Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
File: 5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft (raw, json)
Hash identifier: dnrTvZ+pvTXv+g//n0q372qp5mtaOebR/ehBaontnCM=
Subject key identifier: DA:CC:20:D5:0D:41:96:CA:D4:3D:0F:DD:9F:89:2B:B2:70:3D:DA:B7
Authority key identifier: E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
Certificate issuer: /CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Certificate serial: 019FAA88749DE5240D83CD9FDF8F89FD2FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:37 +0000
Manifest this update: Tue 28 Jul 2026 21:01:37 +0000
Manifest next update: Wed 29 Jul 2026 21:01:37 +0000
Files and hashes: 1: 5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl (hash: U7QhKPiGp8exEiQxpPP4bcgP1drmfPMQmTm8TcYx4Cw=)
2: dJl8r4I9cKQfDAC67Fzamr6A4Ns.roa (hash: G49JKof/PjJ/pDTjMFk4RiR1s/uu+QqKOQDfL/6PwFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:74:9d:e5:24:0d:83:cd:9f:df:8f:89:fd:2f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Validity
Not Before: Jul 28 21:01:37 2026 GMT
Not After : Jul 29 21:01:37 2026 GMT
Subject: CN=dacc20d50d4196cad43d0fdd9f892bb2703ddab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:28:40:6f:b4:f6:3d:f6:58:18:54:31:fd:
69:f8:f1:78:3f:c5:7c:00:01:11:27:64:92:86:32:
44:83:f2:30:65:db:31:03:ae:f4:c5:4c:a8:26:01:
bb:f3:2d:3d:b1:08:a7:70:7a:2c:5e:4b:e1:b5:11:
e2:54:00:48:cc:0f:08:50:ee:e1:b6:03:79:de:77:
ea:d9:7c:aa:3e:31:9b:03:d6:27:5c:e2:45:71:b3:
7c:ad:ef:06:a1:cb:9b:b8:6b:af:2d:af:d9:35:6d:
83:ec:f4:90:d4:87:bc:ad:b5:dd:9b:3c:1e:3b:f7:
fe:ad:b9:85:74:8f:50:de:95:89:fa:86:65:d6:94:
c2:08:1b:80:1f:c7:bb:1c:e9:b2:60:ae:ba:e9:2c:
5c:af:59:bd:5e:37:84:a5:a1:93:8e:18:91:0c:92:
49:8c:f8:4d:cf:4e:38:9b:c9:a5:c0:52:fc:da:30:
70:4e:19:fc:c8:2d:eb:a4:2c:ed:c0:24:7c:b9:93:
a9:e6:21:24:e2:be:75:ee:b1:c5:ac:01:af:25:d4:
db:fc:4a:b3:ad:ea:7b:3c:30:3e:3f:59:1c:46:c3:
a8:4a:a0:06:34:a3:38:d2:17:14:bd:bc:10:bd:8b:
19:4e:48:e2:57:a6:44:4d:14:86:20:1f:6d:42:2c:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:20:D5:0D:41:96:CA:D4:3D:0F:DD:9F:89:2B:B2:70:3D:DA:B7
X509v3 Authority Key Identifier:
keyid:E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9f:68:67:39:04:9e:f1:b3:54:0d:2e:e2:99:f6:9c:92:91:
93:af:f7:54:26:b7:ed:be:c7:4c:e6:b1:18:13:cf:28:bc:48:
57:10:de:75:09:e1:84:22:40:76:4f:c8:38:3e:7c:ea:4b:4e:
cb:62:df:f2:89:63:ab:f5:28:3f:77:19:2a:32:8b:0b:ac:a5:
47:3c:3a:e9:a3:f3:cb:c5:f9:1e:d2:61:52:9d:cf:f1:ad:a8:
0d:ea:10:18:fc:86:f3:22:8a:1e:c9:1c:77:11:40:a9:ad:b1:
81:a5:7a:87:81:d4:70:57:25:74:2f:be:94:b1:a7:5f:3b:96:
61:b6:6b:4a:67:c0:fb:aa:03:f5:2e:74:98:7a:d9:8a:37:21:
e4:c8:d7:d0:da:df:27:a2:20:ff:01:75:32:ba:db:3c:f3:bb:
7f:d2:88:f6:ab:d6:30:e8:c5:95:08:44:58:af:ff:84:6b:cb:
7f:53:22:6f:20:76:81:33:2b:99:66:99:57:36:6e:13:16:7e:
b8:77:33:33:39:04:4e:28:fc:eb:26:64:43:86:07:6f:f1:79:
be:2f:3a:2d:9d:8d:a5:41:90:11:ee:14:cd:c1:51:b4:d4:d2:
e0:9b:00:bc:28:2a:fd:e7:ac:e8:26:8f:37:d3:6a:29:12:5d:
b7:7b:f0:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiHSd5SQNg82f34+J/S+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NzJjMmFlNGI3ZmVjNjhjNWIxMTA5NzNhYTA2NmE1MDQ3
ZGQwZDcwHhcNMjYwNzI4MjEwMTM3WhcNMjYwNzI5MjEwMTM3WjAzMTEwLwYDVQQD
EyhkYWNjMjBkNTBkNDE5NmNhZDQzZDBmZGQ5Zjg5MmJiMjcwM2RkYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs30oQG+09j32WBhUMf1p+PF4P8V8
AAERJ2SShjJEg/IwZdsxA670xUyoJgG78y09sQincHosXkvhtRHiVABIzA8IUO7h
tgN53nfq2XyqPjGbA9YnXOJFcbN8re8GocubuGuvLa/ZNW2D7PSQ1Ie8rbXdmzwe
O/f+rbmFdI9Q3pWJ+oZl1pTCCBuAH8e7HOmyYK666Sxcr1m9XjeEpaGTjhiRDJJJ
jPhNz044m8mlwFL82jBwThn8yC3rpCztwCR8uZOp5iEk4r517rHFrAGvJdTb/Eqz
rep7PDA+P1kcRsOoSqAGNKM40hcUvbwQvYsZTkjiV6ZETRSGIB9tQizfJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrMINUNQZbK1D0P3Z+JK7JwPdq3MB8GA1UdIwQY
MBaAFOZywq5Lf+xoxbEQlzqgZqUEfdDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW5MQ3JrdF83R2pGc1JDWE9xQm1wUVI5ME5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMWRhMmItNzdiZC00MWM3LWJiZjMt
NTYwYzllN2MwNzQ3LzEvNW5MQ3JrdF83R2pGc1JDWE9xQm1wUVI5ME5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMWRhMmItNzdiZC00MWM3LWJiZjMtNTYwYzllN2MwNzQ3
LzEvNW5MQ3JrdF83R2pGc1JDWE9xQm1wUVI5ME5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE59oZzkE
nvGzVA0u4pn2nJKRk6/3VCa37b7HTOaxGBPPKLxIVxDedQnhhCJAdk/IOD586ktO
y2Lf8oljq/UoP3cZKjKLC6ylRzw66aPzy8X5HtJhUp3P8a2oDeoQGPyG8yKKHskc
dxFAqa2xgaV6h4HUcFcldC++lLGnXzuWYbZrSmfA+6oD9S50mHrZijch5MjX0Nrf
J6Ig/wF1MrrbPPO7f9KI9qvWMOjFlQhEWK//hGvLf1MibyB2gTMrmWaZVzZuExZ+
uHczMzkETij86yZkQ4YHb/F5vi86LZ2NpUGQEe4UzcFRtNTS4JsAvCgq/ees6CaP
N9NqKRJdt3vwZw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:27 2026 by rpki-client