Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: Ah1GxPwN+PqIUCj45zrz+6hauPs9TZGiw2hyVONG7UI=
Subject key identifier: 99:96:48:D9:B4:10:04:26:A3:86:D5:10:1A:6D:6F:44:65:22:17:51
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 019F8F7F9B4DB9AC903BE251404D770D0090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 16A3
Signing time: Thu 23 Jul 2026 15:02:12 +0000
Manifest this update: Thu 23 Jul 2026 15:02:12 +0000
Manifest next update: Fri 24 Jul 2026 15:02:12 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: HeB8dWRX14vw1ZXQzOmwDuvbl/+BA20B40LyDYTc2uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9b:4d:b9:ac:90:3b:e2:51:40:4d:77:0d:00:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Jul 23 15:02:12 2026 GMT
Not After : Jul 24 15:02:12 2026 GMT
Subject: CN=999648d9b4100426a386d5101a6d6f4465221751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:2a:e4:df:a4:96:ef:29:11:04:73:a8:b9:
aa:fc:cd:18:67:40:37:b0:64:05:5f:2e:f9:4f:bd:
bf:2c:50:fa:1e:50:e7:7b:01:24:9e:c6:44:5c:eb:
8d:14:1a:37:96:67:db:6d:3f:06:25:b9:4c:4c:a7:
41:c8:78:d5:12:8c:2b:ee:a1:4c:d2:6e:aa:0a:14:
be:5d:d0:25:c7:83:e4:11:f2:79:9f:b6:6f:95:ef:
c6:65:8a:3c:93:d4:31:e0:b3:b2:e5:3f:1c:28:0e:
cd:38:c5:7f:8a:f4:76:6f:b7:f3:05:3b:84:5b:92:
c1:b6:e9:30:dc:15:b8:1e:e5:63:be:83:39:e6:ca:
bf:27:01:a1:d7:d8:8c:5f:6c:c3:71:55:33:a2:3f:
6d:39:f8:1b:b2:8f:c7:14:65:c7:ea:d7:64:2b:8a:
28:9b:7c:20:5b:0f:1d:2b:83:be:5e:6e:71:43:54:
cd:d3:6f:53:55:21:f9:f1:af:26:b1:03:6a:fe:d7:
34:2b:ad:b3:7d:b5:b6:5f:cc:ea:49:e9:27:ca:b0:
4e:d5:82:b9:7f:72:39:5a:79:5a:f2:1a:b6:b5:9b:
2f:a0:0d:6b:71:7c:7b:0e:48:f2:d1:82:dd:83:c8:
6c:db:0a:43:b3:35:96:ff:f2:8d:07:6c:32:25:3a:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:48:D9:B4:10:04:26:A3:86:D5:10:1A:6D:6F:44:65:22:17:51
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bc:2b:9b:9b:87:38:9f:ec:b5:97:51:36:0b:67:a4:12:14:
77:6d:9e:ea:e8:c4:56:37:a3:51:b7:3b:20:73:98:70:e0:79:
9b:de:1c:58:c4:37:5b:f3:fe:d6:22:73:ee:4e:57:b7:56:5b:
e5:26:0d:fc:bf:73:ed:8f:68:b4:93:50:77:aa:e2:6b:b0:6d:
aa:7e:f4:99:91:c7:8d:45:c5:98:d3:4f:ad:d0:0a:fd:8e:7c:
26:6a:a1:fb:3a:bf:46:12:cb:81:05:fa:4f:3b:e0:2e:96:1a:
4c:be:ec:fb:3f:dc:a3:f3:b0:82:87:a1:09:5e:f8:76:04:cb:
ca:b7:07:f3:b0:f5:89:64:e8:bc:6f:02:44:49:af:ca:7a:ed:
2f:33:73:bc:1c:77:c3:9d:86:9e:ec:59:88:73:ce:a2:6e:60:
2b:06:3c:c4:10:36:a3:9f:4d:9c:26:db:87:16:b0:78:b6:02:
5c:f1:03:ce:02:77:77:86:e7:25:ef:06:f8:55:5d:5b:b2:cb:
b0:5b:90:38:a8:a8:0c:18:27:24:c3:b2:9a:38:68:45:58:52:
13:44:27:af:e7:18:3f:1c:7d:eb:ae:b9:60:70:b7:d7:b0:62:
85:c2:f9:82:11:20:a6:62:cf:f5:ea:c4:e6:98:3a:27:9c:2f:
ae:4b:27:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf5tNuayQO+JRQE13DQCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YThiOTJkNGM1OTdmNmMwNDRmNzcyNTI4NTQ4ZjljOTEy
OWEwZDMwHhcNMjYwNzIzMTUwMjEyWhcNMjYwNzI0MTUwMjEyWjAzMTEwLwYDVQQD
Eyg5OTk2NDhkOWI0MTAwNDI2YTM4NmQ1MTAxYTZkNmY0NDY1MjIxNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkoq5N+klu8pEQRzqLmq/M0YZ0A3
sGQFXy75T72/LFD6HlDnewEknsZEXOuNFBo3lmfbbT8GJblMTKdByHjVEowr7qFM
0m6qChS+XdAlx4PkEfJ5n7Zvle/GZYo8k9Qx4LOy5T8cKA7NOMV/ivR2b7fzBTuE
W5LBtukw3BW4HuVjvoM55sq/JwGh19iMX2zDcVUzoj9tOfgbso/HFGXH6tdkK4oo
m3wgWw8dK4O+Xm5xQ1TN029TVSH58a8msQNq/tc0K62zfbW2X8zqSeknyrBO1YK5
f3I5Wnla8hq2tZsvoA1rcXx7Dkjy0YLdg8hs2wpDszWW//KNB2wyJTqGrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmWSNm0EAQmo4bVEBptb0RlIhdRMB8GA1UdIwQY
MBaAFOaouS1MWX9sBE93JShUj5yRKaDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWFmYzItOTE2OS00YThjLTg4MTYt
ZGViN2ZmMWI1ZTZkLzEvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mOWFmYzItOTE2OS00YThjLTg4MTYtZGViN2ZmMWI1ZTZk
LzEvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLwrm5uH
OJ/stZdRNgtnpBIUd22e6ujEVjejUbc7IHOYcOB5m94cWMQ3W/P+1iJz7k5Xt1Zb
5SYN/L9z7Y9otJNQd6ria7Btqn70mZHHjUXFmNNPrdAK/Y58Jmqh+zq/RhLLgQX6
TzvgLpYaTL7s+z/co/OwgoehCV74dgTLyrcH87D1iWTovG8CREmvynrtLzNzvBx3
w52GnuxZiHPOom5gKwY8xBA2o59NnCbbhxaweLYCXPEDzgJ3d4bnJe8G+FVdW7LL
sFuQOKioDBgnJMOymjhoRVhSE0Qnr+cYPxx96665YHC317BihcL5ghEgpmLP9erE
5pg6J5wvrksn4w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:20 2026 by rpki-client