Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: bXsGDGkcMfv0v6Qwm4pAQ9qr9Ca4Gg+oYxbeTE5OCQI=
Subject key identifier: 77:01:4B:62:CB:45:3B:96:D8:AA:7C:32:74:20:1F:60:5C:B3:E3:36
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019FA906DC009CB240DE8B7ABD64C444CAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 15CC
Signing time: Tue 28 Jul 2026 14:00:26 +0000
Manifest this update: Tue 28 Jul 2026 14:00:26 +0000
Manifest next update: Wed 29 Jul 2026 14:00:26 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: h0m67c/xgh4hk4LHBUrhKsoWAROckbotx6xWZXqGMK0=)
2: Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa (hash: lv1y9n6SxRqEqaqKtDtqJfGE7WxXtWgMt7j43NvbuS8=)
3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:dc:00:9c:b2:40:de:8b:7a:bd:64:c4:44:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Jul 28 14:00:26 2026 GMT
Not After : Jul 29 14:00:26 2026 GMT
Subject: CN=77014b62cb453b96d8aa7c3274201f605cb3e336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:4e:27:52:fb:92:32:21:4f:77:2a:8b:ea:
0c:de:f0:71:39:e4:44:e7:58:d3:4e:a6:eb:8b:b3:
95:da:db:46:d7:b4:75:41:63:c6:79:08:ba:eb:d0:
1a:7a:5c:49:30:9a:13:8e:c3:6b:c8:95:91:4e:30:
18:cf:d7:9b:0d:e1:40:a5:0b:55:ce:dd:22:f7:8d:
c5:9c:ea:1c:53:40:65:50:5e:66:30:a6:b5:a8:3b:
48:67:5e:11:08:ed:cb:5d:b0:82:55:23:5f:24:6f:
dd:64:f2:36:17:4e:70:86:ce:4b:72:f1:2d:d2:ea:
14:ae:30:96:98:f2:8d:cb:e5:1b:09:1c:29:e3:c1:
5c:27:5f:1c:27:aa:11:3f:34:72:cc:11:bd:16:fd:
93:f4:74:fc:2f:5f:df:42:c0:6d:9c:93:73:91:e7:
92:e2:cb:d3:14:ff:c7:75:9d:08:ff:f2:e3:10:1e:
92:ec:7c:7d:6d:f2:3c:fc:58:4c:e1:ff:14:21:d9:
f4:9d:ea:1c:88:d9:21:0e:04:c2:3f:10:38:4e:71:
67:be:9a:16:2a:fe:3e:8b:4a:7f:f5:53:62:b3:a8:
a9:d1:2e:4e:27:37:b1:0a:b1:fc:ed:c1:36:ef:99:
e6:49:65:19:13:9c:1e:ab:df:3d:3d:b0:38:6d:f4:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:01:4B:62:CB:45:3B:96:D8:AA:7C:32:74:20:1F:60:5C:B3:E3:36
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4b:25:2e:63:f8:d6:a8:5f:7a:ed:0f:85:04:b4:aa:e3:fa:
c5:3e:9a:07:d9:85:b2:af:19:2d:40:08:af:b4:b3:ab:0e:14:
0e:8b:84:f0:93:21:56:17:c4:29:af:93:22:d6:27:ac:b8:44:
c1:c0:21:56:2c:15:11:46:ae:16:d9:6a:ae:1a:6e:72:02:b9:
c8:df:3c:46:a7:f2:b1:b2:d5:78:76:e1:7b:05:40:53:cd:96:
16:90:a0:87:43:44:a4:77:02:63:0f:1c:ea:c8:66:0f:ab:4d:
f7:68:d4:00:04:0e:7b:94:7f:4c:47:6f:ee:93:f3:0c:d0:2d:
64:40:90:e9:91:45:13:ac:93:7a:93:9f:58:5e:8d:ba:a6:82:
58:5f:cb:94:bd:74:12:1a:95:ae:f8:64:5b:a3:de:25:f6:2f:
b6:26:12:40:c1:d1:ae:93:a7:67:1e:05:64:bf:d2:8a:1e:b0:
67:1b:c3:90:5a:a5:be:e9:b2:8d:89:b7:b4:0d:04:6c:9b:1b:
f1:aa:cf:9b:8d:0b:98:8a:5e:2a:7b:53:99:37:50:61:9a:53:
52:98:46:e0:bd:25:ad:43:d7:33:02:6d:19:31:f3:3c:80:cc:
3b:60:12:07:8e:27:da:3d:52:0d:89:68:13:ca:5c:be:01:3d:
34:62:7e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBtwAnLJA3ot6vWTERMq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm
NzQxY2IwHhcNMjYwNzI4MTQwMDI2WhcNMjYwNzI5MTQwMDI2WjAzMTEwLwYDVQQD
Eyg3NzAxNGI2MmNiNDUzYjk2ZDhhYTdjMzI3NDIwMWY2MDVjYjNlMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6pOJ1L7kjIhT3cqi+oM3vBxOeRE
51jTTqbri7OV2ttG17R1QWPGeQi669AaelxJMJoTjsNryJWRTjAYz9ebDeFApQtV
zt0i943FnOocU0BlUF5mMKa1qDtIZ14RCO3LXbCCVSNfJG/dZPI2F05whs5LcvEt
0uoUrjCWmPKNy+UbCRwp48FcJ18cJ6oRPzRyzBG9Fv2T9HT8L1/fQsBtnJNzkeeS
4svTFP/HdZ0I//LjEB6S7Hx9bfI8/FhM4f8UIdn0neociNkhDgTCPxA4TnFnvpoW
Kv4+i0p/9VNis6ip0S5OJzexCrH87cE275nmSWUZE5weq989PbA4bfTXXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcBS2LLRTuW2Kp8MnQgH2Bcs+M2MB8GA1UdIwQY
MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et
MGE3NzBmMGM3NjA4LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4
LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkslLmP4
1qhfeu0PhQS0quP6xT6aB9mFsq8ZLUAIr7Szqw4UDouE8JMhVhfEKa+TItYnrLhE
wcAhViwVEUauFtlqrhpucgK5yN88RqfysbLVeHbhewVAU82WFpCgh0NEpHcCYw8c
6shmD6tN92jUAAQOe5R/TEdv7pPzDNAtZECQ6ZFFE6yTepOfWF6NuqaCWF/LlL10
EhqVrvhkW6PeJfYvtiYSQMHRrpOnZx4FZL/Sih6wZxvDkFqlvumyjYm3tA0EbJsb
8arPm40LmIpeKntTmTdQYZpTUphG4L0lrUPXMwJtGTHzPIDMO2ASB44n2j1SDYlo
E8pcvgE9NGJ+MQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:43 2026 by rpki-client