Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
File: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft (raw, json)
Hash identifier: JMPQWIuAinA/L0oNWIsAjNE6nTChSKg58InJwX6C2kw=
Subject key identifier: CD:78:9A:4B:C1:F6:5F:FB:87:3C:12:86:7D:0F:B0:A4:B7:D7:99:49
Authority key identifier: E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
Certificate issuer: /CN=e731bb83a213f966e142b40da4f32cd6419ae219
Certificate serial: 01A0D5DDE13EEFC9F2020F78CBD07090BDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:23 +0000
Manifest this update: Fri 25 Sep 2026 00:01:23 +0000
Manifest next update: Sat 26 Sep 2026 00:01:23 +0000
Files and hashes: 1: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl (hash: hOAWrbyLW6HnwjbLEGWxc3/VuxioMk4hubLDmw3tlHg=)
2: AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa (hash: 5mqmiz/CXkUW+cTJVY8j71HIi5cAxYNi2xnFmKTG/HY=)
3: yMvlwhzKfrY9een7T1c_eLiRjek.roa (hash: PbmjqOmGy2hPK1aLZZhguFnKLy5ZFRT3ye/VUztkdts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:e1:3e:ef:c9:f2:02:0f:78:cb:d0:70:90:bd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e731bb83a213f966e142b40da4f32cd6419ae219
Validity
Not Before: Sep 25 00:01:23 2026 GMT
Not After : Sep 26 00:01:23 2026 GMT
Subject: CN=cd789a4bc1f65ffb873c12867d0fb0a4b7d79949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:8a:dc:f7:a4:62:58:f6:75:88:9b:70:e0:
25:74:63:a1:16:e4:5e:67:c1:85:2f:7c:79:52:9f:
ea:1b:9a:93:2d:93:f9:d1:f7:02:d2:86:a0:71:f9:
85:78:db:d5:1e:1b:9b:4e:10:98:b2:7d:0e:03:2d:
0e:80:52:29:37:c0:67:d7:ff:bb:4a:9f:7d:3b:dc:
45:02:ca:06:c1:40:c4:5c:c5:44:6d:5c:be:7e:70:
05:2e:1b:6c:7a:92:de:ff:0e:92:fd:77:29:a9:d3:
81:26:fa:68:f7:19:29:5f:2e:3a:67:2a:e7:d2:2b:
6e:1b:c2:5d:d5:b5:d3:6a:6a:dd:a1:c0:98:eb:d9:
d8:9f:76:44:6a:64:20:fa:12:e0:20:49:29:84:2e:
70:61:71:a1:e9:10:36:62:6e:88:8e:11:21:05:df:
8b:9e:3f:65:65:13:90:65:f3:11:c6:1c:81:87:51:
dd:b3:07:33:b7:b8:4a:e0:71:66:df:05:43:74:c0:
40:5d:41:54:29:a2:94:f4:cc:af:4f:4a:3b:c6:3a:
13:3e:24:20:49:c4:b6:1b:cb:92:13:08:fa:a4:4e:
8c:6c:c2:31:5b:c0:79:6b:46:4f:c9:97:45:ba:1f:
08:37:1b:30:72:6f:3b:c3:fd:c9:6e:83:1c:f9:90:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:78:9A:4B:C1:F6:5F:FB:87:3C:12:86:7D:0F:B0:A4:B7:D7:99:49
X509v3 Authority Key Identifier:
keyid:E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3e:6b:f1:43:46:00:53:4f:df:b6:76:e2:08:10:c9:4e:50:
76:ca:58:8b:48:1e:1e:35:26:1f:c4:78:1e:6e:b6:9c:38:5f:
8b:1f:c0:c7:54:4b:8d:f9:60:ca:9f:77:90:a5:1d:f3:49:5a:
2c:d0:e8:3a:b1:1c:23:47:ba:5c:2f:55:51:e9:7c:b3:ff:fd:
1f:c1:cc:87:bb:ba:98:3c:76:98:77:eb:83:ad:31:a4:b1:a4:
5b:ba:b6:de:80:b1:19:69:cb:ea:b5:81:dc:ac:db:88:a4:cb:
fc:c7:1c:45:d5:f5:5d:a4:fe:90:9f:6a:42:33:d8:dd:bd:5d:
d7:5d:02:9c:0d:2f:c5:f6:a0:db:61:0c:3c:92:3d:1c:ba:78:
34:8a:9b:c2:c7:f3:e0:63:11:7e:05:3a:4c:88:fe:8b:3c:7e:
50:d9:91:ce:da:52:a2:97:8b:b5:b0:34:9b:14:ea:ae:b6:4c:
2e:1a:01:6a:4b:94:c8:e5:de:03:55:df:3d:ec:1d:b0:2e:0d:
56:3d:8b:62:d5:14:6f:9c:ba:a7:6a:95:00:de:53:47:1c:3c:
46:db:43:5a:d8:2b:f6:62:3a:4a:f2:94:ff:fb:6c:81:76:d9:
5b:c1:35:85:34:8f:4c:d4:42:22:37:7e:0a:4d:89:96:0c:3e:
df:62:4f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3eE+78nyAg94y9BwkL24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzFiYjgzYTIxM2Y5NjZlMTQyYjQwZGE0ZjMyY2Q2NDE5
YWUyMTkwHhcNMjYwOTI1MDAwMTIzWhcNMjYwOTI2MDAwMTIzWjAzMTEwLwYDVQQD
EyhjZDc4OWE0YmMxZjY1ZmZiODczYzEyODY3ZDBmYjBhNGI3ZDc5OTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NKK3PekYlj2dYibcOAldGOhFuRe
Z8GFL3x5Up/qG5qTLZP50fcC0oagcfmFeNvVHhubThCYsn0OAy0OgFIpN8Bn1/+7
Sp99O9xFAsoGwUDEXMVEbVy+fnAFLhtsepLe/w6S/XcpqdOBJvpo9xkpXy46Zyrn
0ituG8Jd1bXTamrdocCY69nYn3ZEamQg+hLgIEkphC5wYXGh6RA2Ym6IjhEhBd+L
nj9lZROQZfMRxhyBh1Hdswczt7hK4HFm3wVDdMBAXUFUKaKU9MyvT0o7xjoTPiQg
ScS2G8uSEwj6pE6MbMIxW8B5a0ZPyZdFuh8INxswcm87w/3JboMc+ZAxuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM14mkvB9l/7hzwShn0PsKS315lJMB8GA1UdIwQY
MBaAFOcxu4OiE/lm4UK0DaTzLNZBmuIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpHN2c2SVQtV2JoUXJRTnBQTXMxa0dhNGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvNXpHN2c2SVQtV2JoUXJRTnBQTXMxa0dhNGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvNXpHN2c2SVQtV2JoUXJRTnBQTXMxa0dhNGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT5r8UNG
AFNP37Z24ggQyU5QdspYi0geHjUmH8R4Hm62nDhfix/Ax1RLjflgyp93kKUd80la
LNDoOrEcI0e6XC9VUel8s//9H8HMh7u6mDx2mHfrg60xpLGkW7q23oCxGWnL6rWB
3KzbiKTL/MccRdX1XaT+kJ9qQjPY3b1d110CnA0vxfag22EMPJI9HLp4NIqbwsfz
4GMRfgU6TIj+izx+UNmRztpSopeLtbA0mxTqrrZMLhoBakuUyOXeA1XfPewdsC4N
Vj2LYtUUb5y6p2qVAN5TRxw8RttDWtgr9mI6SvKU//tsgXbZW8E1hTSPTNRCIjd+
Ck2Jlgw+32JP0g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:09 2026 by rpki-client