Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: mr3caKVl8v89tjsdjg33D2hoxIUQNjcvidISYysCXfk=
Subject key identifier: 0E:52:DD:B9:48:12:AF:0F:4B:01:3A:D6:92:22:90:AA:08:61:51:5F
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 01A0D87203ED7EF800391F1C951920AF4A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 10C7
Signing time: Fri 25 Sep 2026 12:02:25 +0000
Manifest this update: Fri 25 Sep 2026 12:02:25 +0000
Manifest next update: Sat 26 Sep 2026 12:02:25 +0000
Files and hashes: 1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: wPFENo6Qwbgj80UNweoYt7KzmUsE+IEWPReGSO907Ec=)
2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:03:ed:7e:f8:00:39:1f:1c:95:19:20:af:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Sep 25 12:02:25 2026 GMT
Not After : Sep 26 12:02:25 2026 GMT
Subject: CN=0e52ddb94812af0f4b013ad6922290aa0861515f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:88:fc:51:b1:99:4c:80:b6:96:f8:13:f4:
b4:d4:b0:ef:22:67:9b:ee:f5:2d:6d:b9:07:5e:ac:
ef:62:c0:14:d9:de:9b:a5:68:f7:d7:52:70:ed:41:
7d:a1:a5:72:12:6c:9e:cd:61:c7:ec:1f:13:11:10:
66:e4:e6:8d:a7:9c:8e:df:08:69:78:ea:9a:e3:e1:
51:82:01:ce:a3:27:2e:f1:41:19:a3:a8:7f:90:d7:
a0:cd:52:cc:8d:66:bc:a4:a2:8f:ac:fa:60:4c:25:
6f:a8:6c:eb:e7:80:0b:dd:95:df:49:73:c4:28:c7:
ba:84:29:3b:74:07:03:49:e3:d9:ac:66:b0:62:6d:
3e:9e:d8:c9:ce:ed:b0:04:6f:b6:4a:5e:35:56:36:
c7:73:1a:d8:e4:61:a0:3e:95:cc:ea:4b:7a:07:23:
54:f5:d5:9f:81:63:84:a4:04:12:2e:6a:ff:3a:8d:
8b:9b:e3:b2:47:e3:f9:9c:4b:c9:03:05:37:d3:8a:
cf:63:56:03:8f:dc:42:49:6d:b5:81:34:1d:3a:c2:
19:8b:a5:47:de:3d:ff:cf:cb:2e:52:d2:c3:b3:a6:
b4:73:ab:d7:b9:c1:6b:f2:30:67:e2:d2:da:23:ff:
8e:df:17:f3:ce:37:16:b2:de:b5:13:8d:3f:1e:5f:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:DD:B9:48:12:AF:0F:4B:01:3A:D6:92:22:90:AA:08:61:51:5F
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d2:1f:ae:8d:9f:e5:7e:16:52:6b:d9:af:cb:87:d0:70:cb:
0d:d6:49:5f:86:e3:62:6d:63:69:a2:30:ab:34:07:2a:f6:93:
99:2f:36:65:93:ab:dd:09:cd:dc:c0:f8:94:52:2a:20:83:d4:
3b:8b:28:66:e9:a9:ee:1c:0c:9f:98:c3:84:be:0d:e1:66:7a:
2f:0d:d7:0d:a1:a6:dd:12:d5:7e:18:88:d3:0f:7d:78:a3:01:
af:78:bb:6b:d3:57:9b:0c:fe:31:80:05:04:76:cd:8b:5c:ec:
78:a7:d7:a4:4b:30:4f:96:39:47:fb:d0:4a:d7:25:e9:4e:00:
83:a2:6c:1b:ba:6c:f8:b6:3d:0b:ba:13:65:05:91:f6:52:ec:
96:86:cd:33:77:ec:5f:64:b0:aa:08:a4:5a:5f:15:b0:2d:20:
bb:4a:93:a2:68:9f:12:ea:61:b6:8b:a6:c0:98:21:bc:1f:9a:
07:42:b8:d3:5a:8b:15:35:8f:d2:d4:86:61:bc:ae:fb:23:82:
31:e8:15:ae:1d:cd:53:a0:f7:51:f8:ce:92:a1:4e:b9:94:66:
fb:d6:ad:4b:69:c1:32:1b:70:c0:08:82:93:29:57:1f:62:a0:
7b:dd:d0:e2:50:80:42:48:b5:b9:19:6c:b1:10:07:4c:52:41:
f5:ee:71:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcgPtfvgAOR8clRkgr0p6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy
ZjU3NWUwHhcNMjYwOTI1MTIwMjI1WhcNMjYwOTI2MTIwMjI1WjAzMTEwLwYDVQQD
EygwZTUyZGRiOTQ4MTJhZjBmNGIwMTNhZDY5MjIyOTBhYTA4NjE1MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i6I/FGxmUyAtpb4E/S01LDvImeb
7vUtbbkHXqzvYsAU2d6bpWj311Jw7UF9oaVyEmyezWHH7B8TERBm5OaNp5yO3whp
eOqa4+FRggHOoycu8UEZo6h/kNegzVLMjWa8pKKPrPpgTCVvqGzr54AL3ZXfSXPE
KMe6hCk7dAcDSePZrGawYm0+ntjJzu2wBG+2Sl41VjbHcxrY5GGgPpXM6kt6ByNU
9dWfgWOEpAQSLmr/Oo2Lm+OyR+P5nEvJAwU304rPY1YDj9xCSW21gTQdOsIZi6VH
3j3/z8suUtLDs6a0c6vXucFr8jBn4tLaI/+O3xfzzjcWst61E40/Hl9OgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5S3blIEq8PSwE61pIikKoIYVFfMB8GA1UdIwQY
MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt
YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj
LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNIfro2f
5X4WUmvZr8uH0HDLDdZJX4bjYm1jaaIwqzQHKvaTmS82ZZOr3QnN3MD4lFIqIIPU
O4soZump7hwMn5jDhL4N4WZ6Lw3XDaGm3RLVfhiI0w99eKMBr3i7a9NXmwz+MYAF
BHbNi1zseKfXpEswT5Y5R/vQStcl6U4Ag6JsG7ps+LY9C7oTZQWR9lLslobNM3fs
X2SwqgikWl8VsC0gu0qTomifEuphtoumwJghvB+aB0K401qLFTWP0tSGYbyu+yOC
MegVrh3NU6D3UfjOkqFOuZRm+9atS2nBMhtwwAiCkylXH2Kge93Q4lCAQki1uRls
sRAHTFJB9e5xKg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:05:37 2026 by rpki-client