Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: XSyMT5u2S9CPxtwqorMH8a9aT0poBe2gpsdDOf/nA28=
Subject key identifier: 2B:10:4F:C5:2D:B3:4D:88:C3:D4:5E:AC:14:DE:6D:D5:C4:33:18:BE
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019FA90732E789ABCC95AC5930A2C6314106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 063C
Signing time: Tue 28 Jul 2026 14:00:48 +0000
Manifest this update: Tue 28 Jul 2026 14:00:48 +0000
Manifest next update: Wed 29 Jul 2026 14:00:48 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: if8sd/6b0CJ7NLPCGXlXiylFB9I9uyfpq1ccICBAnmA=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:32:e7:89:ab:cc:95:ac:59:30:a2:c6:31:41:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Jul 28 14:00:48 2026 GMT
Not After : Jul 29 14:00:48 2026 GMT
Subject: CN=2b104fc52db34d88c3d45eac14de6dd5c43318be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:2f:87:6f:79:e6:cf:0a:be:7c:65:43:85:
35:2c:6f:28:ea:e9:c7:fd:45:c8:e5:5d:f7:1b:9d:
5c:a9:33:ef:1a:fe:de:81:30:4b:8a:21:60:68:2e:
7f:0d:fa:e2:56:71:87:40:7c:71:49:e8:fe:81:0c:
a4:31:4d:37:a1:57:82:c4:27:03:0c:18:88:1f:f7:
f1:9e:f5:48:31:4f:cb:f4:48:bd:67:d0:99:34:7d:
61:87:81:a6:08:f9:24:23:b8:61:0f:0d:4d:32:11:
e0:24:e1:07:de:f2:00:5d:af:89:1a:36:a1:2d:90:
a4:61:f2:97:0c:a8:3e:aa:18:ab:b8:26:49:c7:97:
7c:2c:56:ab:c2:cb:ea:41:49:83:bf:ec:a3:1d:f7:
60:01:09:ef:9c:d3:ad:96:ee:cf:72:00:d9:eb:e5:
de:f9:a5:49:9b:54:e2:e7:f2:3d:2e:5e:24:e5:0f:
80:4a:cc:92:af:9c:e5:fc:1d:10:d6:46:06:92:58:
fe:8f:e6:e5:49:b2:3f:b1:a1:8f:74:7f:87:8e:fe:
c8:2b:48:f0:c7:99:c3:b5:32:15:29:91:19:74:4a:
03:76:a8:ec:46:71:ad:16:96:64:bd:7c:1a:29:58:
cb:3d:9d:05:77:f7:77:26:49:09:e9:c4:7f:e5:7c:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:4F:C5:2D:B3:4D:88:C3:D4:5E:AC:14:DE:6D:D5:C4:33:18:BE
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ee:ce:f4:c0:52:40:0c:24:b6:36:c3:ea:0e:c9:bb:6c:c8:
39:99:34:a7:69:a4:1f:4d:ec:8b:0f:20:bf:01:4d:28:ca:31:
df:8c:82:73:7a:fc:60:7a:5d:2c:85:38:a8:36:6e:a5:50:79:
4f:c9:c0:3b:57:4a:c1:45:5f:cc:ad:5e:f5:88:a4:06:65:55:
58:12:da:c1:80:9e:ae:cc:1b:26:fe:16:06:93:fb:b0:c2:31:
23:65:cc:a3:e5:ca:4c:5a:c4:96:1d:97:a8:14:f5:12:26:87:
de:21:3c:a6:df:ac:86:78:8e:67:4f:a7:0f:37:4b:80:e9:50:
42:0f:31:d8:4e:50:88:ea:08:2e:80:aa:f9:3c:e2:d0:6f:77:
75:d7:d4:84:a9:18:c4:8c:ec:3f:08:62:e7:e4:a7:67:19:e1:
4a:36:8b:3c:59:05:7c:83:f0:97:78:a7:ea:bb:95:0b:27:25:
45:56:70:e3:94:4e:89:57:28:53:12:60:d7:71:e5:f3:10:e4:
a0:35:a1:ae:b7:3f:c3:7f:87:aa:87:6c:f5:11:bc:82:29:94:
1e:a0:2c:23:04:23:87:c1:9b:de:d9:9a:8e:d5:7d:7a:d9:2d:
b3:c2:20:8a:e6:fe:b7:93:8c:24:86:cc:30:d7:d9:58:82:5b:
61:81:9d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBzLniavMlaxZMKLGMUEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2
MTdjNmEwHhcNMjYwNzI4MTQwMDQ4WhcNMjYwNzI5MTQwMDQ4WjAzMTEwLwYDVQQD
EygyYjEwNGZjNTJkYjM0ZDg4YzNkNDVlYWMxNGRlNmRkNWM0MzMxOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrwvh2955s8KvnxlQ4U1LG8o6unH
/UXI5V33G51cqTPvGv7egTBLiiFgaC5/DfriVnGHQHxxSej+gQykMU03oVeCxCcD
DBiIH/fxnvVIMU/L9Ei9Z9CZNH1hh4GmCPkkI7hhDw1NMhHgJOEH3vIAXa+JGjah
LZCkYfKXDKg+qhiruCZJx5d8LFarwsvqQUmDv+yjHfdgAQnvnNOtlu7PcgDZ6+Xe
+aVJm1Ti5/I9Ll4k5Q+ASsySr5zl/B0Q1kYGklj+j+blSbI/saGPdH+Hjv7IK0jw
x5nDtTIVKZEZdEoDdqjsRnGtFpZkvXwaKVjLPZ0Fd/d3JkkJ6cR/5XzjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsQT8Uts02Iw9RerBTebdXEMxi+MB8GA1UdIwQY
MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt
ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5
LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+7O9MBS
QAwktjbD6g7Ju2zIOZk0p2mkH03siw8gvwFNKMox34yCc3r8YHpdLIU4qDZupVB5
T8nAO1dKwUVfzK1e9YikBmVVWBLawYCerswbJv4WBpP7sMIxI2XMo+XKTFrElh2X
qBT1EiaH3iE8pt+shniOZ0+nDzdLgOlQQg8x2E5QiOoILoCq+Tzi0G93ddfUhKkY
xIzsPwhi5+SnZxnhSjaLPFkFfIPwl3in6ruVCyclRVZw45ROiVcoUxJg13Hl8xDk
oDWhrrc/w3+Hqods9RG8gimUHqAsIwQjh8Gb3tmajtV9etkts8Igiub+t5OMJIbM
MNfZWIJbYYGdsw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:59 2026 by rpki-client