Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: N6MGmppele8JJJEERYl5n+L7K7zsbraNX2zuzBGFwaM=
Subject key identifier: 51:A0:1D:99:29:BA:D0:9D:AD:A4:3F:AB:77:56:0D:FB:8C:41:0E:FC
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 019E1CEB696531D76A25B198D0CFE6C03B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 1462
Signing time: Tue 12 May 2026 16:00:50 +0000
Manifest this update: Tue 12 May 2026 16:00:50 +0000
Manifest next update: Wed 13 May 2026 16:00:50 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: AYd1l67oYMrINMYz0UUlgVjq4lLWT+a1AhafXwlrhwI=)
2: bqf5qipql10pKq2IW1cVBIAiNT0.roa (hash: +2BT4dwhMNJVzlVWSCe67UeT7mC6TzS9Mo4QbFrZxHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:69:65:31:d7:6a:25:b1:98:d0:cf:e6:c0:3b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: May 12 16:00:50 2026 GMT
Not After : May 13 16:00:50 2026 GMT
Subject: CN=51a01d9929bad09dada43fab77560dfb8c410efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:e5:ea:29:f2:1c:02:b1:86:79:b8:5a:9c:
1a:e4:f4:e6:8f:b0:d0:ae:78:20:51:65:8a:30:3d:
0d:16:c2:08:fa:fe:7d:64:fa:dc:20:a2:87:77:e6:
00:a2:0a:74:10:8a:8c:25:dc:46:af:1d:af:f0:41:
ca:e7:45:f4:86:ea:0f:ed:79:6b:fc:a6:aa:bd:4a:
aa:b7:23:91:ba:89:c0:3c:37:f5:b1:1b:c1:9a:3a:
7d:da:94:f2:b8:00:a2:9a:dc:b7:fa:59:f4:b5:51:
4f:2a:b7:eb:1d:5f:50:92:a6:06:f7:85:a3:37:70:
d9:59:af:74:d4:6f:55:77:21:94:53:4c:50:cd:45:
5c:9c:20:de:a6:36:12:c0:60:5d:03:3b:a9:3d:da:
eb:f2:b0:0d:8d:9f:45:16:87:d7:2a:24:37:04:98:
34:e9:4c:11:36:fd:5b:2a:36:67:7a:be:12:09:43:
26:e0:a2:0c:0c:5c:bd:7e:08:2d:77:cf:43:9f:9e:
7f:94:1e:7a:05:89:64:d7:3b:89:3f:0e:d4:2b:10:
ed:28:b3:db:5c:6f:b6:a8:8c:95:ce:5f:99:3a:c5:
5e:79:8e:0a:be:e4:b3:0d:03:4d:85:e9:7a:4e:18:
16:74:2a:11:27:2d:c7:60:db:87:c8:ad:31:85:4b:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:1D:99:29:BA:D0:9D:AD:A4:3F:AB:77:56:0D:FB:8C:41:0E:FC
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6d:de:80:b6:68:5e:a7:86:f6:f2:46:e5:11:7f:73:98:d7:
e5:ad:7d:59:08:32:5a:f7:12:f8:c6:e7:3c:37:a6:06:08:ce:
ad:ac:55:7f:4c:87:ed:35:37:ff:e8:41:b7:ad:56:07:db:84:
18:6a:1f:a6:e4:e3:c0:cd:20:f1:99:87:2d:8b:1b:50:9e:9d:
5d:58:fd:13:b6:f8:e4:ee:b2:b8:e6:36:be:95:43:2e:09:7d:
f0:61:05:df:39:b6:c2:ae:80:20:9f:27:af:82:ce:1e:c0:5c:
30:12:fe:fc:18:d0:93:4e:a2:55:f1:e9:71:e8:df:2f:06:dc:
73:b1:2f:5f:4f:2c:c1:d9:b6:62:cd:9e:80:bd:48:48:f6:f3:
41:1e:57:5f:8f:44:5c:fe:1d:b5:32:49:9c:e2:60:ba:87:6a:
07:ee:b7:af:d1:9f:b1:56:8c:e0:17:f1:02:b9:63:26:ca:45:
c5:2b:44:ce:2d:07:c6:ff:f9:44:fd:b2:42:ef:ae:9b:b9:b2:
eb:37:52:4a:49:61:e4:c1:03:e1:80:63:97:12:9a:f6:25:c2:
3d:52:22:f8:fb:23:00:87:fe:ab:cb:2e:d5:8e:bb:8e:b6:45:
e1:88:0e:b5:f7:c6:18:c0:ae:07:e8:9f:d9:5b:f5:a7:d4:21:
13:0f:1c:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c62llMddqJbGY0M/mwDtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MjAyYTNmYzFhOGU4NWM5ZGZkMmQ2NWQzMTlhODBkZDFm
YjkxN2QwHhcNMjYwNTEyMTYwMDUwWhcNMjYwNTEzMTYwMDUwWjAzMTEwLwYDVQQD
Eyg1MWEwMWQ5OTI5YmFkMDlkYWRhNDNmYWI3NzU2MGRmYjhjNDEwZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Pl6inyHAKxhnm4Wpwa5PTmj7DQ
rnggUWWKMD0NFsII+v59ZPrcIKKHd+YAogp0EIqMJdxGrx2v8EHK50X0huoP7Xlr
/KaqvUqqtyORuonAPDf1sRvBmjp92pTyuACimty3+ln0tVFPKrfrHV9QkqYG94Wj
N3DZWa901G9VdyGUU0xQzUVcnCDepjYSwGBdAzupPdrr8rANjZ9FFofXKiQ3BJg0
6UwRNv1bKjZner4SCUMm4KIMDFy9fggtd89Dn55/lB56BYlk1zuJPw7UKxDtKLPb
XG+2qIyVzl+ZOsVeeY4KvuSzDQNNhel6ThgWdCoRJy3HYNuHyK0xhUtbAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGgHZkputCdraQ/q3dWDfuMQQ78MB8GA1UdIwQY
MBaAFOQgKj/BqOhcnf0tZdMZqA3R+5F9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wY2Y3YjktOTM4Zi00YzE3LThlYzct
ZDE4ZDFlYTU2OGY1LzEvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8wY2Y3YjktOTM4Zi00YzE3LThlYzctZDE4ZDFlYTU2OGY1
LzEvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeG3egLZo
XqeG9vJG5RF/c5jX5a19WQgyWvcS+MbnPDemBgjOraxVf0yH7TU3/+hBt61WB9uE
GGofpuTjwM0g8ZmHLYsbUJ6dXVj9E7b45O6yuOY2vpVDLgl98GEF3zm2wq6AIJ8n
r4LOHsBcMBL+/BjQk06iVfHpcejfLwbcc7EvX08swdm2Ys2egL1ISPbzQR5XX49E
XP4dtTJJnOJguodqB+63r9GfsVaM4BfxArljJspFxStEzi0Hxv/5RP2yQu+um7my
6zdSSklh5MED4YBjlxKa9iXCPVIi+PsjAIf+q8su1Y67jrZF4YgOtffGGMCuB+if
2Vv1p9QhEw8cDw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:44:01 2026 by rpki-client