Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: Qj4Qf7gLmS6fqm39NDa+pbHbKXO/rce349GXJSWfpEo=
Subject key identifier: F9:84:64:34:73:AC:0D:A3:ED:F4:C6:54:59:CE:3E:F8:85:B6:04:BF
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 01A0C7B4001B1ABD79BCEC0C8949215AEF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0FDC
Signing time: Tue 22 Sep 2026 06:00:57 +0000
Manifest this update: Tue 22 Sep 2026 06:00:57 +0000
Manifest next update: Wed 23 Sep 2026 06:00:57 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: erw+EhS9z1MV8amG1VuU4QgI2Du9YQJccYjyjfI+b2Y=)
2: X5xasRCAPW_8AqrOyyfOnavLV3w.roa (hash: MKvIXTaUYcBmqhG/1QMaETUtrI13kI75foPOMSHT8WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b4:00:1b:1a:bd:79:bc:ec:0c:89:49:21:5a:ef:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Sep 22 06:00:57 2026 GMT
Not After : Sep 23 06:00:57 2026 GMT
Subject: CN=f984643473ac0da3edf4c65459ce3ef885b604bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:75:dc:b3:e4:26:ae:c0:5f:8c:50:a7:c2:
83:db:dd:c0:d8:5c:bb:1e:d8:d0:25:c5:88:5d:bd:
20:2b:bf:91:f8:92:f1:41:a7:a5:ac:bc:a9:6b:b5:
3a:07:1e:2b:7c:95:7b:17:9c:0f:59:dc:9a:49:56:
d4:b5:42:35:42:64:39:c3:49:a2:de:61:e3:e2:24:
d7:c7:58:96:92:9a:bf:39:3b:ea:e7:95:ba:b1:3d:
0b:ce:a4:ec:e3:85:3b:38:0c:bd:4c:c1:7e:f8:53:
04:0d:9d:88:4f:78:fb:83:d6:75:40:2a:0e:36:65:
52:b2:72:4a:67:85:61:a5:66:95:58:5b:c4:61:d6:
fb:46:c5:81:57:26:33:41:6f:c4:cb:39:82:fa:6e:
1c:8e:21:18:b3:1c:f9:85:d6:86:0e:81:23:1f:62:
e8:44:5e:89:a9:4c:f3:20:67:a8:a1:34:7f:15:8d:
fb:54:b0:e6:8e:00:99:7c:b8:0c:0f:35:4d:6b:58:
f8:ca:38:07:d4:3e:0a:26:ad:66:53:57:b2:d0:8b:
57:37:f7:50:b0:20:75:b4:4e:4a:18:09:14:3d:b9:
74:bc:37:ad:c5:87:19:eb:74:1f:96:2e:5f:f9:b9:
67:fc:bd:e0:74:c0:e2:88:f4:35:05:ed:00:f1:6d:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:64:34:73:AC:0D:A3:ED:F4:C6:54:59:CE:3E:F8:85:B6:04:BF
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:04:30:94:a8:a0:c7:29:1d:9e:0a:49:0a:a9:b7:2e:95:f4:
ed:00:0e:15:06:f1:f8:76:c1:b8:d9:92:ed:0d:dc:88:1d:f4:
ea:d7:e4:fa:87:42:15:e0:ad:35:3c:14:f3:1c:ad:bb:1a:03:
c1:30:01:c8:a3:99:41:69:2d:45:2e:52:6c:ba:c2:a2:62:2c:
82:64:b3:5e:35:ce:4f:a0:29:41:07:c5:2c:ab:3a:7d:ac:9a:
1a:db:21:b5:67:a7:5d:c4:57:9e:e6:10:18:f5:85:e0:bf:ff:
29:a5:2e:d7:53:cf:10:ef:e8:09:05:33:a9:98:4b:54:b0:64:
31:59:3c:b3:e9:c4:e9:13:96:b8:0d:37:0b:c7:ee:6b:c0:06:
66:e6:6f:12:67:c0:1a:f2:1d:35:54:8d:1d:a9:9e:1c:25:51:
d6:30:78:65:71:30:1a:63:99:1f:da:67:b5:2b:76:37:22:3d:
31:1e:b8:d4:83:64:7b:58:75:89:0f:f0:bb:f3:f8:dd:15:1b:
d2:20:b2:73:51:cc:7d:93:1f:15:9f:e5:b5:f1:cf:81:19:55:
90:c4:c6:00:3b:24:c9:e0:5e:64:65:8e:9b:a9:af:44:bc:b9:
6e:3e:ad:cc:65:67:2b:77:2b:f3:48:7b:c6:01:43:b5:fd:d6:
5e:30:78:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHtAAbGr15vOwMiUkhWu8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZjgyNGU0YmM1Y2Q4MTg4NmVjMjRiNWUxNTI2NmU5NWY4
ZGRmOTMwHhcNMjYwOTIyMDYwMDU3WhcNMjYwOTIzMDYwMDU3WjAzMTEwLwYDVQQD
EyhmOTg0NjQzNDczYWMwZGEzZWRmNGM2NTQ1OWNlM2VmODg1YjYwNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx913LPkJq7AX4xQp8KD293A2Fy7
HtjQJcWIXb0gK7+R+JLxQaelrLypa7U6Bx4rfJV7F5wPWdyaSVbUtUI1QmQ5w0mi
3mHj4iTXx1iWkpq/OTvq55W6sT0LzqTs44U7OAy9TMF++FMEDZ2IT3j7g9Z1QCoO
NmVSsnJKZ4VhpWaVWFvEYdb7RsWBVyYzQW/EyzmC+m4cjiEYsxz5hdaGDoEjH2Lo
RF6JqUzzIGeooTR/FY37VLDmjgCZfLgMDzVNa1j4yjgH1D4KJq1mU1ey0ItXN/dQ
sCB1tE5KGAkUPbl0vDetxYcZ63Qfli5f+bln/L3gdMDiiPQ1Be0A8W2wXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmEZDRzrA2j7fTGVFnOPviFtgS/MB8GA1UdIwQY
MBaAFOb4JOS8XNgYhuwkteFSZulfjd+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQt
YTg5Zjk1OWJlMjA0LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQtYTg5Zjk1OWJlMjA0
LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgQwlKig
xykdngpJCqm3LpX07QAOFQbx+HbBuNmS7Q3ciB306tfk+odCFeCtNTwU8xytuxoD
wTAByKOZQWktRS5SbLrComIsgmSzXjXOT6ApQQfFLKs6fayaGtshtWenXcRXnuYQ
GPWF4L//KaUu11PPEO/oCQUzqZhLVLBkMVk8s+nE6ROWuA03C8fua8AGZuZvEmfA
GvIdNVSNHameHCVR1jB4ZXEwGmOZH9pntSt2NyI9MR641INke1h1iQ/wu/P43RUb
0iCyc1HMfZMfFZ/ltfHPgRlVkMTGADskyeBeZGWOm6mvRLy5bj6tzGVnK3cr80h7
xgFDtf3WXjB4dA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:26:37 2026 by rpki-client