Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: k/tSb8bO0J9y0zBTKy/oDZNVJyXNlObjJqVZS1ZvHFM=
Subject key identifier: 9F:15:77:58:8E:0F:CE:61:1B:A3:DF:83:BF:53:28:0C:47:D2:0D:8D
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 01A0CDB657D9A050A027330693C6112D1FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 0C9C
Signing time: Wed 23 Sep 2026 10:01:14 +0000
Manifest this update: Wed 23 Sep 2026 10:01:14 +0000
Manifest next update: Thu 24 Sep 2026 10:01:14 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: jDZP7Uv7eu5fC6G78UOKP9zn241tZ79DMehHrj+lJ3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:57:d9:a0:50:a0:27:33:06:93:c6:11:2d:1f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Sep 23 10:01:14 2026 GMT
Not After : Sep 24 10:01:14 2026 GMT
Subject: CN=9f1577588e0fce611ba3df83bf53280c47d20d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:68:e7:02:bc:e5:fa:51:b3:21:c5:86:c2:
42:fc:49:23:e2:25:07:7f:e7:76:06:55:bd:97:d8:
c6:fe:cb:3c:30:0f:bc:cc:03:8d:3e:2e:2d:cb:10:
8a:f9:68:32:42:6e:3c:0e:5b:98:d1:2f:d6:7e:c3:
d9:34:54:b1:b1:05:65:83:b3:4e:d2:5c:fc:2a:39:
3b:1a:b1:29:52:dd:c4:db:0e:a4:de:62:2a:02:76:
41:d1:ab:a5:b0:87:aa:0e:63:94:d5:f1:8b:be:73:
4a:8e:b5:f5:86:76:81:f0:99:5e:8c:e8:47:43:e4:
56:ca:3c:b1:b1:57:91:c2:b6:99:64:e1:74:73:67:
4f:20:c6:aa:1c:01:c5:0e:df:0c:c2:e0:17:bf:bc:
a7:a5:01:60:9e:ae:83:28:a3:37:64:4b:77:68:2f:
4a:f4:c3:58:1c:30:21:64:c1:c5:b5:44:db:e2:eb:
7b:02:1b:30:08:e1:df:77:22:f7:cd:00:70:12:84:
02:b4:d0:36:54:68:6a:fe:fe:6f:fc:64:31:ea:8c:
cf:e9:8e:fa:95:42:fe:33:68:21:c3:88:d0:cf:b6:
c6:dd:22:58:5d:66:6a:85:86:99:a9:92:77:bd:36:
8c:73:c7:8c:90:a2:2a:8f:f0:3c:4c:3c:27:0f:6e:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:77:58:8E:0F:CE:61:1B:A3:DF:83:BF:53:28:0C:47:D2:0D:8D
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:21:0f:ee:3a:63:aa:a3:f7:12:9c:44:a4:72:5a:ad:eb:26:
a4:e8:2f:a4:63:c3:46:6a:4c:c2:5e:99:32:08:46:da:3a:6c:
55:64:8a:dc:ca:d8:f7:e5:fb:ad:54:a1:03:06:65:24:6d:7c:
3b:5a:d0:15:11:93:0f:8a:5b:93:86:c8:b4:56:b6:83:7b:cf:
72:49:90:6a:21:8d:03:3a:23:a6:b5:29:b1:a5:ac:0e:4b:7c:
4e:26:27:87:93:21:4c:e0:e1:2a:14:8a:6c:b8:93:ca:e4:bf:
28:16:64:4d:f2:1c:68:03:45:ce:27:31:6a:a0:cb:d7:fc:e0:
f0:ea:ef:44:4c:08:b3:16:83:ee:7e:70:b3:99:6b:d9:48:fe:
e5:dc:f1:fe:ae:84:80:c1:d0:8d:3c:38:7f:63:a4:84:14:ac:
6d:d5:31:cd:30:92:06:3b:87:f0:8b:6f:9e:68:ca:c3:ea:a3:
85:b0:58:66:a5:8d:b2:0e:11:3d:70:e0:ae:9b:68:ba:5d:f5:
20:bf:f5:90:d5:de:de:8b:07:7e:af:36:7d:ba:c7:c6:5e:07:
74:a2:b0:4c:c3:09:1a:5d:23:93:b1:d7:5e:bf:c1:7d:f3:db:
c0:bf:4e:a7:d0:ae:46:75:38:73:ae:e3:9b:48:b9:ba:34:f4:
be:0f:f0:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtlfZoFCgJzMGk8YRLR+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzc0ODI0MzRhNDU3YjA0OGI3ZDYyNjFkZGQ4MDk1YzVj
MDkwMjAwHhcNMjYwOTIzMTAwMTE0WhcNMjYwOTI0MTAwMTE0WjAzMTEwLwYDVQQD
Eyg5ZjE1Nzc1ODhlMGZjZTYxMWJhM2RmODNiZjUzMjgwYzQ3ZDIwZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMNo5wK85fpRsyHFhsJC/Ekj4iUH
f+d2BlW9l9jG/ss8MA+8zAONPi4tyxCK+WgyQm48DluY0S/WfsPZNFSxsQVlg7NO
0lz8Kjk7GrEpUt3E2w6k3mIqAnZB0aulsIeqDmOU1fGLvnNKjrX1hnaB8JlejOhH
Q+RWyjyxsVeRwraZZOF0c2dPIMaqHAHFDt8MwuAXv7ynpQFgnq6DKKM3ZEt3aC9K
9MNYHDAhZMHFtUTb4ut7AhswCOHfdyL3zQBwEoQCtNA2VGhq/v5v/GQx6ozP6Y76
lUL+M2ghw4jQz7bG3SJYXWZqhYaZqZJ3vTaMc8eMkKIqj/A8TDwnD27xIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8Vd1iOD85hG6Pfg79TKAxH0g2NMB8GA1UdIwQY
MBaAFOTHSCQ0pFewSLfWJh3dgJXFwJAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUt
YzQ1MDhiNTU1MDcxLzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUtYzQ1MDhiNTU1MDcx
LzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiEP7jpj
qqP3EpxEpHJaresmpOgvpGPDRmpMwl6ZMghG2jpsVWSK3MrY9+X7rVShAwZlJG18
O1rQFRGTD4pbk4bItFa2g3vPckmQaiGNAzojprUpsaWsDkt8TiYnh5MhTODhKhSK
bLiTyuS/KBZkTfIcaANFzicxaqDL1/zg8OrvREwIsxaD7n5ws5lr2Uj+5dzx/q6E
gMHQjTw4f2OkhBSsbdUxzTCSBjuH8ItvnmjKw+qjhbBYZqWNsg4RPXDgrptoul31
IL/1kNXe3osHfq82fbrHxl4HdKKwTMMJGl0jk7HXXr/BffPbwL9Op9CuRnU4c67j
m0i5ujT0vg/w7g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:10:24 2026 by rpki-client