Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: XSF6THp1SzGIJdGi3U0Bd05o05g9h0BLMuA7o4sQR40=
Subject key identifier: 28:08:F1:7A:A2:5E:21:C6:2F:EF:AB:F8:52:E9:8D:77:17:BB:73:C6
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019E1BD93AA42F81B9CF2C43B39275ACD21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0B2B
Signing time: Tue 12 May 2026 11:01:21 +0000
Manifest this update: Tue 12 May 2026 11:01:21 +0000
Manifest next update: Wed 13 May 2026 11:01:21 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: 2jVdxdGjHpAzwi91EjlIM7HdzyE+KZ2gsVSPlOl4W28=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:3a:a4:2f:81:b9:cf:2c:43:b3:92:75:ac:d2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: May 12 11:01:21 2026 GMT
Not After : May 13 11:01:21 2026 GMT
Subject: CN=2808f17aa25e21c62fefabf852e98d7717bb73c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:4e:42:da:61:b7:c7:09:cd:c0:51:89:91:
f8:14:33:d8:e1:07:8b:eb:7f:45:2b:c6:79:32:87:
6c:fb:ef:51:36:9b:6b:84:94:70:a8:92:63:a6:dc:
a3:b5:28:ee:88:b6:24:4e:af:f0:68:86:04:1b:42:
e6:32:d1:75:bd:0d:81:4c:80:27:b1:f4:3d:7d:66:
be:87:0c:07:79:1d:ae:36:4d:09:50:cd:07:b0:f1:
14:fc:d9:1b:db:75:ce:9e:d0:c6:68:1c:a3:ac:9a:
9d:7f:80:d1:39:7d:7e:1e:12:73:8f:43:86:8c:81:
e4:e5:28:64:75:e4:f8:77:4d:52:0c:a0:99:de:57:
9c:63:4a:f5:69:6f:2a:c5:42:5f:f8:9e:31:f7:f1:
70:36:04:51:cb:26:5e:8b:75:de:50:03:42:6b:06:
42:8e:36:4d:b3:15:47:75:45:12:0a:3e:22:12:84:
44:e1:f6:56:0e:50:88:97:a8:62:f9:62:75:6a:24:
56:57:68:03:49:fb:38:92:81:63:36:07:70:3e:25:
8a:0f:65:30:71:ab:5c:50:07:14:e1:1d:9e:ab:95:
31:b2:f6:53:ff:38:c1:be:b2:1e:d4:80:f8:19:10:
a8:e0:ef:e2:71:7a:7c:0e:3e:d2:00:0a:c7:55:14:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:F1:7A:A2:5E:21:C6:2F:EF:AB:F8:52:E9:8D:77:17:BB:73:C6
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5e:fd:66:33:1e:42:b9:cd:0d:15:1a:d9:7a:a7:b3:e9:24:
da:36:db:3a:8a:be:56:c3:57:f7:4f:c0:46:c9:46:94:b0:14:
34:c1:a1:61:6a:56:c9:5a:47:64:0a:9e:8c:d5:b1:cf:0b:95:
95:a8:5a:f9:62:c7:03:6b:20:aa:77:40:f7:73:b8:2d:a5:78:
d0:de:86:76:c5:8d:9b:e9:27:70:0f:ea:d6:12:ac:a4:7b:85:
bb:f6:0a:33:ca:12:2f:94:ac:0e:b8:57:d8:fd:12:3e:f8:c3:
38:7b:b5:b5:41:24:3d:fc:17:44:9c:06:c2:73:40:48:6d:93:
a7:f6:dc:38:d8:88:f9:23:ab:51:64:ce:72:57:4a:73:27:61:
f9:3e:83:16:b2:7c:92:17:0c:58:c0:89:53:67:af:9d:a9:77:
eb:39:a4:78:f3:fc:ad:13:b0:a4:6c:96:ee:3b:92:eb:42:2e:
e1:49:d6:68:a7:ed:51:c4:b1:fb:4d:b8:19:d9:0e:5d:4f:6a:
72:f3:e5:f5:0c:b1:31:5b:54:5e:cc:97:7d:16:65:f6:41:a8:
8a:ae:40:3b:66:23:78:57:10:2e:82:4c:d4:3f:02:f2:49:37:
f1:a8:dc:6f:d7:9f:0d:88:f5:ef:cd:88:cc:3f:96:59:02:59:
16:6e:b2:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2TqkL4G5zyxDs5J1rNIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWU0YThjZDI4OThjNWRlNmQ2NjI1ZjEwYzRiMmU4NWY0
NjFmNzgwHhcNMjYwNTEyMTEwMTIxWhcNMjYwNTEzMTEwMTIxWjAzMTEwLwYDVQQD
EygyODA4ZjE3YWEyNWUyMWM2MmZlZmFiZjg1MmU5OGQ3NzE3YmI3M2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPJOQtpht8cJzcBRiZH4FDPY4QeL
639FK8Z5Mods++9RNptrhJRwqJJjptyjtSjuiLYkTq/waIYEG0LmMtF1vQ2BTIAn
sfQ9fWa+hwwHeR2uNk0JUM0HsPEU/Nkb23XOntDGaByjrJqdf4DROX1+HhJzj0OG
jIHk5ShkdeT4d01SDKCZ3lecY0r1aW8qxUJf+J4x9/FwNgRRyyZei3XeUANCawZC
jjZNsxVHdUUSCj4iEoRE4fZWDlCIl6hi+WJ1aiRWV2gDSfs4koFjNgdwPiWKD2Uw
catcUAcU4R2eq5UxsvZT/zjBvrIe1ID4GRCo4O/icXp8Dj7SAArHVRSPkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgI8XqiXiHGL++r+FLpjXcXu3PGMB8GA1UdIwQY
MBaAFNMeSozSiYxd5tZiXxDEsuhfRh94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMt
OTEyN2U4MTA1Njk5LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMtOTEyN2U4MTA1Njk5
LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV79ZjMe
QrnNDRUa2Xqns+kk2jbbOoq+VsNX90/ARslGlLAUNMGhYWpWyVpHZAqejNWxzwuV
laha+WLHA2sgqndA93O4LaV40N6GdsWNm+kncA/q1hKspHuFu/YKM8oSL5SsDrhX
2P0SPvjDOHu1tUEkPfwXRJwGwnNASG2Tp/bcONiI+SOrUWTOcldKcydh+T6DFrJ8
khcMWMCJU2evnal36zmkePP8rROwpGyW7juS60Iu4UnWaKftUcSx+024GdkOXU9q
cvPl9QyxMVtUXsyXfRZl9kGoiq5AO2YjeFcQLoJM1D8C8kk38ajcb9efDYj1782I
zD+WWQJZFm6yAg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:54:31 2026 by rpki-client