Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: lZwolz1Oy1779kNnX6t9zagfIvkIxT3/h1J/FNr7ZZw=
Subject key identifier: DB:17:2E:94:4E:6A:46:8B:42:56:A0:96:7C:BC:15:CF:D2:CE:92:1F
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 019F9022B13595428AF3C1F72CA99A0B10C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 10A5
Signing time: Thu 23 Jul 2026 18:00:20 +0000
Manifest this update: Thu 23 Jul 2026 18:00:20 +0000
Manifest next update: Fri 24 Jul 2026 18:00:20 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: DDjYqs4tJ+CV9fMRq/oJcnX+yE+IcvADPAGD9owEcKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:b1:35:95:42:8a:f3:c1:f7:2c:a9:9a:0b:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Jul 23 18:00:20 2026 GMT
Not After : Jul 24 18:00:20 2026 GMT
Subject: CN=db172e944e6a468b4256a0967cbc15cfd2ce921f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:3a:8c:27:74:a1:eb:56:b3:0d:46:1f:dc:
0e:90:d6:17:f0:d3:b0:0a:9b:c5:1f:04:46:b6:62:
e0:60:c9:93:04:19:af:fd:f8:7f:c9:2a:75:86:83:
0b:5b:20:ac:dd:eb:d4:eb:9b:e6:ee:fc:ec:a5:bc:
c6:62:e0:a1:bd:b9:16:66:91:bb:da:3e:fe:44:ad:
23:29:e6:78:9a:ad:af:fa:8f:fc:de:65:8f:54:7d:
91:a5:03:09:b1:da:a1:39:3e:32:b0:07:71:3f:cc:
56:08:7c:2a:d2:47:db:44:69:b1:a7:a9:18:f4:43:
58:ba:e3:a4:cc:13:2e:94:f1:21:56:7c:38:06:76:
3e:e7:6d:d6:b0:3e:84:22:2c:3e:1b:e7:ce:28:58:
46:3b:78:c9:14:5c:0c:a3:90:49:8a:89:96:97:18:
37:dc:36:a1:3c:60:ac:55:e1:c9:88:7b:df:02:18:
52:0c:03:a3:54:6b:e6:6d:c5:d7:a5:14:ef:29:32:
a5:5c:33:0e:19:64:7d:d0:f9:22:b8:19:0c:01:8d:
c6:1e:50:cf:b3:02:3e:05:b4:f3:06:3a:ec:06:39:
08:ae:7c:b4:6a:cb:08:93:c9:4d:ff:d6:6f:ac:4d:
ef:1f:25:b2:dd:bc:40:24:42:f7:38:0d:58:08:cb:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:17:2E:94:4E:6A:46:8B:42:56:A0:96:7C:BC:15:CF:D2:CE:92:1F
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e1:17:03:cc:be:3a:69:41:a3:2f:bd:52:77:78:89:5a:f7:
e1:c2:89:f8:2c:68:35:52:27:0d:b5:c7:46:86:e5:d9:8e:60:
dd:28:e1:9e:f4:03:4c:bf:2a:7b:58:ff:50:a9:db:bd:55:59:
4c:c6:50:6c:df:61:99:17:5b:56:bf:4b:4f:a5:c6:78:46:7b:
56:96:e5:7a:7d:ca:31:9e:53:0d:48:ea:63:72:10:17:26:f3:
f1:7a:48:db:11:88:1c:30:9d:41:49:70:07:c2:72:8b:5c:c1:
bc:f4:40:93:f5:d0:7c:16:c5:95:47:ca:06:67:97:6d:33:56:
d7:d3:c3:3d:d8:48:71:67:28:95:49:d1:39:7d:97:e7:e6:dd:
e7:98:56:df:17:cd:c6:8c:48:5d:a1:41:ae:c9:16:28:f1:b3:
f4:3d:12:60:ad:f4:99:61:4a:20:96:8e:75:0c:52:c0:2b:cf:
67:61:95:b4:bf:fc:77:c3:42:a9:f8:f9:b3:ae:14:32:96:0a:
9a:4c:21:c1:c4:4e:8c:69:a2:32:40:aa:03:26:ef:ff:66:b3:
a3:ba:f9:3f:20:61:ba:bd:1f:e5:95:82:03:9c:fd:a0:77:9f:
97:e8:26:36:28:a8:80:85:4f:25:95:23:4f:f9:34:69:07:ea:
bd:b8:71:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIrE1lUKK88H3LKmaCxDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YjkxYjE5ZjRiZGJkNmZmMWQ3ZjM3MmQzYTBkZDEzOTAw
NTAwMDYwHhcNMjYwNzIzMTgwMDIwWhcNMjYwNzI0MTgwMDIwWjAzMTEwLwYDVQQD
EyhkYjE3MmU5NDRlNmE0NjhiNDI1NmEwOTY3Y2JjMTVjZmQyY2U5MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBk6jCd0oetWsw1GH9wOkNYX8NOw
CpvFHwRGtmLgYMmTBBmv/fh/ySp1hoMLWyCs3evU65vm7vzspbzGYuChvbkWZpG7
2j7+RK0jKeZ4mq2v+o/83mWPVH2RpQMJsdqhOT4ysAdxP8xWCHwq0kfbRGmxp6kY
9ENYuuOkzBMulPEhVnw4BnY+523WsD6EIiw+G+fOKFhGO3jJFFwMo5BJiomWlxg3
3DahPGCsVeHJiHvfAhhSDAOjVGvmbcXXpRTvKTKlXDMOGWR90PkiuBkMAY3GHlDP
swI+BbTzBjrsBjkIrny0assIk8lN/9ZvrE3vHyWy3bxAJEL3OA1YCMs3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsXLpROakaLQlaglny8Fc/SzpIfMB8GA1UdIwQY
MBaAFOa5Gxn0vb1v8dfzctOg3ROQBQAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDct
MDRiNTI4ZmFlMDNhLzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDctMDRiNTI4ZmFlMDNh
LzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOEXA8y+
OmlBoy+9Und4iVr34cKJ+CxoNVInDbXHRobl2Y5g3SjhnvQDTL8qe1j/UKnbvVVZ
TMZQbN9hmRdbVr9LT6XGeEZ7Vpblen3KMZ5TDUjqY3IQFybz8XpI2xGIHDCdQUlw
B8Jyi1zBvPRAk/XQfBbFlUfKBmeXbTNW19PDPdhIcWcolUnROX2X5+bd55hW3xfN
xoxIXaFBrskWKPGz9D0SYK30mWFKIJaOdQxSwCvPZ2GVtL/8d8NCqfj5s64UMpYK
mkwhwcROjGmiMkCqAybv/2azo7r5PyBhur0f5ZWCA5z9oHefl+gmNiiogIVPJZUj
T/k0aQfqvbhxEA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:41 2026 by rpki-client