Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: uNte+sMzVDqH6agIGEUQp/boC23dEG7qtztq4qn88C0=
Subject key identifier: 64:17:E2:8D:FA:D3:59:57:AF:90:7E:71:5F:0E:FD:CA:A4:B2:BC:13
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 01A0C66AE061EC699F289818466ED0598C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 00:01:28 +0000
Manifest this update: Tue 22 Sep 2026 00:01:28 +0000
Manifest next update: Wed 23 Sep 2026 00:01:28 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: z9hsNAiJneQsCxfs2q/fdnqL47PQ4Cg+Hww5h7bD0Tw=)
2: Y53-K6eCcM2LGOvi8Fn2PE_O8Hs.roa (hash: epaNlilaUn33+8n2mw835ikIL/eJJhBznXtCVWydLWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:e0:61:ec:69:9f:28:98:18:46:6e:d0:59:8c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Sep 22 00:01:28 2026 GMT
Not After : Sep 23 00:01:28 2026 GMT
Subject: CN=6417e28dfad35957af907e715f0efdcaa4b2bc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:32:be:91:3c:bd:5a:0e:8a:e6:97:27:83:
ab:2e:cf:c9:74:a1:3d:06:80:1c:6c:f1:42:a2:8f:
6d:b7:08:6b:15:e5:19:af:c7:6f:55:39:25:70:d8:
bd:e8:b4:e6:12:a1:9a:cd:1c:65:b4:76:e3:ac:52:
a7:43:21:f7:0c:a3:fb:98:8b:b0:c3:4b:d3:ad:e9:
90:51:03:cd:92:4c:d0:ec:52:5d:d2:d4:f6:5e:47:
7a:09:e0:16:89:89:84:26:b0:05:60:48:77:15:e5:
54:27:ee:cd:8c:56:6e:54:25:76:62:79:84:e1:8c:
1b:02:55:a9:c4:7d:dd:8a:3d:f5:65:9a:bb:91:b7:
05:0b:63:8a:c2:95:dc:90:6f:fa:cc:eb:24:fc:ec:
2c:67:3f:bc:c8:7a:ed:94:6e:8d:cd:93:bd:b6:8d:
50:e3:a3:fb:c8:13:d2:87:bc:3e:47:b3:31:ac:40:
a3:93:77:37:91:78:d6:e0:08:b3:b9:c3:ff:e1:e7:
40:f3:51:a5:ed:84:16:f5:e4:ca:d6:8b:84:15:24:
13:75:07:07:78:84:d7:81:65:68:18:96:ab:0f:81:
09:a0:2b:0c:0d:fe:3b:2d:12:05:00:23:98:5c:1b:
db:08:e9:3a:b6:42:40:f3:7c:23:b2:b8:d6:c6:9f:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:E2:8D:FA:D3:59:57:AF:90:7E:71:5F:0E:FD:CA:A4:B2:BC:13
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e6:e6:2f:be:c4:ef:95:a8:e7:c8:ac:3d:0d:17:14:5e:8d:
f6:e9:16:dd:68:37:45:d4:49:0e:90:de:ac:7e:21:26:42:25:
23:f3:de:8c:c6:9d:8a:bd:1b:b0:ca:a6:4f:af:9b:80:78:f5:
18:35:8c:5f:37:42:c6:f8:b4:1f:c5:d0:f3:4e:f9:e4:ba:cf:
cb:24:33:cb:d4:4f:3f:08:9e:ea:4f:d6:34:a1:6b:c8:bf:1c:
df:61:d5:2a:7c:6a:34:39:1c:db:75:d2:57:a1:cd:42:95:b1:
38:f2:3d:28:da:2a:f9:7f:ec:51:1e:e9:a0:9e:c6:87:44:65:
9a:ca:b7:22:8b:78:f3:5a:32:fd:3c:a3:7b:25:fe:61:a7:7e:
f6:e3:dc:84:88:f4:e1:b0:bd:3d:48:de:23:f2:00:77:c0:c9:
1c:6b:07:00:4b:e0:b9:b2:d3:f1:4e:e1:ae:52:0f:55:f8:28:
b6:15:75:81:a6:d0:a8:56:62:10:da:9d:f5:15:2c:57:79:bd:
56:97:56:a6:35:d4:f9:ea:de:33:4d:8d:d3:64:3b:b7:20:e8:
e8:30:a5:f2:1f:41:14:b4:ca:65:e3:ac:fe:69:ce:cf:f9:3a:
b3:72:b8:e1:98:42:24:5f:13:e1:de:da:0b:2f:05:6b:eb:1b:
59:85:3b:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGauBh7GmfKJgYRm7QWYw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDFhNGMxNTJiNWY3ODZkNjIzZDg1YzQxNDY1Mjk5Y2Rk
YTMzODkwHhcNMjYwOTIyMDAwMTI4WhcNMjYwOTIzMDAwMTI4WjAzMTEwLwYDVQQD
Eyg2NDE3ZTI4ZGZhZDM1OTU3YWY5MDdlNzE1ZjBlZmRjYWE0YjJiYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/AyvpE8vVoOiuaXJ4OrLs/JdKE9
BoAcbPFCoo9ttwhrFeUZr8dvVTklcNi96LTmEqGazRxltHbjrFKnQyH3DKP7mIuw
w0vTremQUQPNkkzQ7FJd0tT2Xkd6CeAWiYmEJrAFYEh3FeVUJ+7NjFZuVCV2YnmE
4YwbAlWpxH3dij31ZZq7kbcFC2OKwpXckG/6zOsk/OwsZz+8yHrtlG6NzZO9to1Q
46P7yBPSh7w+R7MxrECjk3c3kXjW4AizucP/4edA81Gl7YQW9eTK1ouEFSQTdQcH
eITXgWVoGJarD4EJoCsMDf47LRIFACOYXBvbCOk6tkJA83wjsrjWxp8r6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQX4o3601lXr5B+cV8O/cqksrwTMB8GA1UdIwQY
MBaAFOVBpMFStfeG1iPYXEFGUpnN2jOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEt
ZDg0ZWNiMjUwNWM0LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEtZDg0ZWNiMjUwNWM0
LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAebmL77E
75Wo58isPQ0XFF6N9ukW3Wg3RdRJDpDerH4hJkIlI/PejMadir0bsMqmT6+bgHj1
GDWMXzdCxvi0H8XQ80755LrPyyQzy9RPPwie6k/WNKFryL8c32HVKnxqNDkc23XS
V6HNQpWxOPI9KNoq+X/sUR7poJ7Gh0Rlmsq3Iot481oy/TyjeyX+Yad+9uPchIj0
4bC9PUjeI/IAd8DJHGsHAEvgubLT8U7hrlIPVfgothV1gabQqFZiENqd9RUsV3m9
VpdWpjXU+ereM02N02Q7tyDo6DCl8h9BFLTKZeOs/mnOz/k6s3K44ZhCJF8T4d7a
Cy8Fa+sbWYU7OA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:42 2026 by rpki-client