Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: luDGPYCCK2SERCV8XdYJjbU4lPAhU43Y/AGCHEZkcE8=
Subject key identifier: 09:EF:BC:A2:3A:D9:70:E1:C1:58:A2:1B:6C:AD:44:E6:25:B2:1C:A0
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 01A0CE5A91DCAF91B9000FD67AE1A73B378C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 19FC
Signing time: Wed 23 Sep 2026 13:00:37 +0000
Manifest this update: Wed 23 Sep 2026 13:00:37 +0000
Manifest next update: Thu 24 Sep 2026 13:00:37 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: PfcznU4qzzXStW35/h7h+IgxdixHyRgItGEKNb1JSHA=)
2: sZxrSzhn7wD6WFSw7UC6NwZuEFk.roa (hash: kEkaa7N2aenPpjJ1vqccMcmAKJMsk4dI56LBorB67HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:91:dc:af:91:b9:00:0f:d6:7a:e1:a7:3b:37:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Sep 23 13:00:37 2026 GMT
Not After : Sep 24 13:00:37 2026 GMT
Subject: CN=09efbca23ad970e1c158a21b6cad44e625b21ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:b8:86:79:e6:23:3a:e9:ab:37:cf:f9:32:
bd:ad:ad:27:02:07:bf:57:79:a5:5f:d8:ae:d1:65:
4f:3b:e7:ca:a2:ef:36:44:14:aa:2f:ce:50:64:95:
d3:9e:bc:8e:5d:e5:51:2d:08:a8:ba:69:04:89:91:
7e:3d:55:97:2f:91:17:a2:18:4c:1b:20:c9:7c:6a:
2d:0f:fd:67:61:d7:49:2b:fe:93:6a:ac:03:25:13:
94:dd:19:32:06:a7:1e:cf:ec:12:89:4e:bf:0d:ed:
81:7b:2d:b8:54:fc:32:31:a3:16:f7:f9:60:6d:ff:
cf:84:65:cf:68:8a:b6:d4:b4:cb:ff:9d:62:1c:8b:
fd:d0:67:03:89:85:cd:7b:db:51:fc:f7:89:be:c4:
aa:68:63:60:f9:af:42:7d:01:13:36:0e:e6:8a:69:
a8:ce:46:40:13:38:14:c8:d8:ef:f8:73:43:6e:d5:
83:e1:06:cd:c9:79:eb:e3:eb:9b:8f:f8:c5:98:58:
99:79:d3:e4:17:55:64:b4:f8:5f:89:d3:b1:d2:52:
7f:18:b5:30:33:c9:77:f2:4c:1c:c2:ba:01:55:3c:
c8:6d:7b:e0:e7:95:29:ca:6a:29:b1:20:43:77:9b:
f9:aa:f1:e8:4e:fa:7f:0d:a1:71:df:df:5a:1c:15:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:BC:A2:3A:D9:70:E1:C1:58:A2:1B:6C:AD:44:E6:25:B2:1C:A0
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:79:69:6f:98:0e:d3:85:cb:f0:cd:3b:59:c3:71:89:5a:
2b:04:0b:3e:1c:e1:42:af:0c:48:ba:11:98:57:76:9e:90:e4:
85:9b:52:80:08:4a:f5:d5:db:6c:58:41:57:f5:af:20:a2:ba:
5d:68:42:5e:78:17:ad:5c:5c:5a:58:db:9d:ab:d6:69:f5:ea:
29:c0:18:52:63:2e:36:49:27:e6:f9:12:83:a6:7f:d1:64:71:
09:88:ff:be:16:d7:d7:17:51:fc:f9:3f:c7:ea:1e:47:0e:a4:
e6:a2:e8:58:bd:3a:ac:80:48:fe:ee:02:4b:3c:e8:4b:34:2d:
52:ff:f2:f0:f9:3e:a5:ca:7c:5b:8f:00:e3:59:9e:5b:1d:0f:
8d:08:ec:ed:79:da:c2:53:07:af:45:6d:a5:24:03:7b:4c:04:
62:f8:88:96:77:45:f1:8a:be:7e:6d:a9:53:c1:32:37:cb:be:
c8:fc:ff:b9:36:a4:62:a8:a9:17:93:02:ba:aa:9b:26:ba:9e:
94:5c:0e:4d:f7:f6:4e:79:3d:22:66:77:58:8a:35:91:f9:4e:
fd:df:f1:c3:29:cf:f0:fa:00:31:9f:e2:05:40:7c:c0:6d:cb:
59:23:14:73:56:e4:7f:ec:b2:3a:26:da:c5:31:8e:02:f5:af:
b4:cb:c2:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWpHcr5G5AA/WeuGnOzeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODA2OTc0ODc0OGU5YWViZDdiZTQwNTg3ZDgxNDBlZmRl
NTViNmIwHhcNMjYwOTIzMTMwMDM3WhcNMjYwOTI0MTMwMDM3WjAzMTEwLwYDVQQD
EygwOWVmYmNhMjNhZDk3MGUxYzE1OGEyMWI2Y2FkNDRlNjI1YjIxY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt24hnnmIzrpqzfP+TK9ra0nAge/
V3mlX9iu0WVPO+fKou82RBSqL85QZJXTnryOXeVRLQioumkEiZF+PVWXL5EXohhM
GyDJfGotD/1nYddJK/6TaqwDJROU3RkyBqcez+wSiU6/De2Bey24VPwyMaMW9/lg
bf/PhGXPaIq21LTL/51iHIv90GcDiYXNe9tR/PeJvsSqaGNg+a9CfQETNg7mimmo
zkZAEzgUyNjv+HNDbtWD4QbNyXnr4+ubj/jFmFiZedPkF1VktPhfidOx0lJ/GLUw
M8l38kwcwroBVTzIbXvg55UpymopsSBDd5v5qvHoTvp/DaFx399aHBVwzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnvvKI62XDhwViiG2ytROYlshygMB8GA1UdIwQY
MBaAFOWAaXSHSOmuvXvkBYfYFA795VtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYt
MGY4OTZlYmNhNGY4LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYtMGY4OTZlYmNhNGY4
LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZd5aW+Y
DtOFy/DNO1nDcYlaKwQLPhzhQq8MSLoRmFd2npDkhZtSgAhK9dXbbFhBV/WvIKK6
XWhCXngXrVxcWljbnavWafXqKcAYUmMuNkkn5vkSg6Z/0WRxCYj/vhbX1xdR/Pk/
x+oeRw6k5qLoWL06rIBI/u4CSzzoSzQtUv/y8Pk+pcp8W48A41meWx0PjQjs7Xna
wlMHr0VtpSQDe0wEYviIlndF8Yq+fm2pU8EyN8u+yPz/uTakYqipF5MCuqqbJrqe
lFwOTff2Tnk9ImZ3WIo1kflO/d/xwynP8PoAMZ/iBUB8wG3LWSMUc1bkf+yyOiba
xTGOAvWvtMvCgg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:31:07 2026 by rpki-client