Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: OlgLKHawEU9uEAm7loKML9SHoYRntVwR7N+oijlArHk=
Subject key identifier: F8:DF:A1:52:2E:BB:EE:DB:92:04:AE:EE:D4:18:10:D9:ED:40:D2:63
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 01A0E7AEDEEBC61781789CCD23216175DF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0BAF
Signing time: Mon 28 Sep 2026 11:03:12 +0000
Manifest this update: Mon 28 Sep 2026 11:03:12 +0000
Manifest next update: Tue 29 Sep 2026 11:03:12 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: UlIiR63A9hue2YZJE3ui4Y3u6/JTCmgzAjrJUinNWto=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:de:eb:c6:17:81:78:9c:cd:23:21:61:75:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Sep 28 11:03:12 2026 GMT
Not After : Sep 29 11:03:12 2026 GMT
Subject: CN=f8dfa1522ebbeedb9204aeeed41810d9ed40d263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:46:63:67:84:90:da:41:11:cf:38:dc:96:
e0:75:d2:05:98:95:58:5a:e6:81:da:31:db:32:1e:
90:e7:ab:dc:e9:0c:71:a3:57:15:6f:0e:15:84:45:
7b:99:6f:42:ab:9a:2e:ce:79:b1:59:bd:da:da:d8:
8d:7c:cd:d2:80:2d:3b:ba:ff:c0:01:ef:60:a4:83:
70:b8:87:61:ed:db:5a:4e:6c:35:73:4d:f6:86:03:
09:3f:2f:17:ab:b7:e4:8f:aa:33:88:9d:ab:10:18:
f9:f3:ec:27:c9:c1:96:48:6d:ac:6c:8c:8f:f1:cf:
de:de:54:79:ec:23:21:b6:99:a7:17:7a:cd:18:11:
78:44:41:fb:65:bc:c4:92:28:0f:1e:86:be:ea:b0:
52:14:ad:8a:26:80:61:cc:8e:9f:ed:50:16:bf:1c:
63:a0:ae:23:d2:6f:69:01:5e:38:c0:74:fd:7a:9a:
b8:44:1d:e3:f6:83:1f:1c:41:f0:2a:f4:dd:6b:94:
9d:90:db:b0:b8:0d:5d:7d:5f:01:83:24:cb:ef:c6:
10:9b:0c:b8:95:4e:5d:48:24:6e:df:15:be:6a:02:
40:36:c7:d6:a3:08:e3:9c:68:2f:24:84:f4:e6:18:
0f:e5:d5:01:63:c7:d3:8a:43:92:30:22:43:d8:fc:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:A1:52:2E:BB:EE:DB:92:04:AE:EE:D4:18:10:D9:ED:40:D2:63
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:bc:85:eb:53:5f:d7:3f:4c:8c:d0:fb:6c:cc:d8:ce:ad:
cf:e1:65:22:fb:30:73:68:f3:8d:bc:6f:4a:eb:df:07:cd:bc:
84:c0:6e:af:de:cc:9c:3b:2b:8f:8d:d7:be:62:df:6d:5e:4f:
d6:3a:c8:a3:c7:f3:e2:d1:94:d8:28:65:10:ce:1f:fa:9d:fc:
2a:0f:bf:be:16:4f:07:46:b6:8d:01:3e:f7:3f:cf:c0:76:50:
6a:98:ce:8d:7c:0b:5e:cc:91:47:51:cb:20:a7:d1:6a:ac:e4:
48:eb:e2:15:50:c4:98:13:df:ed:93:a4:79:cc:7f:85:eb:5f:
54:1c:31:db:f8:34:84:f0:e5:a2:d8:a7:18:0d:8c:66:1e:42:
5c:a6:d8:a0:bc:c2:a1:3b:11:52:a9:19:85:73:93:ff:29:f1:
59:7d:5b:06:70:45:1e:19:b6:b1:f2:7a:42:28:e7:17:2f:bb:
73:9e:fd:2a:aa:9f:53:61:81:a1:70:cb:5a:01:cc:9f:ad:b8:
e8:15:f3:43:18:01:87:2b:20:81:ee:c5:6a:cb:45:e5:3d:f6:
6a:8b:4c:0a:a3:f3:2d:5c:82:c4:11:63:de:73:ef:a0:bd:bf:
24:37:c5:52:84:50:ba:db:c1:5c:fe:2a:cf:17:9f:b8:f7:99:
10:95:82:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnrt7rxheBeJzNIyFhdd8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzAwNzYxNGY2NzcwMGIyY2E3NmQ2MGI0OTQyYjdhOGU0
YjVjZTQwHhcNMjYwOTI4MTEwMzEyWhcNMjYwOTI5MTEwMzEyWjAzMTEwLwYDVQQD
EyhmOGRmYTE1MjJlYmJlZWRiOTIwNGFlZWVkNDE4MTBkOWVkNDBkMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV5GY2eEkNpBEc843JbgddIFmJVY
WuaB2jHbMh6Q56vc6Qxxo1cVbw4VhEV7mW9Cq5ouznmxWb3a2tiNfM3SgC07uv/A
Ae9gpINwuIdh7dtaTmw1c032hgMJPy8Xq7fkj6oziJ2rEBj58+wnycGWSG2sbIyP
8c/e3lR57CMhtpmnF3rNGBF4REH7ZbzEkigPHoa+6rBSFK2KJoBhzI6f7VAWvxxj
oK4j0m9pAV44wHT9epq4RB3j9oMfHEHwKvTda5SdkNuwuA1dfV8BgyTL78YQmwy4
lU5dSCRu3xW+agJANsfWowjjnGgvJIT05hgP5dUBY8fTikOSMCJD2PzueQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjfoVIuu+7bkgSu7tQYENntQNJjMB8GA1UdIwQY
MBaAFOYwB2FPZ3ALLKdtYLSUK3qOS1zkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQt
YjIxMTEwZDhmZmExLzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQtYjIxMTEwZDhmZmEx
LzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXy8hetT
X9c/TIzQ+2zM2M6tz+FlIvswc2jzjbxvSuvfB828hMBur97MnDsrj43XvmLfbV5P
1jrIo8fz4tGU2ChlEM4f+p38Kg+/vhZPB0a2jQE+9z/PwHZQapjOjXwLXsyRR1HL
IKfRaqzkSOviFVDEmBPf7ZOkecx/hetfVBwx2/g0hPDlotinGA2MZh5CXKbYoLzC
oTsRUqkZhXOT/ynxWX1bBnBFHhm2sfJ6QijnFy+7c579KqqfU2GBoXDLWgHMn624
6BXzQxgBhysgge7FastF5T32aotMCqPzLVyCxBFj3nPvoL2/JDfFUoRQutvBXP4q
zxefuPeZEJWC4A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:29:24 2026 by rpki-client