06:28:b4:e0:53:0f:a6:74:68:3e:d1:16:26:3c:d2:56:
75:7d:12:77:e9:6c:74:00:7b:56:53:67:67:7e:17:6a:68:2e:
7d:df:a2:68:58:48:d5:95:8b:1c:9d:15:7a:81:59:56:11:4a:
10:6f:5f:5f:53:2a:5b:71:23:88:92:98:22:7b:e4:8f:c9:bd:
8c:ea:23:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfqEa3mCf8Yjg8tE6kXIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Zjk4NWE5NDAyNTQ0ODkxNGRlYWExNzQyMjA3MzA0Mzky
NTEzZGQwHhcNMjYwNzIzMTUwMTA4WhcNMjYwNzI0MTUwMTA4WjAzMTEwLwYDVQQD
Eyg1ZDgzZWJkNWZmNGVlMjhjZGY5MjhjNmZmYzg2MDRkMjQ5ZTMzYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc+eBCIYJVjSobkggf+6J5fwgxgb
A9vhxGQNxxoCH05zo8Nm0L810gxhXuVMuAMuP/c+CE/IROvwEH43pkoHAvi+Fs0o
8NWmYCNYZK+53Fd7dJfbM7Nf65YF8zqqrFsVMgv7yln3ZoQLzYK28l8PdJlbthzi
7fGjTo+2MowL+SzsaIL5okEtX+LM+tiH4nRXbQp77NT1siKUq21Y5lmbR0zL6GKp
jcuyu9CF+yHC92Bgxzqtn9Md2JX8H/pdS5RlLmin6HvZMzC9CuDgWVJnZ1KU2Rlk
S1aT0DeTIFCz0Xq65JnR9UHoCvkTnSEEa2gPyts4HCpxyoTu9XnUidRXFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2D69X/TuKM35KMb/yGBNJJ4zrZMB8GA1UdIwQY
MBaAFOX5halAJUSJFN6qF0IgcwQ5JRPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZtRnFVQWxSSWtVM3FvWFFpQnpCRGtsRTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iYTFjOTctMGU1Ni00ODQwLWI2MTMt
YjM2MWEyYzQ1N2M0LzEvNWZtRnFVQWxSSWtVM3FvWFFpQnpCRGtsRTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iYTFjOTctMGU1Ni00ODQwLWI2MTMtYjM2MWEyYzQ1N2M0
LzEvNWZtRnFVQWxSSWtVM3FvWFFpQnpCRGtsRTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuOgqUGs
NRCPSNdSeZIvq0vB+/ND29QmagpHgCBwzNY8rTS5SKEFU5aSpVV60JdQii4xsyOv
xBo6uCYymsqJw8/CMMQI/y5OWcTkUA2iVVIwkN0gBC/orZTpuMjni4Mo150gM0ci
IetDzt4ExqfcuIHAzAITaTq0uVyPKktB3OwWdr4Doc6oSSxfnFvpPUKi5irF0tuQ
5f48pdZ0nbg0TuVKmLaaxXE3BxqufwOnQCCBtCZtRZgGKLTgUw+mdGg+0RYmPNJW
dX0Sd+lsdAB7VlNnZ34Xamgufd+iaFhI1ZWLHJ0VeoFZVhFKEG9fX1MqW3EjiJKY
Invkj8m9jOojiQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:32 2026 by rpki-client