Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
File: 0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json)
Hash identifier: RXe/SIWvaNNR5kkvFdsq+IiJjEg+9y/5uE9EZ8mFbqQ=
Subject key identifier: BA:A6:8D:C9:55:DE:5A:E8:4F:36:2E:6F:C6:77:03:47:48:B3:B7:42
Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Certificate serial: 019E1DC77FDC2555234E06FF1C15DD21FCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
Manifest number: 01CF
Signing time: Tue 12 May 2026 20:01:13 +0000
Manifest this update: Tue 12 May 2026 20:01:13 +0000
Manifest next update: Wed 13 May 2026 20:01:13 +0000
Files and hashes: 1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: xHZTNtNQL81aL+JtM4XKfdG2VRC+n8O5umV+x9oAaeY=)
2: _5oe6VqZsqBT0LMhmKV2LIl_uf8.roa (hash: /SkExJhWDQiBSVIh+Uw/CkRQN60+0HSnourFk+/DB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:7f:dc:25:55:23:4e:06:ff:1c:15:dd:21:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Validity
Not Before: May 12 20:01:13 2026 GMT
Not After : May 13 20:01:13 2026 GMT
Subject: CN=baa68dc955de5ae84f362e6fc677034748b3b742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:c7:4a:ef:ae:30:52:a2:ed:e4:84:50:d1:
d3:e4:ca:ba:61:e9:90:23:92:e7:21:f9:86:bf:7d:
91:06:a5:ae:33:d9:58:15:70:aa:b2:29:ef:29:49:
3e:a7:f1:43:b3:65:74:8c:fd:49:49:f5:89:ef:ea:
78:80:e2:10:01:62:8f:0f:0f:89:63:8f:93:4d:fc:
3c:52:1b:0b:f2:5a:f7:29:9a:23:51:8a:63:32:b3:
8b:fb:88:09:6a:20:ef:00:da:d7:88:28:8f:32:87:
93:69:e2:3d:85:98:cd:72:05:13:4f:df:46:78:55:
be:de:a7:54:4e:36:a1:7b:ad:74:c5:55:a8:5b:75:
97:46:30:e8:ef:2d:6b:e8:25:b2:31:f0:ed:ca:b6:
69:5b:b8:03:3e:cd:59:ec:50:18:bb:46:93:01:04:
32:eb:ee:8d:bf:94:86:f5:e2:5a:f7:76:23:d2:f3:
2d:21:64:9a:7c:ee:0a:35:91:0d:c7:f1:ba:44:2a:
17:4e:17:01:54:f7:04:cf:8d:e9:54:b6:41:ab:62:
42:2d:a1:27:24:e6:b7:da:c9:94:a4:d7:75:ee:33:
67:eb:0b:cb:65:b7:af:1c:18:f6:67:f1:29:f9:29:
d5:17:70:4a:4c:30:0a:7c:6e:bc:ce:0e:84:6f:3d:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:8D:C9:55:DE:5A:E8:4F:36:2E:6F:C6:77:03:47:48:B3:B7:42
X509v3 Authority Key Identifier:
keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f1:3a:6a:17:e0:17:6a:dd:2b:81:c7:c7:8e:3e:84:ed:65:
bc:9a:31:de:8b:15:46:c2:5e:f1:e0:9e:4d:9a:ef:20:72:2c:
59:a4:5a:21:22:93:91:04:2d:95:5f:1d:00:73:07:f3:1f:cf:
92:37:df:5f:80:44:24:ce:86:a2:ea:17:10:e7:ae:a8:5d:d0:
86:ee:a6:fb:56:53:cd:74:f2:3d:dd:a6:bb:c9:3c:64:e0:d8:
1c:e6:14:76:32:01:ca:aa:fc:df:ae:22:a7:1b:3a:8b:27:0b:
3c:68:eb:49:1c:4c:be:7f:2c:9d:58:17:cf:29:b5:01:25:cf:
60:9a:08:ce:a2:16:92:b8:27:b6:e3:f3:1b:8b:a0:ae:64:98:
49:db:a1:95:c1:13:ad:b8:08:25:18:85:33:2f:be:45:23:54:
98:3e:cd:65:ea:9b:cd:a1:a1:d6:6f:18:b8:33:96:d4:da:a5:
ad:71:f1:c9:2b:ac:3e:cd:40:21:f6:ee:4a:6e:92:29:fd:ad:
fc:a6:dd:06:87:73:6b:07:54:5d:29:ae:94:35:72:a4:ab:a9:
a6:b2:62:c4:74:bc:f6:20:1f:93:f4:25:af:62:4b:26:46:db:
ac:2a:fa:19:03:a9:d3:d7:72:0b:1a:bd:e7:7e:1f:7e:27:db:
99:16:f1:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx3/cJVUjTgb/HBXdIfzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZWU0ZDZlMWMwNGEwZjU4Mjk1YjJhOTcyMTBhY2Q0N2Jm
N2Q5NmEwHhcNMjYwNTEyMjAwMTEzWhcNMjYwNTEzMjAwMTEzWjAzMTEwLwYDVQQD
EyhiYWE2OGRjOTU1ZGU1YWU4NGYzNjJlNmZjNjc3MDM0NzQ4YjNiNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqnHSu+uMFKi7eSEUNHT5Mq6YemQ
I5LnIfmGv32RBqWuM9lYFXCqsinvKUk+p/FDs2V0jP1JSfWJ7+p4gOIQAWKPDw+J
Y4+TTfw8UhsL8lr3KZojUYpjMrOL+4gJaiDvANrXiCiPMoeTaeI9hZjNcgUTT99G
eFW+3qdUTjahe610xVWoW3WXRjDo7y1r6CWyMfDtyrZpW7gDPs1Z7FAYu0aTAQQy
6+6Nv5SG9eJa93Yj0vMtIWSafO4KNZENx/G6RCoXThcBVPcEz43pVLZBq2JCLaEn
JOa32smUpNd17jNn6wvLZbevHBj2Z/Ep+SnVF3BKTDAKfG68zg6Ebz0LXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqmjclV3lroTzYub8Z3A0dIs7dCMB8GA1UdIwQY
MBaAFNPuTW4cBKD1gpWyqXIQrNR799lqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDhlZjktNzgzMy00OTc0LTkyNTct
NjViNGE2OWZiYmNlLzEvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZDhlZjktNzgzMy00OTc0LTkyNTctNjViNGE2OWZiYmNl
LzEvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/E6ahfg
F2rdK4HHx44+hO1lvJox3osVRsJe8eCeTZrvIHIsWaRaISKTkQQtlV8dAHMH8x/P
kjffX4BEJM6GouoXEOeuqF3Qhu6m+1ZTzXTyPd2mu8k8ZODYHOYUdjIByqr8364i
pxs6iycLPGjrSRxMvn8snVgXzym1ASXPYJoIzqIWkrgntuPzG4ugrmSYSduhlcET
rbgIJRiFMy++RSNUmD7NZeqbzaGh1m8YuDOW1NqlrXHxySusPs1AIfbuSm6SKf2t
/KbdBodzawdUXSmulDVypKupprJixHS89iAfk/Qlr2JLJkbbrCr6GQOp09dyCxq9
534ffifbmRbxgg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:21:46 2026 by rpki-client