Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: M2iR/gpU4KZZQfxsFQT7Ji9Y4woLsScQUN9xCe0m9h4=
Subject key identifier: D6:7F:A7:37:42:FF:9A:A6:B9:C5:9E:02:EC:C4:DC:64:F9:AB:C8:43
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 01A0DD6098F859C31543666AB375CE52E3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 1291
Signing time: Sat 26 Sep 2026 11:01:30 +0000
Manifest this update: Sat 26 Sep 2026 11:01:30 +0000
Manifest next update: Sun 27 Sep 2026 11:01:30 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: 5Q/hX0VdfS4PcbknpiNbaVxhJK9jJwGo9qEtj50SHpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:98:f8:59:c3:15:43:66:6a:b3:75:ce:52:e3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Sep 26 11:01:30 2026 GMT
Not After : Sep 27 11:01:30 2026 GMT
Subject: CN=d67fa73742ff9aa6b9c59e02ecc4dc64f9abc843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:88:86:55:7c:eb:0f:37:36:31:ee:64:2d:
ba:67:6a:34:88:17:6a:59:9e:ae:62:30:8e:87:94:
3e:98:c3:fe:1c:87:d7:f0:3b:b7:01:0b:5a:d7:f2:
d7:fc:fb:ca:6e:1d:54:3b:54:0f:4c:a9:7c:73:65:
80:3e:64:b3:21:a3:2a:bc:39:a0:82:9f:a0:74:b1:
ce:64:e8:f9:17:9b:cb:6f:1a:be:be:96:4e:2a:75:
8c:a1:75:7a:17:d2:3b:64:44:2d:b8:f6:e8:27:45:
91:9a:5b:bc:15:47:3e:ec:41:fb:72:f5:8c:09:91:
6c:82:f2:78:44:32:a6:4e:90:26:ef:bb:7b:93:7c:
cb:0c:86:22:88:fd:e7:31:d1:49:28:42:c2:f0:a9:
3d:6b:8d:f3:b3:24:6b:9a:17:0a:1a:4a:90:35:83:
39:19:c7:a8:96:c7:fe:c3:6c:39:7c:08:8a:60:ef:
ac:49:f6:7e:97:45:5a:2c:1a:be:a7:97:49:73:b8:
1c:e8:50:cc:ce:40:56:a1:a2:af:b9:b2:f4:54:d3:
0c:08:2d:22:19:d0:d4:34:f9:1e:02:e8:ce:b7:48:
15:96:a6:3a:0c:34:82:80:76:b2:b5:e9:57:89:dc:
7f:00:c9:92:ce:60:06:45:54:17:aa:87:36:e9:23:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:A7:37:42:FF:9A:A6:B9:C5:9E:02:EC:C4:DC:64:F9:AB:C8:43
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:82:e3:28:ae:60:26:e1:6b:c9:70:5e:55:57:e4:c6:5a:87:
32:2d:fd:21:cb:48:ef:0e:fb:1d:78:b7:02:03:23:6a:7e:3d:
ac:1d:62:85:14:02:35:26:f2:4a:84:74:6c:1e:79:97:23:fd:
64:96:35:8c:42:2f:29:e2:11:c8:91:97:2e:a2:3f:91:b7:ea:
94:e8:01:14:a6:00:8e:c7:87:f6:4c:77:41:e5:9a:c5:84:3b:
ec:84:24:03:95:90:12:29:f7:fd:9c:b0:b3:1c:3d:a0:d2:5b:
f6:f8:98:b2:41:f4:6a:dd:12:4a:31:be:89:84:9f:71:8b:b9:
3d:88:1a:f3:53:6c:f4:54:b2:6e:5f:68:4c:01:eb:d2:94:c0:
ee:26:a4:c3:45:5d:b3:ae:f7:41:8a:7f:e3:cb:16:a2:66:27:
c5:3d:4e:54:33:5a:58:a9:34:59:c1:36:13:1e:ee:d0:63:80:
91:ea:9e:08:f2:08:e8:69:0c:41:39:38:9d:bb:66:6f:ce:a3:
e1:b9:51:77:dc:d1:cc:b4:4b:a7:2a:4a:3c:3f:17:16:13:98:
2c:e1:63:7f:ad:32:39:4c:a7:d5:54:f7:fd:e7:35:6b:3c:1a:
da:7f:f9:84:8c:a4:37:0a:e3:bc:28:9c:d9:c9:30:98:bf:b3:
99:5a:d1:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdYJj4WcMVQ2Zqs3XOUuOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGU2NjkyZDk3MjhkYTgxZjVjNGY0OWUxNTA3NzNlMWFm
YmM4MGIwHhcNMjYwOTI2MTEwMTMwWhcNMjYwOTI3MTEwMTMwWjAzMTEwLwYDVQQD
EyhkNjdmYTczNzQyZmY5YWE2YjljNTllMDJlY2M0ZGM2NGY5YWJjODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx6IhlV86w83NjHuZC26Z2o0iBdq
WZ6uYjCOh5Q+mMP+HIfX8Du3AQta1/LX/PvKbh1UO1QPTKl8c2WAPmSzIaMqvDmg
gp+gdLHOZOj5F5vLbxq+vpZOKnWMoXV6F9I7ZEQtuPboJ0WRmlu8FUc+7EH7cvWM
CZFsgvJ4RDKmTpAm77t7k3zLDIYiiP3nMdFJKELC8Kk9a43zsyRrmhcKGkqQNYM5
Gceolsf+w2w5fAiKYO+sSfZ+l0VaLBq+p5dJc7gc6FDMzkBWoaKvubL0VNMMCC0i
GdDUNPkeAujOt0gVlqY6DDSCgHaytelXidx/AMmSzmAGRVQXqoc26SOdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ/pzdC/5qmucWeAuzE3GT5q8hDMB8GA1UdIwQY
MBaAFOUOZpLZco2oH1xPSeFQdz4a+8gLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgt
MDM5YzE0MDVlMTc1LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgtMDM5YzE0MDVlMTc1
LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooLjKK5g
JuFryXBeVVfkxlqHMi39IctI7w77HXi3AgMjan49rB1ihRQCNSbySoR0bB55lyP9
ZJY1jEIvKeIRyJGXLqI/kbfqlOgBFKYAjseH9kx3QeWaxYQ77IQkA5WQEin3/Zyw
sxw9oNJb9viYskH0at0SSjG+iYSfcYu5PYga81Ns9FSybl9oTAHr0pTA7iakw0Vd
s673QYp/48sWomYnxT1OVDNaWKk0WcE2Ex7u0GOAkeqeCPII6GkMQTk4nbtmb86j
4blRd9zRzLRLpypKPD8XFhOYLOFjf60yOUyn1VT3/ec1azwa2n/5hIykNwrjvCic
2ckwmL+zmVrRsQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:13:44 2026 by rpki-client