Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: 3WfciLWlkXbBxIO/ag3ZbmL+ifafaU7hiQvYivrRG3Y=
Subject key identifier: 61:54:2D:6C:89:E9:64:A4:D9:97:74:D3:35:24:4B:73:B7:42:BD:1F
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019FA7BDD724758B3EAFFE33D7B5690AF5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 068D
Signing time: Tue 28 Jul 2026 08:01:04 +0000
Manifest this update: Tue 28 Jul 2026 08:01:04 +0000
Manifest next update: Wed 29 Jul 2026 08:01:04 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: YIdTjuZtvr6TIGxCz7DvYJVfuFDheRMP9R40kGYtzSk=)
2: VC6pU8sH53fsSXhpjxvq2spJkW8.asa (hash: eY4uxqqdpm3pkCV4oqysR7RZdD/oSeWBc0FKFASjw1g=)
3: XaMeeXQ5ysc8kABhh0l_VC0xvRQ.roa (hash: f1b46uPGTd/9X8UPdm3VptVXLZpHjki1wLcZZ1TfO/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:d7:24:75:8b:3e:af:fe:33:d7:b5:69:0a:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jul 28 08:01:04 2026 GMT
Not After : Jul 29 08:01:04 2026 GMT
Subject: CN=61542d6c89e964a4d99774d335244b73b742bd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:23:14:1d:09:0b:97:e1:c5:5d:e8:4d:f5:
68:5d:0d:4a:23:23:bd:d6:54:26:f1:26:3d:c4:96:
5d:18:05:da:51:c1:76:44:01:56:7d:2e:15:3b:10:
45:64:c9:a6:e5:49:72:ad:b1:31:fe:2d:94:83:35:
91:7f:96:4b:e2:c4:bd:24:b6:dc:de:e0:27:07:ab:
c8:88:7e:6a:2e:b2:2f:ca:bd:8d:16:1a:b3:71:c4:
6f:50:4a:9b:1e:09:4b:de:6b:87:2c:60:87:3f:17:
4e:df:ec:68:e1:68:70:ed:c4:3a:1f:47:d1:1b:94:
88:1d:4e:44:ae:8e:08:c4:21:34:32:eb:3a:0c:fc:
f9:7e:78:0d:b2:db:12:01:03:d7:80:6c:a6:1e:16:
a8:1f:d7:f8:22:bb:5c:b9:1d:cd:f4:e3:08:db:d9:
b7:12:2d:a0:c3:34:b7:c3:ba:3c:33:06:f3:48:8c:
b5:b6:b9:9d:53:5c:b6:ca:70:7c:c1:e0:18:67:58:
c7:ce:fc:a7:96:e0:f4:6e:a7:60:4f:bc:1d:02:45:
90:2b:2c:bf:7a:7b:ae:55:42:4e:76:13:0b:78:84:
9b:48:3d:67:dc:85:5f:95:2f:b4:64:e5:7f:bb:38:
6f:d7:43:95:a4:74:96:7c:a3:b5:28:43:ee:1b:79:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:2D:6C:89:E9:64:A4:D9:97:74:D3:35:24:4B:73:B7:42:BD:1F
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:94:f2:c0:39:c9:88:a5:42:0a:58:f7:9f:03:e2:32:e5:89:
27:39:b9:fd:a9:30:bf:d7:0a:c0:40:b1:c3:8a:7b:fb:05:34:
ae:0b:aa:55:7f:b5:37:89:51:d4:78:e2:44:95:84:ac:ac:aa:
af:e0:be:bd:2b:f9:83:4e:d6:64:85:c2:5d:8a:5f:c6:57:33:
6d:55:00:d0:a8:0e:be:60:25:6b:98:bf:cb:d7:2a:48:f2:98:
50:da:a6:99:ef:df:41:d9:12:6d:81:01:5d:9b:c4:15:cc:83:
50:57:12:64:6a:f5:b9:9c:96:04:fc:45:d0:3d:a0:64:83:f9:
eb:f8:ef:7e:c8:16:c7:56:44:ca:70:c5:b0:05:06:91:b3:84:
b9:ff:5f:1c:18:26:9d:d1:22:04:66:5a:28:b5:b9:a6:fb:ec:
e8:86:75:ec:ab:3b:03:9c:1a:7a:c7:06:aa:6d:a6:68:4f:77:
49:05:7b:ee:44:ce:7f:74:f6:7b:ba:99:e9:52:fd:36:99:34:
10:66:c8:b5:cb:89:24:13:29:a6:39:e8:4f:bf:1e:e1:53:52:
71:ac:1a:27:25:77:14:12:c6:30:ec:13:91:5e:16:ff:0a:99:
fc:c5:e6:b3:28:1e:11:f7:f7:1f:9a:de:f2:7c:55:29:64:0f:
24:d5:4e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvdckdYs+r/4z17VpCvXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzQ1NWI4YThiMDU3NmQ2Zjk0ZjdlMDE0ZjZiMzRkNWFh
NmM0ZDcwHhcNMjYwNzI4MDgwMTA0WhcNMjYwNzI5MDgwMTA0WjAzMTEwLwYDVQQD
Eyg2MTU0MmQ2Yzg5ZTk2NGE0ZDk5Nzc0ZDMzNTI0NGI3M2I3NDJiZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3acjFB0JC5fhxV3oTfVoXQ1KIyO9
1lQm8SY9xJZdGAXaUcF2RAFWfS4VOxBFZMmm5UlyrbEx/i2UgzWRf5ZL4sS9JLbc
3uAnB6vIiH5qLrIvyr2NFhqzccRvUEqbHglL3muHLGCHPxdO3+xo4Whw7cQ6H0fR
G5SIHU5Ero4IxCE0Mus6DPz5fngNstsSAQPXgGymHhaoH9f4IrtcuR3N9OMI29m3
Ei2gwzS3w7o8MwbzSIy1trmdU1y2ynB8weAYZ1jHzvynluD0bqdgT7wdAkWQKyy/
enuuVUJOdhMLeISbSD1n3IVflS+0ZOV/uzhv10OVpHSWfKO1KEPuG3lWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFULWyJ6WSk2Zd00zUkS3O3Qr0fMB8GA1UdIwQY
MBaAFOV0VbiosFdtb5T34BT2s01apsTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDkt
MDAyMzNhZTUwYjUyLzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDktMDAyMzNhZTUwYjUy
LzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJTywDnJ
iKVCClj3nwPiMuWJJzm5/akwv9cKwECxw4p7+wU0rguqVX+1N4lR1HjiRJWErKyq
r+C+vSv5g07WZIXCXYpfxlczbVUA0KgOvmAla5i/y9cqSPKYUNqmme/fQdkSbYEB
XZvEFcyDUFcSZGr1uZyWBPxF0D2gZIP56/jvfsgWx1ZEynDFsAUGkbOEuf9fHBgm
ndEiBGZaKLW5pvvs6IZ17Ks7A5waescGqm2maE93SQV77kTOf3T2e7qZ6VL9Npk0
EGbItcuJJBMppjnoT78e4VNScawaJyV3FBLGMOwTkV4W/wqZ/MXmsygeEff3H5re
8nxVKWQPJNVOzQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:10 2026 by rpki-client