Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: 50nudGKBhW43QCig5GRYmLh2BE9r+dB28woe+6top0o=
Subject key identifier: 21:B7:C7:BB:31:18:B8:3F:A3:E8:52:5C:9A:B2:34:58:C4:22:0B:10
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 019DA567320E5008F9F853C61DEF0F6A9B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 056B
Signing time: Sun 19 Apr 2026 11:01:36 +0000
Manifest this update: Sun 19 Apr 2026 11:01:36 +0000
Manifest next update: Mon 20 Apr 2026 11:01:36 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: NdgkB/xbTg38SXJXOjNy4vRba2gXZvEUMWTOG5XdFuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:32:0e:50:08:f9:f8:53:c6:1d:ef:0f:6a:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Apr 19 11:01:36 2026 GMT
Not After : Apr 20 11:01:36 2026 GMT
Subject: CN=21b7c7bb3118b83fa3e8525c9ab23458c4220b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:47:ca:f0:09:60:2f:51:69:29:98:de:b9:
07:6e:c8:62:a2:7d:86:f2:09:f2:98:ae:d8:66:12:
e2:4b:69:7a:8b:1c:7b:78:6d:c4:da:5c:0b:24:d8:
da:68:cd:29:37:70:21:7f:60:41:5d:69:a5:9d:d8:
e2:4b:19:38:dd:46:d4:94:12:59:1b:82:10:0d:cb:
8f:c9:a5:3a:56:0c:cf:d3:60:2d:a7:8b:72:34:bd:
0a:0c:4a:1b:c2:0e:d9:d2:01:89:78:9b:98:b6:9c:
c5:5e:a7:4d:83:e8:2f:60:e8:19:e6:83:72:0d:82:
c4:7e:9e:c8:95:36:fe:7e:6c:e3:b6:02:7a:7c:a8:
4b:c8:b6:44:26:d5:cf:d3:7e:6b:50:de:94:55:1d:
a6:9f:86:e1:9f:6b:8e:60:7f:39:af:f1:d2:31:65:
3b:07:17:5d:ee:55:b7:dc:15:0d:15:3e:e2:92:5b:
d7:65:c8:fd:3c:62:41:01:b3:f3:02:6a:c4:c9:ef:
0f:52:20:ee:83:f3:ee:50:12:ec:3a:36:97:86:54:
af:c8:53:d5:3e:96:78:79:fd:8b:ea:59:eb:a8:a9:
1e:a5:0b:37:ae:06:66:8f:8d:e3:72:94:37:e0:c4:
ff:54:34:5e:df:7b:05:94:41:7e:38:19:b0:f3:28:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:C7:BB:31:18:B8:3F:A3:E8:52:5C:9A:B2:34:58:C4:22:0B:10
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:36:c9:ed:f0:76:b8:1b:5e:38:50:ed:f9:93:bd:e9:e4:78:
4b:3e:b6:21:db:1a:4a:08:c8:fa:43:83:a9:b4:b8:a9:05:5e:
0f:77:6d:a3:32:7a:dc:f0:b2:06:5d:b6:cc:49:67:99:e1:02:
c2:df:1c:2c:af:98:21:f1:66:d3:3b:67:07:d1:7b:a1:ff:44:
14:24:9c:35:7b:64:7f:eb:c9:42:9f:76:5b:78:f9:bc:b0:18:
31:48:72:21:c2:d7:1c:84:8b:54:34:c3:6e:df:56:ff:a7:6f:
7e:17:f5:fe:f6:ed:d9:bf:85:16:e0:07:b5:c4:b7:d7:39:75:
99:a7:81:cd:f5:fd:85:67:5c:55:8b:87:50:61:93:28:0a:e6:
b4:86:60:be:dc:f5:ce:1c:b0:0d:88:85:29:46:2f:8a:14:72:
28:2f:67:23:50:c3:bb:60:72:fd:81:ad:77:52:9d:96:25:c0:
05:3a:51:7a:9f:f5:e9:79:e6:38:aa:a4:e8:41:35:e9:ad:42:
4a:43:14:9b:76:a0:d1:b7:f9:85:bd:a3:db:cb:1f:e5:f8:51:
e8:a7:f8:11:57:e7:78:f5:80:36:39:25:3b:8c:3d:76:f3:86:
ea:0c:c9:bd:b3:1f:75:75:5f:89:b0:25:cb:94:04:e4:39:66:
5f:7d:14:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZzIOUAj5+FPGHe8PapsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDk4N2U2Y2ZiY2NlNThhZTBjOTZlNzY2NmFiMjFhYjNl
MmUwOTAwHhcNMjYwNDE5MTEwMTM2WhcNMjYwNDIwMTEwMTM2WjAzMTEwLwYDVQQD
EygyMWI3YzdiYjMxMThiODNmYTNlODUyNWM5YWIyMzQ1OGM0MjIwYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymRHyvAJYC9RaSmY3rkHbshion2G
8gnymK7YZhLiS2l6ixx7eG3E2lwLJNjaaM0pN3Ahf2BBXWmlndjiSxk43UbUlBJZ
G4IQDcuPyaU6VgzP02Atp4tyNL0KDEobwg7Z0gGJeJuYtpzFXqdNg+gvYOgZ5oNy
DYLEfp7IlTb+fmzjtgJ6fKhLyLZEJtXP035rUN6UVR2mn4bhn2uOYH85r/HSMWU7
Bxdd7lW33BUNFT7iklvXZcj9PGJBAbPzAmrEye8PUiDug/PuUBLsOjaXhlSvyFPV
PpZ4ef2L6lnrqKkepQs3rgZmj43jcpQ34MT/VDRe33sFlEF+OBmw8ygFOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG3x7sxGLg/o+hSXJqyNFjEIgsQMB8GA1UdIwQY
MBaAFOVJh+bPvM5YrgyW52Zqshqz4uCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGIt
MDBiNTIwODc1Mzc2LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGItMDBiNTIwODc1Mzc2
LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjbJ7fB2
uBteOFDt+ZO96eR4Sz62IdsaSgjI+kODqbS4qQVeD3dtozJ63PCyBl22zElnmeEC
wt8cLK+YIfFm0ztnB9F7of9EFCScNXtkf+vJQp92W3j5vLAYMUhyIcLXHISLVDTD
bt9W/6dvfhf1/vbt2b+FFuAHtcS31zl1maeBzfX9hWdcVYuHUGGTKArmtIZgvtz1
zhywDYiFKUYvihRyKC9nI1DDu2By/YGtd1KdliXABTpRep/16XnmOKqk6EE16a1C
SkMUm3ag0bf5hb2j28sf5fhR6Kf4EVfnePWANjklO4w9dvOG6gzJvbMfdXVfibAl
y5QE5DlmX30U5A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:24 2026 by rpki-client