Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: yg9mM2O8O+mjDBIbrpjhjB97HMJOoNfG5dy9lFc07Oo=
Subject key identifier: 98:DE:7A:59:71:5A:C7:20:7F:D9:26:FF:1B:53:E0:B0:D4:07:BA:1D
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019EBDD98ECE2C2B525FFC75FB827AA31BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0E7B
Signing time: Fri 12 Jun 2026 22:00:11 +0000
Manifest this update: Fri 12 Jun 2026 22:00:11 +0000
Manifest next update: Sat 13 Jun 2026 22:00:11 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: wQIVSwILJ3w8qsOrXKzJCFMk/XL7IORZWjKMelY0cv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:8e:ce:2c:2b:52:5f:fc:75:fb:82:7a:a3:1b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Jun 12 22:00:11 2026 GMT
Not After : Jun 13 22:00:11 2026 GMT
Subject: CN=98de7a59715ac7207fd926ff1b53e0b0d407ba1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:f0:4c:90:58:f5:b7:26:65:88:6a:62:4f:
9a:31:53:65:15:52:c0:a6:d3:67:25:4a:19:8f:b0:
c4:11:52:6c:de:5f:4b:5d:88:68:92:28:9a:65:f0:
02:c3:a3:a3:97:2d:35:ea:e1:58:03:c1:cd:b3:c7:
c0:5c:e8:af:5e:66:6f:7d:0a:c8:7f:30:b6:ed:d4:
06:f0:7a:e9:00:37:f4:a9:01:b0:3d:aa:66:52:b5:
17:a5:79:4d:eb:70:87:93:b4:f8:ca:c2:b9:6a:c3:
8c:77:33:9c:20:12:f7:57:3c:e0:2e:e7:da:04:11:
90:9e:4d:a0:e3:1c:67:f3:75:8a:5b:b6:b6:16:79:
35:e8:49:fd:5c:5e:3c:a1:f0:5c:06:09:3d:0c:ff:
f9:30:00:34:7f:0e:f3:6c:95:c3:cd:43:44:32:1e:
f6:3a:7b:83:94:b4:27:2e:aa:66:5d:43:2a:a6:62:
d2:ea:fa:a9:92:e4:26:15:b8:68:f1:b7:2a:8c:a1:
2d:f2:60:d4:f3:de:82:5d:65:a4:37:c2:e8:a6:38:
5a:1d:69:86:6d:49:2d:df:67:13:e7:5e:df:0b:d5:
0c:05:88:af:71:52:5f:97:17:09:b2:af:60:da:71:
af:cd:fc:2e:97:98:ce:0a:ed:96:4e:d7:4c:b3:f6:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:7A:59:71:5A:C7:20:7F:D9:26:FF:1B:53:E0:B0:D4:07:BA:1D
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a0:7d:86:58:8e:d1:8f:1d:39:49:a7:e1:da:10:14:6b:e8:
4d:b5:34:6c:84:bc:f5:38:3d:66:af:0c:01:6f:26:94:fc:44:
39:e5:6c:35:8d:78:8c:30:4e:33:bd:f7:b1:7f:4a:76:db:6a:
21:9b:dd:e8:5f:6a:64:03:1b:38:a5:ab:5b:dd:fa:ac:c2:35:
6d:7b:d0:8c:b4:2f:50:f8:05:fc:d9:ba:70:b8:1c:fd:9f:93:
74:5c:80:e9:15:0b:05:61:b1:50:63:d3:f4:0c:86:71:fb:bf:
73:04:e1:60:4a:5d:8e:9a:e9:35:52:0e:a8:85:ee:a0:3b:0d:
69:fb:65:66:6a:4f:42:77:02:c7:9b:6a:08:ff:28:57:24:0c:
c7:a3:ac:df:43:c3:1c:88:06:40:5d:f3:83:df:20:8c:10:9f:
c1:66:11:e0:a7:16:8f:bb:a0:0c:63:9e:7e:52:ae:ac:b2:d6:
cc:8c:81:9a:e2:9c:89:02:b5:60:21:0b:f9:cb:3b:3a:64:09:
bd:a4:89:e2:0f:c4:88:bc:86:50:67:92:c3:cd:dc:96:9f:cb:
c8:0a:6b:08:13:49:51:a0:da:28:36:b0:74:a5:59:74:18:4e:
70:4a:4d:01:89:09:5f:c3:38:20:52:5b:96:74:32:32:17:53:
bd:86:e8:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692Y7OLCtSX/x1+4J6oxv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MWQ3MTdmYjJkNDM3ZDQxMWQ4NzFhZjdiOWZiY2IwMWU4
OWY5NmMwHhcNMjYwNjEyMjIwMDExWhcNMjYwNjEzMjIwMDExWjAzMTEwLwYDVQQD
Eyg5OGRlN2E1OTcxNWFjNzIwN2ZkOTI2ZmYxYjUzZTBiMGQ0MDdiYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbTwTJBY9bcmZYhqYk+aMVNlFVLA
ptNnJUoZj7DEEVJs3l9LXYhokiiaZfACw6Ojly016uFYA8HNs8fAXOivXmZvfQrI
fzC27dQG8HrpADf0qQGwPapmUrUXpXlN63CHk7T4ysK5asOMdzOcIBL3VzzgLufa
BBGQnk2g4xxn83WKW7a2Fnk16En9XF48ofBcBgk9DP/5MAA0fw7zbJXDzUNEMh72
OnuDlLQnLqpmXUMqpmLS6vqpkuQmFbho8bcqjKEt8mDU896CXWWkN8LopjhaHWmG
bUkt32cT517fC9UMBYivcVJflxcJsq9g2nGvzfwul5jOCu2WTtdMs/Z8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjeellxWscgf9km/xtT4LDUB7odMB8GA1UdIwQY
MBaAFOUdcX+y1DfUEdhxr3ufvLAeiflsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDkt
MzE0ZDVlMmI2NmNhLzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDktMzE0ZDVlMmI2NmNh
LzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKB9hliO
0Y8dOUmn4doQFGvoTbU0bIS89Tg9Zq8MAW8mlPxEOeVsNY14jDBOM733sX9Kdttq
IZvd6F9qZAMbOKWrW936rMI1bXvQjLQvUPgF/Nm6cLgc/Z+TdFyA6RULBWGxUGPT
9AyGcfu/cwThYEpdjprpNVIOqIXuoDsNaftlZmpPQncCx5tqCP8oVyQMx6Os30PD
HIgGQF3zg98gjBCfwWYR4KcWj7ugDGOeflKurLLWzIyBmuKciQK1YCEL+cs7OmQJ
vaSJ4g/EiLyGUGeSw83clp/LyAprCBNJUaDaKDawdKVZdBhOcEpNAYkJX8M4IFJb
lnQyMhdTvYboxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:06 2026 by rpki-client