Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.mft
File: C5wIHILuiLzegjQT4hHD51Rd-sY.mft (raw, json)
Hash identifier: BmcfLPlASzM4qdcrXjfG/OdHmgdULNST8WKlufjYwd0=
Subject key identifier: 8B:51:73:0D:45:3A:2F:2C:E1:A0:F5:F9:39:AE:4F:55:AB:23:CD:1D
Authority key identifier: 0B:9C:08:1C:82:EE:88:BC:DE:82:34:13:E2:11:C3:E7:54:5D:FA:C6
Certificate issuer: /CN=0b9c081c82ee88bcde823413e211c3e7545dfac6
Certificate serial: 019F8ED9D202D8DE42E159D1BB4B7856FFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5wIHILuiLzegjQT4hHD51Rd-sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.mft
Manifest number: 88
Signing time: Thu 23 Jul 2026 12:01:07 +0000
Manifest this update: Thu 23 Jul 2026 12:01:07 +0000
Manifest next update: Fri 24 Jul 2026 12:01:07 +0000
Files and hashes: 1: C5wIHILuiLzegjQT4hHD51Rd-sY.crl (hash: 5KOjnhm0RUe+jrzs0LHsUW4zupqzLNYnvbn8bCY8e0k=)
2: xrYEF7MHANri_RLdvJ8t3yc6aD0.roa (hash: 8PcEWC5CYQTdUzOi9DoDZ2Yuv0blIgxRqvaAy5BfSDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5wIHILuiLzegjQT4hHD51Rd-sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:d2:02:d8:de:42:e1:59:d1:bb:4b:78:56:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9c081c82ee88bcde823413e211c3e7545dfac6
Validity
Not Before: Jul 23 12:01:07 2026 GMT
Not After : Jul 24 12:01:07 2026 GMT
Subject: CN=8b51730d453a2f2ce1a0f5f939ae4f55ab23cd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:14:eb:8e:80:8b:40:a8:81:c6:b8:1c:7c:b2:
09:ce:cb:72:de:98:5c:cf:18:f5:09:14:ac:bb:44:
b5:58:79:fa:8b:d5:01:50:49:82:e4:d3:71:4a:d0:
2d:ed:95:10:a3:fb:5b:e8:b8:82:97:5f:04:0e:b1:
0a:9c:e1:b9:8b:28:10:ce:e3:9f:51:d1:49:06:88:
be:2a:83:8c:f5:f2:f6:9e:a0:95:5b:8e:5a:07:db:
5c:11:f9:c4:93:a2:95:6e:ae:c5:1f:08:ad:79:fa:
54:f4:53:2d:a3:0d:23:9b:8c:84:3c:05:17:9a:a9:
69:7f:8c:da:a9:69:08:c6:15:9b:8f:bb:e2:44:55:
57:43:85:97:2a:47:c7:de:0c:6b:ab:ef:f6:56:d6:
2d:73:70:15:99:8d:18:ec:ed:db:a8:57:d2:55:1f:
91:06:94:45:fb:f1:ed:d3:72:84:46:09:18:7d:ec:
0c:9f:d3:17:75:51:0c:b2:75:87:d5:7b:d1:e4:a6:
98:cc:59:b4:7f:23:0d:89:38:20:c7:29:43:8b:92:
b1:5b:1a:47:45:de:98:61:eb:f5:b2:cc:be:b0:8c:
f9:17:bd:01:cf:ef:3f:e7:32:9d:2e:bf:b2:25:33:
ad:ce:97:cb:5a:b5:36:b6:d8:5d:ba:b5:7d:6d:f1:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:73:0D:45:3A:2F:2C:E1:A0:F5:F9:39:AE:4F:55:AB:23:CD:1D
X509v3 Authority Key Identifier:
keyid:0B:9C:08:1C:82:EE:88:BC:DE:82:34:13:E2:11:C3:E7:54:5D:FA:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5wIHILuiLzegjQT4hHD51Rd-sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e700d2-8ae7-4e82-b9fe-01b575cf455c/1/C5wIHILuiLzegjQT4hHD51Rd-sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:76:a6:d8:37:84:cf:ab:ef:ec:eb:2c:ef:98:d2:4c:d1:eb:
