Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
File: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft (raw, json)
Hash identifier: IGn9PsO4dSm6RpA8aWmR5lvf80/yVTCLZI05ZS1oU5o=
Subject key identifier: 6C:87:0E:0E:23:1F:1C:20:41:34:60:7E:94:B8:FE:B9:B0:D9:29:50
Authority key identifier: E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
Certificate issuer: /CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Certificate serial: 01A1DE02B636A98A4D7FF40AD5F539D9A394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
Manifest number: 0481
Signing time: Sun 15 Nov 2026 07:01:21 +0000
Manifest this update: Sun 15 Nov 2026 07:01:21 +0000
Manifest next update: Mon 16 Nov 2026 07:01:21 +0000
Files and hashes: 1: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl (hash: CXlgMso8hEFdEqyAAY5AxWe8EzbF5H7vNLGXmKKi2I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:b6:36:a9:8a:4d:7f:f4:0a:d5:f5:39:d9:a3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Validity
Not Before: Nov 15 07:01:21 2026 GMT
Not After : Nov 16 07:01:21 2026 GMT
Subject: CN=6c870e0e231f1c204134607e94b8feb9b0d92950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:de:88:4e:cb:25:93:aa:4e:56:43:78:63:
cb:43:f6:8f:6b:82:bd:40:37:7c:36:c9:ca:85:d3:
75:37:02:a5:b3:d0:25:c6:01:36:41:4a:46:c7:dc:
cc:dc:d1:a7:46:84:fc:82:32:8e:57:47:06:3d:93:
bf:77:5a:91:c5:5c:21:49:95:cb:c2:17:fb:d7:b6:
ef:2f:07:0a:5d:fd:e4:03:8e:7a:e3:c5:0b:cd:79:
80:f9:b4:cc:ca:df:65:a5:8c:d5:d3:fe:1d:d9:d7:
31:8a:5a:13:75:82:2d:52:0a:2d:3e:ba:76:22:41:
de:4e:1d:fd:b7:a0:15:e5:4a:db:75:10:63:10:56:
2c:a8:f6:25:95:33:0d:3d:3f:cb:51:2e:d6:13:1f:
90:d6:87:4b:f4:9c:b9:6f:7b:fd:2a:68:e4:1e:2b:
d2:2a:f4:99:3a:da:22:f0:c4:f1:9a:ec:7c:80:65:
7b:42:57:b7:5d:8d:7b:55:ff:a6:12:34:d0:9b:09:
10:e4:51:3c:1a:45:17:5a:25:9e:36:d0:52:61:4b:
b2:1a:0e:82:86:2d:66:5a:6c:65:3d:a1:d5:6b:4b:
7c:2b:87:85:5c:0e:6a:da:c7:cc:1b:95:60:bf:b3:
2b:2f:7c:39:49:9c:56:89:36:c7:d8:c2:d7:66:dd:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:0E:0E:23:1F:1C:20:41:34:60:7E:94:B8:FE:B9:B0:D9:29:50
X509v3 Authority Key Identifier:
keyid:E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9c:10:3b:d6:44:35:94:1f:0a:45:03:e1:97:1a:21:2a:a8:
a0:48:f6:ba:3a:cb:6f:dd:a1:e1:50:39:43:94:a4:d2:d7:c1:
c1:03:fb:47:0d:04:83:d5:41:2a:64:e4:5c:c1:cf:01:95:8e:
d3:1c:fe:da:c7:df:7b:32:4f:7f:d2:7e:3b:17:d0:0f:c6:c5:
23:9f:ba:a3:2e:eb:30:08:17:42:67:b8:5f:d7:4e:27:da:ef:
45:f0:2e:db:43:5a:0f:55:4b:27:25:8e:e6:bb:5b:45:4c:82:
85:2a:80:40:da:29:06:1b:4f:eb:f4:28:f8:d2:54:33:d7:17:
88:fd:c7:6f:a2:e5:ed:54:8b:31:b3:cd:40:64:c5:9f:82:e4:
e5:f0:2c:71:bd:2f:5e:93:07:c8:66:cc:96:37:ea:ca:24:5f:
2c:d1:46:5a:4c:f8:c0:88:e5:96:7d:18:8a:5c:3b:0c:2f:c9:
c9:12:fe:a9:4a:a5:d5:3e:2f:a4:dc:ec:1e:71:1d:38:09:1a:
c0:ed:40:ce:8d:81:35:62:ee:7e:40:f3:1a:9a:43:4c:47:ef:
1c:52:8c:c9:b3:2f:b3:22:aa:24:c9:9a:cb:00:59:65:22:a8:
b8:98:c0:8b:40:b8:2d:57:b9:21:7b:a6:2d:d2:ea:bd:24:a6:
9b:07:56:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeArY2qYpNf/QK1fU52aOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MDNmNGRhNWI0MjNkODk5ZmJiNWI1NjE2NGZiMDc2OTZk
ODE1OWQwHhcNMjYxMTE1MDcwMTIxWhcNMjYxMTE2MDcwMTIxWjAzMTEwLwYDVQQD
Eyg2Yzg3MGUwZTIzMWYxYzIwNDEzNDYwN2U5NGI4ZmViOWIwZDkyOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1/eiE7LJZOqTlZDeGPLQ/aPa4K9
QDd8NsnKhdN1NwKls9AlxgE2QUpGx9zM3NGnRoT8gjKOV0cGPZO/d1qRxVwhSZXL
whf717bvLwcKXf3kA45648ULzXmA+bTMyt9lpYzV0/4d2dcxiloTdYItUgotPrp2
IkHeTh39t6AV5UrbdRBjEFYsqPYllTMNPT/LUS7WEx+Q1odL9Jy5b3v9KmjkHivS
KvSZOtoi8MTxmux8gGV7Qle3XY17Vf+mEjTQmwkQ5FE8GkUXWiWeNtBSYUuyGg6C
hi1mWmxlPaHVa0t8K4eFXA5q2sfMG5Vgv7MrL3w5SZxWiTbH2MLXZt1NuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyHDg4jHxwgQTRgfpS4/rmw2SlQMB8GA1UdIwQY
MBaAFOQD9NpbQj2Jn7tbVhZPsHaW2BWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFQMDJsdENQWW1mdTF0V0ZrLXdkcGJZRlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mZDIxMGQtZDRjMy00ODMxLWE0NDYt
YTAwOTU2YWZjNDY5LzEvNUFQMDJsdENQWW1mdTF0V0ZrLXdkcGJZRlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mZDIxMGQtZDRjMy00ODMxLWE0NDYtYTAwOTU2YWZjNDY5
LzEvNUFQMDJsdENQWW1mdTF0V0ZrLXdkcGJZRlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJwQO9ZE
NZQfCkUD4ZcaISqooEj2ujrLb92h4VA5Q5Sk0tfBwQP7Rw0Eg9VBKmTkXMHPAZWO
0xz+2sffezJPf9J+OxfQD8bFI5+6oy7rMAgXQme4X9dOJ9rvRfAu20NaD1VLJyWO
5rtbRUyChSqAQNopBhtP6/Qo+NJUM9cXiP3Hb6Ll7VSLMbPNQGTFn4Lk5fAscb0v
XpMHyGbMljfqyiRfLNFGWkz4wIjlln0Yilw7DC/JyRL+qUql1T4vpNzsHnEdOAka
wO1Azo2BNWLufkDzGppDTEfvHFKMybMvsyKqJMmaywBZZSKouJjAi0C4LVe5IXum
LdLqvSSmmwdW3Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:18 2026 by rpki-client