Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: R5Awf+Z5d80pEL18G0Zua94Qx4mk6eB33p5LxIY4OV0=
Subject key identifier: 7B:88:BB:69:C5:7A:3B:30:38:07:95:30:DE:6F:31:41:BA:D4:EC:41
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 019F943720C10F755E9F2F60D9E78B38A041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 05B3
Signing time: Fri 24 Jul 2026 13:01:08 +0000
Manifest this update: Fri 24 Jul 2026 13:01:08 +0000
Manifest next update: Sat 25 Jul 2026 13:01:08 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: zN36g9LwPnnScfJ0fudVdEeVX7OC0lQBA/c8vgaPR28=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:20:c1:0f:75:5e:9f:2f:60:d9:e7:8b:38:a0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Jul 24 13:01:08 2026 GMT
Not After : Jul 25 13:01:08 2026 GMT
Subject: CN=7b88bb69c57a3b3038079530de6f3141bad4ec41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:13:1d:bd:07:e9:42:d3:08:e2:3e:ca:9a:
c9:58:2c:40:94:48:df:a1:a4:8c:a6:fe:cf:d4:19:
b8:58:06:89:87:85:94:d4:2b:8b:62:52:1e:8f:02:
90:c4:49:f3:65:d6:7d:2b:32:7f:1d:80:94:4a:a6:
d9:5f:58:60:1a:29:40:30:5a:c9:37:dd:8d:21:60:
22:c7:6d:4a:23:cf:14:3b:83:73:01:25:25:39:44:
32:b7:76:d2:58:97:0f:bc:ea:3c:3e:26:66:be:75:
6d:f4:8d:22:cb:da:ce:cc:d3:2e:79:72:a1:b5:c2:
bd:ad:75:8c:7f:70:1d:a9:c6:c6:c3:ef:3a:11:40:
82:e2:fd:2f:6f:b0:f1:fb:d3:14:86:12:30:01:4e:
9a:a9:7f:cf:81:d3:56:97:d4:04:b5:c0:c9:d0:7a:
ca:e8:45:6e:7f:97:7f:7e:55:1a:5a:b3:16:d7:cc:
f2:79:f8:c0:ae:a6:fa:ba:fd:77:0e:dd:ff:87:50:
9c:2b:6a:29:15:8f:dd:69:e1:79:80:e3:c7:d5:0d:
43:b8:07:59:23:c7:c0:8a:9e:7b:d5:a1:c1:4c:8e:
6b:a6:f4:88:57:60:c9:cf:ec:be:cd:64:c2:cc:50:
ae:9f:a7:61:c8:13:7d:6d:1a:e3:1b:12:d7:63:f8:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:BB:69:C5:7A:3B:30:38:07:95:30:DE:6F:31:41:BA:D4:EC:41
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e1:33:ea:52:6f:7c:ba:41:ed:53:a8:56:8c:f2:87:a4:98:
05:0f:be:d5:7e:1b:55:83:43:12:23:6d:da:c2:3b:37:42:59:
47:6f:46:70:f9:b8:f3:c4:35:ba:11:24:06:a0:2a:5a:c0:00:
6a:07:e2:a6:f1:71:24:01:06:c7:b0:34:08:b4:b2:35:9e:a9:
b8:7f:5f:14:de:57:57:32:f3:50:90:98:0d:49:5f:27:bf:42:
ec:37:67:c9:8a:04:aa:95:c5:20:85:10:ee:12:5b:25:99:69:
62:8a:e8:10:e4:57:d2:47:c5:ef:ac:5e:c4:ff:bf:91:cb:38:
cd:43:85:a3:42:ce:bb:9f:22:f1:03:67:5a:a8:4e:f9:53:1c:
1e:62:3e:a6:e1:fa:d9:e2:c1:a8:c5:91:12:22:64:7d:72:d7:
97:15:9e:6b:5b:27:5f:ad:2b:dc:2a:eb:b0:ca:51:56:78:89:
2e:1e:33:82:0a:97:e3:20:ae:b3:14:87:7f:ae:0e:e1:45:4b:
02:64:ab:e6:70:1b:af:ec:c2:70:d7:e2:97:7c:70:c6:c3:d6:
71:4c:76:c8:fc:a7:7a:48:b3:96:25:31:55:26:e8:22:7e:6b:
2b:b8:de:c5:67:9c:7c:22:09:1d:29:2d:8e:af:a7:6b:12:b9:
18:8d:32:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNyDBD3Veny9g2eeLOKBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx
YTcwM2MwHhcNMjYwNzI0MTMwMTA4WhcNMjYwNzI1MTMwMTA4WjAzMTEwLwYDVQQD
Eyg3Yjg4YmI2OWM1N2EzYjMwMzgwNzk1MzBkZTZmMzE0MWJhZDRlYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/YTHb0H6ULTCOI+yprJWCxAlEjf
oaSMpv7P1Bm4WAaJh4WU1CuLYlIejwKQxEnzZdZ9KzJ/HYCUSqbZX1hgGilAMFrJ
N92NIWAix21KI88UO4NzASUlOUQyt3bSWJcPvOo8PiZmvnVt9I0iy9rOzNMueXKh
tcK9rXWMf3AdqcbGw+86EUCC4v0vb7Dx+9MUhhIwAU6aqX/PgdNWl9QEtcDJ0HrK
6EVuf5d/flUaWrMW18zyefjArqb6uv13Dt3/h1CcK2opFY/daeF5gOPH1Q1DuAdZ
I8fAip571aHBTI5rpvSIV2DJz+y+zWTCzFCun6dhyBN9bRrjGxLXY/gBJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuIu2nFejswOAeVMN5vMUG61OxBMB8GA1UdIwQY
MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt
MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm
LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOEz6lJv
fLpB7VOoVozyh6SYBQ++1X4bVYNDEiNt2sI7N0JZR29GcPm488Q1uhEkBqAqWsAA
agfipvFxJAEGx7A0CLSyNZ6puH9fFN5XVzLzUJCYDUlfJ79C7DdnyYoEqpXFIIUQ
7hJbJZlpYoroEORX0kfF76xexP+/kcs4zUOFo0LOu58i8QNnWqhO+VMcHmI+puH6
2eLBqMWREiJkfXLXlxWea1snX60r3CrrsMpRVniJLh4zggqX4yCusxSHf64O4UVL
AmSr5nAbr+zCcNfil3xwxsPWcUx2yPynekizliUxVSboIn5rK7jexWecfCIJHSkt
jq+naxK5GI0yfQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:01 2026 by rpki-client