42:a8:91:85:a0:0c:29:36:5d:d0:5b:e2:fa:ad:d9:bb:01:14:
40:fa:66:71:f0:61:0e:0a:02:11:ee:93:33:4c:c0:56:88:76:
0f:ea:ab:b4:74:a3:54:44:f4:43:35:fb:ef:e7:b9:43:ee:c6:
00:e0:e8:14:3a:51:20:53:d1:f3:e3:5b:fe:10:1c:69:1e:8e:
45:7f:3f:6f:86:29:5c:a5:2c:a6:ad:fb:28:c3:ac:cb:b5:2c:
40:f3:92:2e:f9:ff:4e:7d:bd:bb:2e:17:5f:8b:c4:9b:ca:63:
c1:64:c5:f6:b1:ab:be:95:70:45:49:c4:61:4d:c6:0d:8a:b0:
85:3e:c6:3d:b9:c5:9e:e4:5e:26:01:62:40:55:17:c1:fb:12:
81:41:e4:a1:0a:ac:24:bc:77:70:d0:93:ef:62:3f:a1:62:28:
bd:b4:22:a4:7e:7a:f6:28:6c:d1:a0:e0:bd:f0:3c:86:cc:64:
58:11:27:3c:3f:22:82:e3:f3:22:3a:e7:f8:ee:7c:92:e0:4c:
61:55:d7:99:a7:09:cc:a1:4c:9e:35:e4:d9:18:13:f4:42:66:
25:ca:01:0a:08:dd:52:91:c3:08:49:7a:e2:7b:ce:ea:67:7b:
c0:f9:2a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2dIC2N5C4VnRu0t4Vv/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWMwODFjODJlZTg4YmNkZTgyMzQxM2UyMTFjM2U3NTQ1
ZGZhYzYwHhcNMjYwNzIzMTIwMTA3WhcNMjYwNzI0MTIwMTA3WjAzMTEwLwYDVQQD
Eyg4YjUxNzMwZDQ1M2EyZjJjZTFhMGY1ZjkzOWFlNGY1NWFiMjNjZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RTrjoCLQKiBxrgcfLIJzsty3phc
zxj1CRSsu0S1WHn6i9UBUEmC5NNxStAt7ZUQo/tb6LiCl18EDrEKnOG5iygQzuOf
UdFJBoi+KoOM9fL2nqCVW45aB9tcEfnEk6KVbq7FHwitefpU9FMtow0jm4yEPAUX
mqlpf4zaqWkIxhWbj7viRFVXQ4WXKkfH3gxrq+/2VtYtc3AVmY0Y7O3bqFfSVR+R
BpRF+/Ht03KERgkYfewMn9MXdVEMsnWH1XvR5KaYzFm0fyMNiTggxylDi5KxWxpH
Rd6YYev1ssy+sIz5F70Bz+8/5zKdLr+yJTOtzpfLWrU2tthdurV9bfHhuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItRcw1FOi8s4aD1+TmuT1WrI80dMB8GA1UdIwQY
MBaAFAucCByC7oi83oI0E+IRw+dUXfrGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzV3SUhJTHVpTHplZ2pRVDRoSEQ1MVJkLXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lNzAwZDItOGFlNy00ZTgyLWI5ZmUt
MDFiNTc1Y2Y0NTVjLzEvQzV3SUhJTHVpTHplZ2pRVDRoSEQ1MVJkLXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lNzAwZDItOGFlNy00ZTgyLWI5ZmUtMDFiNTc1Y2Y0NTVj
LzEvQzV3SUhJTHVpTHplZ2pRVDRoSEQ1MVJkLXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnam2DeE
z6vv7Oss75jSTNHrQqiRhaAMKTZd0Fvi+q3ZuwEUQPpmcfBhDgoCEe6TM0zAVoh2
D+qrtHSjVET0QzX77+e5Q+7GAODoFDpRIFPR8+Nb/hAcaR6ORX8/b4YpXKUspq37
KMOsy7UsQPOSLvn/Tn29uy4XX4vEm8pjwWTF9rGrvpVwRUnEYU3GDYqwhT7GPbnF
nuReJgFiQFUXwfsSgUHkoQqsJLx3cNCT72I/oWIovbQipH569ihs0aDgvfA8hsxk
WBEnPD8iguPzIjrn+O58kuBMYVXXmacJzKFMnjXk2RgT9EJmJcoBCgjdUpHDCEl6
4nvO6md7wPkq7g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:25 2026 by rpki-client