Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier: pD5mT90pV1eiDF0V9SNm+zXwi13gMYqBtcXA3bM1CXE=
Subject key identifier: 8E:64:A9:CB:75:40:9B:6D:1A:C2:23:02:AB:D6:98:6B:87:FE:C9:0E
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial: 01A0D5DE524DF1F135B0280B9D7EEB7A1BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number: 0D24
Signing time: Fri 25 Sep 2026 00:01:52 +0000
Manifest this update: Fri 25 Sep 2026 00:01:52 +0000
Manifest next update: Sat 26 Sep 2026 00:01:52 +0000
Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: nBjfE6fiQ+ecm4RRh7yR+62KRYXkSinYBP5RXA8nvwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:52:4d:f1:f1:35:b0:28:0b:9d:7e:eb:7a:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Validity
Not Before: Sep 25 00:01:52 2026 GMT
Not After : Sep 26 00:01:52 2026 GMT
Subject: CN=8e64a9cb75409b6d1ac22302abd6986b87fec90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:6a:33:c8:1a:65:38:6e:18:b1:9a:1d:ed:
7c:af:0c:fb:a9:8d:32:99:11:76:76:bf:83:f3:05:
f7:ee:39:13:58:37:b2:9a:d8:10:fd:cf:11:7f:3f:
04:1f:0a:68:23:88:7f:3d:5b:d0:75:0a:b3:5c:11:
14:bd:9f:ea:aa:3b:2b:53:7d:8b:9f:e4:b6:59:e9:
2a:67:e1:59:95:75:8b:41:67:8d:d8:93:e1:08:40:
e3:85:64:9e:b8:74:cb:18:cd:30:96:fc:f2:b4:1e:
62:50:d6:69:09:43:ac:a8:b5:9b:f6:29:03:60:9f:
90:07:d8:20:0a:f4:5b:4b:f5:35:68:f4:87:d5:52:
9a:3c:ab:2d:2d:91:a7:1c:a2:f3:a3:0e:ba:6f:3b:
d0:50:64:dd:63:fa:07:26:42:ea:fa:c2:93:60:5f:
07:ca:99:15:08:ba:4d:82:c7:0a:af:bf:50:9c:9f:
74:b3:f4:b3:7c:80:0b:57:a7:62:d9:85:10:00:a6:
e9:e5:bb:38:7b:4a:94:88:e7:1f:03:96:0b:30:46:
da:c3:65:05:35:44:e0:c7:b4:3f:30:ce:f5:dd:62:
55:7e:62:02:0c:43:ee:08:5f:6c:8d:5c:f1:ca:99:
b7:f5:3e:ca:90:ec:2c:54:5a:4c:b8:7d:e0:6e:80:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:64:A9:CB:75:40:9B:6D:1A:C2:23:02:AB:D6:98:6B:87:FE:C9:0E
X509v3 Authority Key Identifier:
keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:c0:26:6c:ad:32:a2:8c:f1:2e:1a:f8:24:37:df:80:5a:
8a:f1:2a:f6:40:26:b1:89:bd:13:6f:9c:b1:3f:5d:b4:1a:bb:
b3:2c:64:a2:08:b5:2b:97:81:72:5c:27:52:8e:d8:71:bc:f6:
03:82:c3:bf:3b:4e:3f:c5:45:c2:d6:d6:ae:71:aa:02:6e:b1:
10:34:e2:b9:a2:36:de:3e:5d:84:8c:ec:54:22:4a:97:d6:a1:
05:af:39:34:89:b1:02:80:36:5f:0e:0f:5c:b1:05:d2:ca:c2:
3a:fb:d2:78:c6:d8:00:e6:94:5c:db:a9:73:e2:64:13:4f:d5:
0c:56:e1:06:ab:ac:0f:24:b3:58:f1:f3:7c:e4:d1:e1:ab:cf:
64:68:b5:62:34:9e:84:f0:21:7c:4d:76:db:0c:eb:39:5e:05:
b2:69:09:81:31:92:51:d9:23:3c:c1:fe:fb:0a:07:da:9c:ea:
7a:03:e0:d9:60:fa:a1:53:f8:16:d8:a6:39:de:9a:d6:0a:16:
fb:8d:e9:c9:3c:dc:b7:48:a7:94:3b:fe:ea:d8:62:2c:81:55:
4f:68:87:8c:4a:31:05:62:0c:7e:01:ca:9a:f6:c2:88:0b:87:
a5:ce:6f:05:b5:7c:86:a3:27:1d:5b:1c:e5:c4:91:71:5e:6d:
d3:c5:d5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3lJN8fE1sCgLnX7rehv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZWQ3MmI0NmJlODZjNjU0ZDU4YzkzMDUxNGE1ZjQzYjRh
NDRlZTIwHhcNMjYwOTI1MDAwMTUyWhcNMjYwOTI2MDAwMTUyWjAzMTEwLwYDVQQD
Eyg4ZTY0YTljYjc1NDA5YjZkMWFjMjIzMDJhYmQ2OTg2Yjg3ZmVjOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YJqM8gaZThuGLGaHe18rwz7qY0y
mRF2dr+D8wX37jkTWDeymtgQ/c8Rfz8EHwpoI4h/PVvQdQqzXBEUvZ/qqjsrU32L
n+S2WekqZ+FZlXWLQWeN2JPhCEDjhWSeuHTLGM0wlvzytB5iUNZpCUOsqLWb9ikD
YJ+QB9ggCvRbS/U1aPSH1VKaPKstLZGnHKLzow66bzvQUGTdY/oHJkLq+sKTYF8H
ypkVCLpNgscKr79QnJ90s/SzfIALV6di2YUQAKbp5bs4e0qUiOcfA5YLMEbaw2UF
NUTgx7Q/MM713WJVfmICDEPuCF9sjVzxypm39T7KkOwsVFpMuH3gboDyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5kqct1QJttGsIjAqvWmGuH/skOMB8GA1UdIwQY
MBaAFObtcrRr6GxlTVjJMFFKX0O0pE7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOGM2NTctMmQ1ZS00NmM5LWJlYmMt
ZDg0MzJhMjc1M2ViLzEvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOGM2NTctMmQ1ZS00NmM5LWJlYmMtZDg0MzJhMjc1M2Vi
LzEvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPrAJmyt
MqKM8S4a+CQ334BaivEq9kAmsYm9E2+csT9dtBq7syxkogi1K5eBclwnUo7Ycbz2
A4LDvztOP8VFwtbWrnGqAm6xEDTiuaI23j5dhIzsVCJKl9ahBa85NImxAoA2Xw4P
XLEF0srCOvvSeMbYAOaUXNupc+JkE0/VDFbhBqusDySzWPHzfOTR4avPZGi1YjSe
hPAhfE122wzrOV4FsmkJgTGSUdkjPMH++woH2pzqegPg2WD6oVP4FtimOd6a1goW
+43pyTzct0inlDv+6thiLIFVT2iHjEoxBWIMfgHKmvbCiAuHpc5vBbV8hqMnHVsc
5cSRcV5t08XVMQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:03:17 2026 by rpki-client