Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: HSRzd1o3YZy3690PARUVlXk4NNsH1MxiFCEcfa5SY0g=
Subject key identifier: 02:0F:3A:75:40:AD:47:08:97:A9:54:32:17:D3:92:F4:4F:64:BA:DC
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 01A0C09ED8D85655DCC2427183D55780E2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 1527
Signing time: Sun 20 Sep 2026 21:00:30 +0000
Manifest this update: Sun 20 Sep 2026 21:00:30 +0000
Manifest next update: Mon 21 Sep 2026 21:00:30 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: vanLUEP6As5/F8cYj3Q+B/+N4idE1NNhJHCvXRm8+Co=)
2: j0KfrHF7U_ersUCrBx0wIYyU1mg.roa (hash: YJlkOTIzqTwvJH6suym0S6Opx86SQJy3UvFlMQtx2RI=)
3: kJQjUgrsTkI9sNO65hRDTSRGiT8.roa (hash: lI+jSO9Op8f4ZB2mDkA1WTwA0uM7OvPByGs3tSZRjRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:d8:d8:56:55:dc:c2:42:71:83:d5:57:80:e2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Sep 20 21:00:30 2026 GMT
Not After : Sep 21 21:00:30 2026 GMT
Subject: CN=020f3a7540ad470897a9543217d392f44f64badc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:7c:0b:e4:7f:03:3f:eb:3f:62:8d:ea:7a:
02:97:8c:c7:c7:4f:82:54:6d:0e:52:70:38:0a:0f:
7c:d2:a7:a8:2d:cd:33:3e:9e:00:88:1d:01:f4:92:
23:68:47:ea:d5:73:63:63:da:c4:21:26:5a:72:3f:
ae:64:6a:e2:9e:2a:c9:4a:e5:64:c8:9c:39:0e:3a:
e2:eb:38:8a:e4:ad:e8:16:b8:0c:00:80:04:25:f6:
97:35:83:95:c3:fa:7b:32:3a:87:ec:d9:66:32:38:
05:14:d3:58:0f:be:8c:12:9e:6c:35:54:3f:1b:28:
40:b3:68:93:58:d2:66:3d:16:29:39:d5:bc:88:0e:
33:22:59:23:ec:49:4b:e1:1d:e1:b6:d1:f6:b2:ee:
a8:c8:42:78:90:21:89:c9:63:4e:ff:eb:5c:08:73:
6b:31:0f:c9:23:b8:fa:18:a9:64:1e:16:b0:c0:10:
dd:3f:97:e2:d3:7e:cf:c4:69:60:99:83:60:8b:29:
22:99:f0:56:db:99:e2:8b:62:28:5f:7c:8c:b8:5b:
ae:4e:ee:17:1c:87:df:19:54:83:0b:ef:db:32:36:
45:79:99:6b:67:50:3e:57:91:5a:d4:27:d4:39:f2:
2d:25:17:e9:bd:98:c9:9b:80:27:a5:89:2c:a7:9f:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:3A:75:40:AD:47:08:97:A9:54:32:17:D3:92:F4:4F:64:BA:DC
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ba:f9:c0:7d:6b:2d:9c:42:a1:0c:39:ec:cf:41:c7:bb:f0:
fa:1d:f0:21:f4:67:7e:34:88:ab:67:c1:95:b7:d8:e9:34:7b:
68:39:4f:a7:c3:4f:f3:61:2f:04:f5:11:b6:7b:99:b5:84:ff:
2a:25:1b:54:4c:ba:44:e6:e1:1a:ae:21:17:f7:12:c6:00:01:
fa:3e:25:d5:55:7e:72:02:20:b0:61:23:b5:b6:45:11:6a:b3:
4d:3f:7c:43:aa:94:b8:56:b8:c4:32:ce:2d:e4:ff:14:13:50:
74:fc:66:aa:21:3f:5d:26:03:d7:74:c2:41:ee:a4:87:42:1a:
ff:0c:ee:59:a7:2d:59:05:e9:89:e0:ea:08:25:22:79:7b:b4:
0b:13:ec:07:a3:d2:8a:4c:16:61:1f:ee:6b:c9:5d:83:b5:a8:
f2:6f:67:10:3a:6e:a1:57:36:2d:81:5c:e9:d9:68:39:da:c3:
5f:eb:9f:18:61:4e:0d:4b:42:40:fa:c8:43:53:bc:08:4c:27:
a6:ec:1e:4d:81:5e:3d:4e:18:e4:a6:52:24:2d:1c:f8:98:ea:
50:6f:c3:e0:57:14:18:f7:9e:9e:95:a2:2c:99:60:c5:eb:a6:
be:a0:4e:af:20:b4:cf:61:0b:a3:20:03:c6:9e:ac:5d:d2:13:
26:c2:a1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAntjYVlXcwkJxg9VXgOLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2MxMTQ1ZDE4NTU0Njk4ZWRkOTlkN2NkMTk5Y2QzYzAy
YjJhMTUwHhcNMjYwOTIwMjEwMDMwWhcNMjYwOTIxMjEwMDMwWjAzMTEwLwYDVQQD
EygwMjBmM2E3NTQwYWQ0NzA4OTdhOTU0MzIxN2QzOTJmNDRmNjRiYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu458C+R/Az/rP2KN6noCl4zHx0+C
VG0OUnA4Cg980qeoLc0zPp4AiB0B9JIjaEfq1XNjY9rEISZacj+uZGrinirJSuVk
yJw5Djri6ziK5K3oFrgMAIAEJfaXNYOVw/p7MjqH7NlmMjgFFNNYD76MEp5sNVQ/
GyhAs2iTWNJmPRYpOdW8iA4zIlkj7ElL4R3httH2su6oyEJ4kCGJyWNO/+tcCHNr
MQ/JI7j6GKlkHhawwBDdP5fi037PxGlgmYNgiykimfBW25nii2IoX3yMuFuuTu4X
HIffGVSDC+/bMjZFeZlrZ1A+V5Fa1CfUOfItJRfpvZjJm4AnpYksp5/4jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIPOnVArUcIl6lUMhfTkvRPZLrcMB8GA1UdIwQY
MBaAFOZ8EUXRhVRpjt2Z180ZnNPAKyoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNjJlMGMtMjVlYi00Yzk1LTgwMDIt
ODdmMWNmNzNhNDNhLzEvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lNjJlMGMtMjVlYi00Yzk1LTgwMDItODdmMWNmNzNhNDNh
LzEvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrr5wH1r
LZxCoQw57M9Bx7vw+h3wIfRnfjSIq2fBlbfY6TR7aDlPp8NP82EvBPURtnuZtYT/
KiUbVEy6RObhGq4hF/cSxgAB+j4l1VV+cgIgsGEjtbZFEWqzTT98Q6qUuFa4xDLO
LeT/FBNQdPxmqiE/XSYD13TCQe6kh0Ia/wzuWactWQXpieDqCCUieXu0CxPsB6PS
ikwWYR/ua8ldg7Wo8m9nEDpuoVc2LYFc6dloOdrDX+ufGGFODUtCQPrIQ1O8CEwn
puweTYFePU4Y5KZSJC0c+JjqUG/D4FcUGPeenpWiLJlgxeumvqBOryC0z2ELoyAD
xp6sXdITJsKh5g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:18:59 2026 by rpki-client