Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: sw8pHFEPlsHhs5sqwhAG9jMPeSeInKB/BxgQ3kHt4+A=
Subject key identifier: 9F:32:D8:E0:F7:13:8E:8F:E7:F6:8A:46:35:17:69:CD:DF:A7:D9:70
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 01A0C10D6BA747E04F7C0220BC397CB00D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 06CD
Signing time: Sun 20 Sep 2026 23:01:17 +0000
Manifest this update: Sun 20 Sep 2026 23:01:17 +0000
Manifest next update: Mon 21 Sep 2026 23:01:17 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: eeYKoFEQi1tzmjpF8W4WBnBuJf6ZwOLLkV/ACQCbtCM=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:6b:a7:47:e0:4f:7c:02:20:bc:39:7c:b0:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Sep 20 23:01:17 2026 GMT
Not After : Sep 21 23:01:17 2026 GMT
Subject: CN=9f32d8e0f7138e8fe7f68a46351769cddfa7d970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:c5:19:ac:d8:b2:2f:bf:ce:90:3e:52:8c:
75:5e:e4:cc:47:05:04:57:a1:5b:ad:d5:63:cd:6a:
c9:7d:d0:04:59:f9:0e:be:36:e8:02:98:6e:be:b6:
be:8a:2b:f0:48:0b:eb:be:17:b6:25:33:21:88:ab:
7b:5a:07:94:43:14:82:9e:07:42:ea:ec:78:57:40:
3d:d9:5a:cc:e9:7f:c4:aa:20:9e:2e:c7:54:65:7e:
e9:ae:33:43:f3:42:f4:b3:ab:e6:0c:be:c9:bb:fc:
06:40:24:2f:e3:cd:1e:f2:06:14:7c:20:e5:39:a8:
62:1b:9f:e5:e1:0c:99:37:9e:34:e5:ee:fd:af:85:
19:49:59:11:22:45:3e:37:1e:48:a4:8e:44:9c:af:
30:56:54:32:d5:37:be:b0:d8:99:b7:38:c5:18:d8:
d7:4d:87:59:8f:e0:1e:b4:da:2b:63:71:a4:c7:fa:
09:56:83:bc:ec:ee:58:60:4d:40:ce:d3:47:82:4b:
5c:5d:23:68:43:38:8e:91:80:ba:92:e5:26:44:0f:
83:9a:e1:8b:14:f7:f4:4f:fe:1a:3a:6b:31:40:b5:
1d:73:3a:b1:24:27:73:48:e0:be:8b:bc:08:45:10:
66:ca:a8:b2:6c:b8:7c:a7:91:f9:5c:3d:2b:28:5a:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:32:D8:E0:F7:13:8E:8F:E7:F6:8A:46:35:17:69:CD:DF:A7:D9:70
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8b:fd:9e:d4:2d:d9:ec:1c:c4:4a:4a:01:6b:43:76:a4:0b:
bf:74:ca:61:f0:e0:ff:9f:89:03:e5:d9:86:bd:3c:d2:af:e6:
22:d0:46:03:19:b2:c0:fa:32:98:8f:de:98:56:7c:b1:5e:57:
97:56:a4:af:c4:be:ef:ed:44:4a:d6:70:df:c5:5d:7f:0e:18:
e3:88:ae:fb:d9:35:07:f4:04:d4:12:8f:71:ab:44:b1:fb:51:
66:6c:f5:ca:d3:12:02:d2:a6:03:f4:b2:c4:08:a4:25:87:7e:
87:50:03:b3:d3:ae:5b:19:e4:fa:cb:d8:8e:5a:7c:b7:13:71:
5b:30:98:4a:f6:d8:66:99:40:99:89:c6:c4:10:4b:bd:ac:68:
f7:05:1b:76:78:53:7e:c1:ae:f9:23:f7:03:bb:e5:10:de:54:
15:bf:20:b9:b7:fc:19:32:9e:f4:ad:77:21:24:39:c2:93:9b:
6c:6d:c9:47:6f:bc:7b:72:38:70:ff:96:4d:25:b3:90:3a:f5:
ff:73:e0:fe:43:cf:77:d1:fe:38:31:65:74:5b:dc:21:bf:9e:
f7:81:cd:b6:5c:f0:4a:18:87:74:fc:34:45:4d:2e:26:00:b1:
24:94:d6:44:99:71:96:2f:24:84:db:9a:98:21:a3:7f:3c:6d:
08:9a:5f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDWunR+BPfAIgvDl8sA1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2
MTdjNmEwHhcNMjYwOTIwMjMwMTE3WhcNMjYwOTIxMjMwMTE3WjAzMTEwLwYDVQQD
Eyg5ZjMyZDhlMGY3MTM4ZThmZTdmNjhhNDYzNTE3NjljZGRmYTdkOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLjFGazYsi+/zpA+Uox1XuTMRwUE
V6FbrdVjzWrJfdAEWfkOvjboAphuvra+iivwSAvrvhe2JTMhiKt7WgeUQxSCngdC
6ux4V0A92VrM6X/EqiCeLsdUZX7prjND80L0s6vmDL7Ju/wGQCQv480e8gYUfCDl
OahiG5/l4QyZN5405e79r4UZSVkRIkU+Nx5IpI5EnK8wVlQy1Te+sNiZtzjFGNjX
TYdZj+AetNorY3Gkx/oJVoO87O5YYE1AztNHgktcXSNoQziOkYC6kuUmRA+DmuGL
FPf0T/4aOmsxQLUdczqxJCdzSOC+i7wIRRBmyqiybLh8p5H5XD0rKFpslwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8y2OD3E46P5/aKRjUXac3fp9lwMB8GA1UdIwQY
MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt
ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5
LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4v9ntQt
2ewcxEpKAWtDdqQLv3TKYfDg/5+JA+XZhr080q/mItBGAxmywPoymI/emFZ8sV5X
l1akr8S+7+1EStZw38Vdfw4Y44iu+9k1B/QE1BKPcatEsftRZmz1ytMSAtKmA/Sy
xAikJYd+h1ADs9OuWxnk+svYjlp8txNxWzCYSvbYZplAmYnGxBBLvaxo9wUbdnhT
fsGu+SP3A7vlEN5UFb8gubf8GTKe9K13ISQ5wpObbG3JR2+8e3I4cP+WTSWzkDr1
/3Pg/kPPd9H+ODFldFvcIb+e94HNtlzwShiHdPw0RU0uJgCxJJTWRJlxli8khNua
mCGjfzxtCJpfDQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:33:45 2026 by rpki-client