Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier: b+RTyzJylB8VFdE6EZuUSd2ArMxZOFpQajLMxB3t1K4=
Subject key identifier: 6E:23:DB:9B:01:7A:79:21:E3:3A:8D:8D:46:33:6D:6D:D8:03:75:1E
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial: 01A1DE02CD15091C191115465F34357242EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number: 1A85
Signing time: Sun 15 Nov 2026 07:01:27 +0000
Manifest this update: Sun 15 Nov 2026 07:01:27 +0000
Manifest next update: Mon 16 Nov 2026 07:01:27 +0000
Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: OQayGIxyIE2pHGgvWBjQa0xqIgtca/ryiRvDKq6Lcjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:cd:15:09:1c:19:11:15:46:5f:34:35:72:42:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Validity
Not Before: Nov 15 07:01:27 2026 GMT
Not After : Nov 16 07:01:27 2026 GMT
Subject: CN=6e23db9b017a7921e33a8d8d46336d6dd803751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:ec:b1:e1:97:c1:a4:e6:cc:bc:5b:d9:8c:
6a:ef:6e:31:b1:28:e1:99:33:65:20:b7:4f:1b:4e:
aa:fe:7a:bb:d2:9a:ea:57:36:3d:e6:ba:b0:bf:92:
88:e0:8a:86:a7:8c:72:58:bd:68:f5:fb:1c:dd:69:
14:11:d1:dd:24:59:00:ce:e9:8a:77:db:36:30:3b:
86:a6:2c:52:c4:9e:ac:2c:af:9f:85:69:58:87:1a:
54:dd:0e:73:3d:30:a9:c2:90:c2:88:4e:bb:75:33:
ef:90:d4:97:f0:73:7e:75:1f:9c:bb:e6:12:39:67:
10:8d:3b:40:c4:dc:67:67:8b:2e:f8:bb:4c:df:fe:
23:04:98:64:35:14:09:25:8a:db:5d:ca:cb:09:a4:
d1:81:01:19:b1:08:85:83:54:26:e8:09:e3:6f:6e:
58:f2:fd:3d:a5:29:86:34:fa:58:ac:ff:7e:1d:10:
fb:4d:a2:61:a3:68:28:75:6f:a7:78:cf:80:7b:c5:
5b:23:84:85:e5:26:ff:96:99:6e:2c:02:89:19:f4:
47:73:06:dc:ab:8b:bb:c9:35:a4:fe:2f:74:4d:5f:
98:a0:ff:ec:80:4f:7c:ef:44:56:c4:d9:01:27:89:
04:75:c2:1a:59:49:37:38:bc:e4:4d:6a:29:d1:62:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:23:DB:9B:01:7A:79:21:E3:3A:8D:8D:46:33:6D:6D:D8:03:75:1E
X509v3 Authority Key Identifier:
keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d1:d8:db:9b:17:dc:12:c4:20:3b:2b:a5:4e:27:88:06:9a:
87:a3:7f:2c:2b:c4:40:31:b5:47:73:5e:fc:49:07:70:43:8d:
1c:13:a2:c6:6e:a9:05:16:23:83:b2:75:11:31:7c:b7:9e:b1:
8e:9a:79:ca:75:82:af:f7:39:78:7c:a4:e9:c5:b1:4b:22:8b:
2a:6c:45:bd:ad:d2:98:5a:3d:c5:25:f4:13:c9:fb:d1:a2:83:
f4:e6:e6:75:e2:d4:f9:08:0f:c3:0e:f0:48:27:73:76:dc:98:
2c:54:b9:30:12:e2:68:d0:a7:f9:d9:fd:9b:1d:66:d3:fd:e2:
be:1d:23:88:c2:d5:e7:89:c9:15:78:b2:2b:b2:11:68:f4:5e:
ec:02:d4:d7:19:79:79:64:c3:a1:02:92:33:77:07:96:ad:3d:
4b:e5:86:c9:75:b5:f5:b9:23:09:2a:ca:d3:cb:ac:ad:46:93:
2b:87:a1:fc:50:48:09:04:0b:bb:d3:2f:36:07:ec:ec:ca:76:
e1:82:a8:98:86:55:16:88:8a:d4:55:e3:76:30:ec:de:84:cd:
1d:d6:d3:61:88:fd:73:db:ba:95:c7:1a:2f:45:f1:54:8c:f2:
77:2b:50:dd:8f:a8:fd:52:a6:1f:a8:b8:c6:57:43:35:f7:49:
bf:f6:37:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAs0VCRwZERVGXzQ1ckLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZjVmYTQ2ZTFjNmIwNWNiZmVjOTc2OTIxMGNiMTUxNDdh
YmUyMzEwHhcNMjYxMTE1MDcwMTI3WhcNMjYxMTE2MDcwMTI3WjAzMTEwLwYDVQQD
Eyg2ZTIzZGI5YjAxN2E3OTIxZTMzYThkOGQ0NjMzNmQ2ZGQ4MDM3NTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppHsseGXwaTmzLxb2Yxq724xsSjh
mTNlILdPG06q/nq70prqVzY95rqwv5KI4IqGp4xyWL1o9fsc3WkUEdHdJFkAzumK
d9s2MDuGpixSxJ6sLK+fhWlYhxpU3Q5zPTCpwpDCiE67dTPvkNSX8HN+dR+cu+YS
OWcQjTtAxNxnZ4su+LtM3/4jBJhkNRQJJYrbXcrLCaTRgQEZsQiFg1Qm6Anjb25Y
8v09pSmGNPpYrP9+HRD7TaJho2godW+neM+Ae8VbI4SF5Sb/lpluLAKJGfRHcwbc
q4u7yTWk/i90TV+YoP/sgE9870RWxNkBJ4kEdcIaWUk3OLzkTWop0WJ9awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4j25sBenkh4zqNjUYzbW3YA3UeMB8GA1UdIwQY
MBaAFOf1+kbhxrBcv+yXaSEMsVFHq+IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMt
MGM0MTdlZmY0NzIwLzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMtMGM0MTdlZmY0NzIw
LzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9HY25sX
3BLEIDsrpU4niAaah6N/LCvEQDG1R3Ne/EkHcEONHBOixm6pBRYjg7J1ETF8t56x
jpp5ynWCr/c5eHyk6cWxSyKLKmxFva3SmFo9xSX0E8n70aKD9ObmdeLU+QgPww7w
SCdzdtyYLFS5MBLiaNCn+dn9mx1m0/3ivh0jiMLV54nJFXiyK7IRaPRe7ALU1xl5
eWTDoQKSM3cHlq09S+WGyXW19bkjCSrK08usrUaTK4eh/FBICQQLu9MvNgfs7Mp2
4YKomIZVFoiK1FXjdjDs3oTNHdbTYYj9c9u6lccaL0XxVIzydytQ3Y+o/VKmH6i4
xldDNfdJv/Y3GA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:50:36 2026 by rpki-client