Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
File: 5jAbF0RrPssIF-QA6YL3Km2AHTE.mft (raw, json)
Hash identifier: uUXs/+gvQ6MTdzJCFVciW30SvrU1x1c3vbMoL70t04M=
Subject key identifier: 7D:86:1F:C5:E9:8E:C7:A3:D1:58:9A:06:39:B5:2D:60:93:A8:64:FC
Authority key identifier: E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
Certificate issuer: /CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Certificate serial: 01A1242F429AF36CAD1157D5FF40FD540808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
Manifest number: 0147
Signing time: Sat 10 Oct 2026 05:00:39 +0000
Manifest this update: Sat 10 Oct 2026 05:00:39 +0000
Manifest next update: Sun 11 Oct 2026 05:00:39 +0000
Files and hashes: 1: 5jAbF0RrPssIF-QA6YL3Km2AHTE.crl (hash: nsQ1yxA9XQJOecHvZO+B4NOM8QmArlm7dYyyY2We0HE=)
2: y8-zYgb68sCKmok28fSORVZTV7k.roa (hash: kb393sHwSxydXSQ1l80qzXOkKVqcGzDmY/nU6zerbuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:42:9a:f3:6c:ad:11:57:d5:ff:40:fd:54:08:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Validity
Not Before: Oct 10 05:00:39 2026 GMT
Not After : Oct 11 05:00:39 2026 GMT
Subject: CN=7d861fc5e98ec7a3d1589a0639b52d6093a864fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:7c:6a:6c:98:99:45:43:2a:be:3a:e2:76:
c5:dc:24:47:70:b2:d5:e2:10:74:52:3d:91:ef:49:
c2:7d:91:38:fb:35:ad:1a:61:5b:b2:74:bd:e7:0a:
97:b4:db:b8:a2:ab:df:8c:36:76:8b:08:ad:2d:69:
1c:e0:bb:db:f6:2f:4d:71:00:b3:66:23:26:c9:04:
fd:81:df:d6:88:f9:48:aa:1e:3d:37:c3:b4:7b:5d:
24:b6:2d:65:fa:ae:73:da:1a:a3:53:f3:5e:d0:05:
37:a7:41:fd:55:0b:88:b1:fa:ec:c3:4a:06:39:70:
b0:a7:3d:06:bf:91:99:b3:20:60:ae:13:88:d8:57:
04:c5:ab:ec:e5:f5:2e:e2:22:10:7d:b0:f2:40:2f:
0b:90:8c:59:87:90:52:5d:c3:0d:49:13:5f:32:b0:
ca:99:c0:bf:aa:c1:0a:f0:e3:5f:d2:1e:62:d9:f0:
e1:d0:83:cc:af:2b:d1:a7:19:70:ce:b0:27:1a:cb:
e2:cb:16:65:ea:4b:81:b3:88:f6:b7:42:d5:92:f4:
80:42:cf:b3:3d:60:14:2d:eb:5c:d6:86:cf:14:05:
26:20:c5:09:48:10:0b:9d:77:f8:68:43:03:75:73:
ab:92:ce:52:5d:5f:cb:a5:53:94:e3:b5:f5:54:04:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:1F:C5:E9:8E:C7:A3:D1:58:9A:06:39:B5:2D:60:93:A8:64:FC
X509v3 Authority Key Identifier:
keyid:E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6b:67:55:9e:9f:54:e0:4e:2c:98:dc:0c:1f:5b:23:5f:33:
ce:e9:f7:69:70:60:62:31:7b:88:2f:a7:4d:ca:d7:b3:3a:18:
72:d7:ed:26:83:38:d1:5b:ed:f4:25:64:a4:97:9f:b3:36:36:
c9:d4:76:99:fa:5f:77:f9:f1:44:b5:7e:77:7f:2b:b8:44:5b:
85:d3:86:f5:b0:60:bb:b8:a9:73:17:c7:52:b8:7f:04:da:8d:
ed:78:e1:26:5c:31:49:dc:49:ee:ed:6a:80:4d:e5:e3:d6:1c:
60:e7:4c:e7:3a:7f:22:a4:6b:de:9e:2f:24:e7:82:1c:38:f6:
84:88:c8:65:0e:a2:02:0c:e5:c6:e1:82:9e:5f:83:0b:9a:e7:
63:44:45:43:17:69:38:db:3e:33:fe:5f:6d:97:2f:1f:4f:b5:
3a:46:d1:06:8a:6f:92:28:e2:c9:5f:f4:f2:64:8d:08:19:b1:
1c:55:f0:0b:bf:d2:d9:9e:c1:e6:07:ce:14:dc:aa:d6:9d:f7:
7c:86:02:0b:7f:61:9f:41:8c:83:d1:01:01:64:1c:93:68:38:
2c:48:95:b3:c8:72:b4:8e:66:76:d8:1c:26:08:27:ee:21:29:
dc:41:3f:bb:f9:3d:cd:70:22:d5:f9:16:4f:b9:92:7d:d3:65:
71:92:87:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEkL0Ka82ytEVfV/0D9VAgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzAxYjE3NDQ2YjNlY2IwODE3ZTQwMGU5ODJmNzJhNmQ4
MDFkMzEwHhcNMjYxMDEwMDUwMDM5WhcNMjYxMDExMDUwMDM5WjAzMTEwLwYDVQQD
Eyg3ZDg2MWZjNWU5OGVjN2EzZDE1ODlhMDYzOWI1MmQ2MDkzYTg2NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7d8amyYmUVDKr464nbF3CRHcLLV
4hB0Uj2R70nCfZE4+zWtGmFbsnS95wqXtNu4oqvfjDZ2iwitLWkc4Lvb9i9NcQCz
ZiMmyQT9gd/WiPlIqh49N8O0e10kti1l+q5z2hqjU/Ne0AU3p0H9VQuIsfrsw0oG
OXCwpz0Gv5GZsyBgrhOI2FcExavs5fUu4iIQfbDyQC8LkIxZh5BSXcMNSRNfMrDK
mcC/qsEK8ONf0h5i2fDh0IPMryvRpxlwzrAnGsviyxZl6kuBs4j2t0LVkvSAQs+z
PWAULetc1obPFAUmIMUJSBALnXf4aEMDdXOrks5SXV/LpVOU47X1VASPcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2GH8Xpjsej0ViaBjm1LWCTqGT8MB8GA1UdIwQY
MBaAFOYwGxdEaz7LCBfkAOmC9yptgB0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zZDNiOTMtMDNkNy00OGFmLTllOTYt
ZDcyMDNjNTZkZmVmLzEvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zZDNiOTMtMDNkNy00OGFmLTllOTYtZDcyMDNjNTZkZmVm
LzEvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWtnVZ6f
VOBOLJjcDB9bI18zzun3aXBgYjF7iC+nTcrXszoYctftJoM40Vvt9CVkpJefszY2
ydR2mfpfd/nxRLV+d38ruERbhdOG9bBgu7ipcxfHUrh/BNqN7XjhJlwxSdxJ7u1q
gE3l49YcYOdM5zp/IqRr3p4vJOeCHDj2hIjIZQ6iAgzlxuGCnl+DC5rnY0RFQxdp
ONs+M/5fbZcvH0+1OkbRBopvkijiyV/08mSNCBmxHFXwC7/S2Z7B5gfOFNyq1p33
fIYCC39hn0GMg9EBAWQck2g4LEiVs8hytI5mdtgcJggn7iEp3EE/u/k9zXAi1fkW
T7mSfdNlcZKHaA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:38:25 2026 by rpki-client