Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
File: r5aNFt0rQdNStf0zxJs-xP2tQlg.mft (raw, json)
Hash identifier: NsVdcGb8LfDXSw6RYmy7g5Ocw0bhpdIl6As++w6rhTQ=
Subject key identifier: B1:F7:5C:D9:D8:C2:04:2B:EB:46:30:E5:CA:D5:95:87:D7:47:CE:03
Authority key identifier: AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
Certificate issuer: /CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Certificate serial: 019DA3E67D5A0DB22E600CA5B5E7BDEC0F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
Manifest number: 11D7
Signing time: Sun 19 Apr 2026 04:01:24 +0000
Manifest this update: Sun 19 Apr 2026 04:01:24 +0000
Manifest next update: Mon 20 Apr 2026 04:01:24 +0000
Files and hashes: 1: r5aNFt0rQdNStf0zxJs-xP2tQlg.crl (hash: k1oEn2zWap0VpcOnG+rSx3CdZVw6poWvNWpemmmAmcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:7d:5a:0d:b2:2e:60:0c:a5:b5:e7:bd:ec:0f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Validity
Not Before: Apr 19 04:01:24 2026 GMT
Not After : Apr 20 04:01:24 2026 GMT
Subject: CN=b1f75cd9d8c2042beb4630e5cad59587d747ce03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:66:c3:bc:6b:e7:1c:7d:bb:7c:64:97:f8:70:
33:d3:c7:f9:19:28:45:29:37:eb:ae:e3:73:64:43:
f0:f2:98:79:1b:bf:b4:1b:c6:ae:d9:57:15:31:9e:
5d:b5:d8:6c:10:74:c6:84:a2:60:52:34:db:61:b2:
cb:9f:ba:ac:0e:bd:5a:d7:0e:2f:19:d1:e3:9b:29:
ca:eb:84:b5:84:24:18:e3:ee:68:bc:f3:46:2b:ca:
39:dc:4f:bd:5f:94:95:ae:eb:a0:b1:22:99:98:9d:
a3:7a:89:af:ff:aa:5f:5a:52:b6:d0:73:73:75:4d:
ce:f2:1f:8b:0a:2a:17:7a:04:83:4a:ff:cd:c0:0f:
12:75:b4:18:bf:f4:6a:17:34:7b:f8:dd:f7:e7:c9:
6c:81:60:6f:66:ae:24:6a:81:8e:6d:6a:a9:69:be:
ea:c6:af:d5:e5:9b:2b:29:2d:27:16:43:15:80:21:
14:f2:f2:08:b6:83:ea:47:ae:e8:df:38:db:0e:bf:
86:d0:e4:1c:41:ca:1b:f4:48:4c:a1:28:0f:de:ea:
9c:fd:e5:29:bd:7e:e7:d1:ec:e4:58:6d:d9:7c:a6:
12:ec:a2:6a:0f:82:5c:c5:bc:9d:d1:fd:77:7a:a2:
9a:f5:84:f0:77:23:5d:cf:4f:64:e0:2f:42:34:7e:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F7:5C:D9:D8:C2:04:2B:EB:46:30:E5:CA:D5:95:87:D7:47:CE:03
X509v3 Authority Key Identifier:
keyid:AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0c:3c:57:8d:36:e6:77:73:9c:d5:36:1d:90:17:49:53:2a:
45:07:a4:ed:30:56:4b:ce:0e:2f:a8:31:68:12:91:64:72:df:
2e:60:69:a0:f2:59:26:00:b5:39:29:e1:b4:91:0e:6b:f4:fd:
e6:db:ca:e9:c9:05:ec:fd:32:4d:23:aa:b7:20:35:3e:c0:2e:
68:18:c2:2d:83:d2:55:af:11:de:30:8b:f5:0f:a9:75:92:59:
bd:cc:4c:9f:46:5a:1a:c6:0c:d3:fe:cd:25:9d:56:8d:53:b2:
35:a4:eb:01:fd:62:5f:14:5a:38:aa:60:a7:cf:b8:82:85:b1:
6c:54:56:11:21:e5:fb:bf:9d:7b:08:3d:90:f5:a1:b3:f5:e2:
97:6e:69:83:80:16:46:c2:35:1a:b5:28:d8:5e:f6:7f:62:d3:
c3:b0:f3:d1:29:cf:19:26:9a:b7:97:ae:be:59:05:81:51:e3:
29:9b:a2:51:17:5b:be:5d:4f:1b:db:61:61:bb:84:0a:e8:ee:
71:2a:48:79:d3:26:a5:c4:59:2d:b8:03:7f:e1:bb:9f:7e:3c:
8e:ba:25:f3:37:fd:39:06:c9:49:0e:44:20:d5:6a:ff:1d:47:
39:fa:d2:25:74:19:9c:bf:60:1f:5b:50:62:81:ca:68:56:99:
98:01:ea:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5n1aDbIuYAyltee97A+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTY4ZDE2ZGQyYjQxZDM1MmI1ZmQzM2M0OWIzZWM0ZmRh
ZDQyNTgwHhcNMjYwNDE5MDQwMTI0WhcNMjYwNDIwMDQwMTI0WjAzMTEwLwYDVQQD
EyhiMWY3NWNkOWQ4YzIwNDJiZWI0NjMwZTVjYWQ1OTU4N2Q3NDdjZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WbDvGvnHH27fGSX+HAz08f5GShF
KTfrruNzZEPw8ph5G7+0G8au2VcVMZ5dtdhsEHTGhKJgUjTbYbLLn7qsDr1a1w4v
GdHjmynK64S1hCQY4+5ovPNGK8o53E+9X5SVruugsSKZmJ2jeomv/6pfWlK20HNz
dU3O8h+LCioXegSDSv/NwA8SdbQYv/RqFzR7+N3358lsgWBvZq4kaoGObWqpab7q
xq/V5ZsrKS0nFkMVgCEU8vIItoPqR67o3zjbDr+G0OQcQcob9EhMoSgP3uqc/eUp
vX7n0ezkWG3ZfKYS7KJqD4Jcxbyd0f13eqKa9YTwdyNdz09k4C9CNH7wBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH3XNnYwgQr60Yw5crVlYfXR84DMB8GA1UdIwQY
MBaAFK+WjRbdK0HTUrX9M8SbPsT9rUJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVhTkZ0MHJRZE5TdGYwenhKcy14UDJ0UWxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iZTQzOWUtZDNjOC00OGExLWE3Yjct
YzI5NmVjNGIyMTcwLzEvcjVhTkZ0MHJRZE5TdGYwenhKcy14UDJ0UWxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iZTQzOWUtZDNjOC00OGExLWE3YjctYzI5NmVjNGIyMTcw
LzEvcjVhTkZ0MHJRZE5TdGYwenhKcy14UDJ0UWxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAw8V402
5ndznNU2HZAXSVMqRQek7TBWS84OL6gxaBKRZHLfLmBpoPJZJgC1OSnhtJEOa/T9
5tvK6ckF7P0yTSOqtyA1PsAuaBjCLYPSVa8R3jCL9Q+pdZJZvcxMn0ZaGsYM0/7N
JZ1WjVOyNaTrAf1iXxRaOKpgp8+4goWxbFRWESHl+7+dewg9kPWhs/Xil25pg4AW
RsI1GrUo2F72f2LTw7Dz0SnPGSaat5euvlkFgVHjKZuiURdbvl1PG9thYbuECuju
cSpIedMmpcRZLbgDf+G7n348jrol8zf9OQbJSQ5EINVq/x1HOfrSJXQZnL9gH1tQ
YoHKaFaZmAHqmg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:09 2026 by rpki-client