Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: xbu9x8+tXA4+VsqMbkydYWtiG6hy+NYTDbgZGk1+dPA=
Subject key identifier: 99:FA:FC:05:15:CA:E3:C6:55:5E:38:65:9B:5C:A2:4B:58:34:21:93
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019D9A3E54459D0068F91A55505E4C44DDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 092D
Signing time: Fri 17 Apr 2026 07:01:09 +0000
Manifest this update: Fri 17 Apr 2026 07:01:09 +0000
Manifest next update: Sat 18 Apr 2026 07:01:09 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: X8I77vKVg7ghpBNMhYRqYMo/8SShqs6EXB2cYYVRf1Q=)
2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
3: ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa (hash: 3GsUcPKh0tqn8pSBgRUlUFyh+eu6y6bpI0iAqEsI4q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:54:45:9d:00:68:f9:1a:55:50:5e:4c:44:dd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Apr 17 07:01:09 2026 GMT
Not After : Apr 18 07:01:09 2026 GMT
Subject: CN=99fafc0515cae3c6555e38659b5ca24b58342193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:98:8d:e1:b9:36:7f:a4:9c:78:3a:9d:22:
e9:10:68:3f:05:df:ca:39:48:e5:a2:de:8e:a5:20:
df:0b:50:1c:81:af:39:38:a1:c0:b6:34:5c:fe:be:
75:90:3f:11:3e:07:e8:1a:41:ec:a5:83:cd:93:d5:
95:85:e0:e4:0a:df:55:f7:a3:70:40:6f:c5:b5:96:
d8:11:25:10:56:3f:a6:c2:a8:82:cd:65:da:98:5d:
d3:5f:59:ba:24:88:aa:fa:e0:24:e0:50:53:76:39:
21:51:58:9e:56:7b:64:2c:0f:da:97:e3:85:2c:7b:
bc:5d:da:6e:0f:d1:70:96:e0:31:51:75:17:45:50:
06:6e:1e:19:5e:8a:24:11:a0:ae:8e:2d:6d:c6:9a:
22:65:22:97:eb:96:58:7b:56:04:66:a4:45:76:73:
2b:84:f4:21:34:40:11:d1:d8:e2:80:2e:d6:56:1e:
5a:c3:be:7b:b3:76:2d:ef:6f:47:eb:0e:fb:3e:b0:
a3:41:82:ee:37:db:89:24:c0:99:e2:fd:57:93:dc:
82:ee:b4:fa:a6:7c:00:85:e1:da:c9:28:b1:98:f5:
ce:fc:8c:d6:02:5a:99:be:47:07:66:ea:b6:05:10:
68:88:f3:17:09:91:00:a6:79:02:4b:bd:f3:82:70:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FA:FC:05:15:CA:E3:C6:55:5E:38:65:9B:5C:A2:4B:58:34:21:93
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0c:c3:18:47:6a:c0:a7:38:90:04:5e:d9:46:1f:75:67:05:
83:01:fb:7a:31:6e:8b:3b:9e:2d:61:a9:7f:9f:f3:86:6b:a6:
12:91:dc:a0:9b:b8:60:8b:91:c9:34:a7:8a:56:9a:d0:62:df:
63:40:57:61:39:d9:9f:02:74:10:82:03:7e:ec:0d:01:d3:45:
b3:40:3c:65:23:c6:1e:9a:72:ec:73:74:dc:fe:88:78:d4:36:
9f:d8:0c:94:80:5d:fc:c9:48:57:e0:1c:d4:58:dc:bb:46:e5:
9f:62:98:1a:eb:a8:8e:06:82:9f:f2:b2:4e:43:9d:cc:2e:98:
ce:d8:4b:62:48:37:9c:ad:fc:c4:7f:7a:ce:76:d6:3e:28:d2:
91:35:68:28:d7:f6:3b:ed:18:0e:c1:39:01:1f:fa:85:3f:29:
9f:28:ba:fc:a4:9b:43:a6:4f:67:f3:49:33:ad:99:3f:8b:0d:
3a:7d:f5:b3:45:c2:dc:fd:5a:3a:22:9c:6e:7f:42:bd:0e:30:
fa:0e:ff:29:5c:a2:cf:af:ed:15:1d:db:e2:b9:93:91:af:6b:
2b:ce:61:5a:97:a4:51:da:ce:9a:64:d4:96:40:d0:e6:f5:50:
f6:7f:4b:fe:77:8a:60:22:ac:4d:bd:ae:f1:69:d4:39:4f:37:
02:93:4f:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPlRFnQBo+RpVUF5MRN3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTgzMWY3YmEzZGUyZmJlZjE2ZDQ2NDlmZDQ4NjBjMTVl
OWQ2YzMwHhcNMjYwNDE3MDcwMTA5WhcNMjYwNDE4MDcwMTA5WjAzMTEwLwYDVQQD
Eyg5OWZhZmMwNTE1Y2FlM2M2NTU1ZTM4NjU5YjVjYTI0YjU4MzQyMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCOYjeG5Nn+knHg6nSLpEGg/Bd/K
OUjlot6OpSDfC1Acga85OKHAtjRc/r51kD8RPgfoGkHspYPNk9WVheDkCt9V96Nw
QG/FtZbYESUQVj+mwqiCzWXamF3TX1m6JIiq+uAk4FBTdjkhUVieVntkLA/al+OF
LHu8XdpuD9FwluAxUXUXRVAGbh4ZXookEaCuji1txpoiZSKX65ZYe1YEZqRFdnMr
hPQhNEAR0djigC7WVh5aw757s3Yt729H6w77PrCjQYLuN9uJJMCZ4v1Xk9yC7rT6
pnwAheHaySixmPXO/IzWAlqZvkcHZuq2BRBoiPMXCZEApnkCS73zgnCS6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn6/AUVyuPGVV44ZZtcoktYNCGTMB8GA1UdIwQY
MBaAFAOYMfe6PeL77xbUZJ/UhgwV6dbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMt
MDM3YjVhN2I5NTQ0LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMtMDM3YjVhN2I5NTQ0
LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwzDGEdq
wKc4kARe2UYfdWcFgwH7ejFuizueLWGpf5/zhmumEpHcoJu4YIuRyTSnilaa0GLf
Y0BXYTnZnwJ0EIIDfuwNAdNFs0A8ZSPGHppy7HN03P6IeNQ2n9gMlIBd/MlIV+Ac
1Fjcu0bln2KYGuuojgaCn/KyTkOdzC6YzthLYkg3nK38xH96znbWPijSkTVoKNf2
O+0YDsE5AR/6hT8pnyi6/KSbQ6ZPZ/NJM62ZP4sNOn31s0XC3P1aOiKcbn9CvQ4w
+g7/KVyiz6/tFR3b4rmTka9rK85hWpekUdrOmmTUlkDQ5vVQ9n9L/neKYCKsTb2u
8WnUOU83ApNPJg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:32 2026 by rpki-client