Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: awqbkVRlr0gzilpiwf3DkWoRDlRoR/8d1NlgzZ71rFY=
Subject key identifier: 21:54:79:13:D0:7D:6E:27:84:69:D1:67:B5:B7:90:B6:A3:37:F1:7B
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 01A0CA7E3852555EF8898770CB432ECAABEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 19:01:04 +0000
Manifest this update: Tue 22 Sep 2026 19:01:04 +0000
Manifest next update: Wed 23 Sep 2026 19:01:04 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: 4TGgFpqdrg5KQ1BCxKwc1XCaaIVbCyfoew+9k2X5Ds4=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:38:52:55:5e:f8:89:87:70:cb:43:2e:ca:ab:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Sep 22 19:01:04 2026 GMT
Not After : Sep 23 19:01:04 2026 GMT
Subject: CN=21547913d07d6e278469d167b5b790b6a337f17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:df:65:24:7e:c1:75:eb:82:6e:3a:19:40:
7e:53:74:f4:c1:23:ac:ea:59:b0:cd:3a:b8:bd:07:
bb:5c:66:c1:9e:1f:78:21:84:99:97:20:05:37:e4:
a2:76:87:08:d5:d5:25:42:81:e8:d7:d3:30:e5:53:
8c:4a:04:d1:32:fa:c0:18:67:74:c7:b2:e4:b8:1f:
1a:e1:16:4a:61:d9:08:66:1d:27:d0:9d:5c:69:dd:
10:d7:6e:5b:c4:d7:e7:fb:b5:97:9d:ed:f8:dc:fd:
12:65:7d:cc:c9:0b:5c:52:61:8a:c6:fb:90:e7:03:
90:11:fd:52:90:48:b0:98:1a:05:25:9e:fa:ce:b9:
6d:54:7e:2b:ab:e1:4a:8c:da:4a:17:a1:e2:b6:3a:
ab:1e:aa:5f:ca:c1:38:4a:83:48:b9:f4:08:f4:7d:
82:b1:0d:f1:1e:dd:54:9c:48:3d:f7:44:80:2e:50:
da:8a:79:e8:0c:f6:97:f3:51:01:e3:58:a5:33:9a:
54:9d:07:00:fb:9e:ef:22:5a:56:54:83:ef:13:6a:
69:2f:90:e0:3c:6a:76:94:cc:f7:52:3f:e2:ff:2e:
94:ae:0e:77:e7:3a:0f:a0:d5:43:3a:95:2b:d7:b1:
c7:aa:5e:1f:c4:67:f7:cd:4a:0f:6f:c5:08:b1:e2:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:54:79:13:D0:7D:6E:27:84:69:D1:67:B5:B7:90:B6:A3:37:F1:7B
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:92:f2:8c:80:03:ea:e5:e8:e8:a8:c5:da:64:02:39:4d:83:
9c:fa:32:e5:2d:f1:13:6c:93:0f:2e:ed:69:83:03:b8:94:35:
74:6d:a5:5e:b3:4b:bc:48:a0:50:db:f6:13:94:96:41:d5:0a:
12:f9:8e:a0:35:10:87:bd:42:1d:8e:e0:b1:74:ea:ec:35:26:
1c:a7:d7:75:7a:4e:f4:14:13:86:db:bb:d9:a8:02:ba:55:3e:
b1:cc:c3:68:4f:58:e6:c8:4f:ef:b5:e0:d1:64:03:86:8f:d8:
f5:27:df:7b:10:71:ce:f3:c3:56:c8:07:24:a1:ee:80:17:56:
c8:21:5b:58:37:ef:10:07:6d:29:c5:7f:e5:e9:4e:b3:05:31:
e0:0d:87:4f:07:42:4d:26:b9:b7:6d:be:f9:62:be:7f:40:68:
d0:ac:61:63:28:ac:2d:29:4b:3d:b3:53:3e:6c:0d:f1:46:73:
68:6b:25:ce:5e:46:30:13:cf:c9:87:80:b0:ea:7d:b6:71:14:
de:5d:e5:19:ee:4f:3e:78:b5:7f:b1:1e:3d:de:4b:bc:fc:c2:
d7:d3:d0:31:94:21:c4:47:e2:b2:0a:e8:b3:84:d0:02:4b:f0:
77:4e:9f:ba:fa:2b:17:eb:a3:e2:d1:f7:76:3c:e1:37:ed:17:
6f:f5:f3:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfjhSVV74iYdwy0MuyqvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3
NTU4MjYwHhcNMjYwOTIyMTkwMTA0WhcNMjYwOTIzMTkwMTA0WjAzMTEwLwYDVQQD
EygyMTU0NzkxM2QwN2Q2ZTI3ODQ2OWQxNjdiNWI3OTBiNmEzMzdmMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjXfZSR+wXXrgm46GUB+U3T0wSOs
6lmwzTq4vQe7XGbBnh94IYSZlyAFN+SidocI1dUlQoHo19Mw5VOMSgTRMvrAGGd0
x7LkuB8a4RZKYdkIZh0n0J1cad0Q125bxNfn+7WXne343P0SZX3MyQtcUmGKxvuQ
5wOQEf1SkEiwmBoFJZ76zrltVH4rq+FKjNpKF6HitjqrHqpfysE4SoNIufQI9H2C
sQ3xHt1UnEg990SALlDainnoDPaX81EB41ilM5pUnQcA+57vIlpWVIPvE2ppL5Dg
PGp2lMz3Uj/i/y6Urg535zoPoNVDOpUr17HHql4fxGf3zUoPb8UIseL6+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFUeRPQfW4nhGnRZ7W3kLajN/F7MB8GA1UdIwQY
MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt
ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw
LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZLyjIAD
6uXo6KjF2mQCOU2DnPoy5S3xE2yTDy7taYMDuJQ1dG2lXrNLvEigUNv2E5SWQdUK
EvmOoDUQh71CHY7gsXTq7DUmHKfXdXpO9BQThtu72agCulU+sczDaE9Y5shP77Xg
0WQDho/Y9SffexBxzvPDVsgHJKHugBdWyCFbWDfvEAdtKcV/5elOswUx4A2HTwdC
TSa5t22++WK+f0Bo0KxhYyisLSlLPbNTPmwN8UZzaGslzl5GMBPPyYeAsOp9tnEU
3l3lGe5PPni1f7EePd5LvPzC19PQMZQhxEfisgros4TQAkvwd06fuvorF+uj4tH3
djzhN+0Xb/XzKQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:02:16 2026 by rpki-client