Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
File: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft (raw, json)
Hash identifier: +og/XV5e1CurJ9zSpV6ltzvG5Dvq6espi1g0MOCXrW0=
Subject key identifier: DE:C6:46:E5:D4:33:E9:FC:59:3A:2C:7E:DF:99:2D:6D:60:68:E4:57
Authority key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
Certificate issuer: /CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Certificate serial: 01A125E7027BE7310CC3A45580D07EDEF74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
Manifest number: 02D0
Signing time: Sat 10 Oct 2026 13:00:58 +0000
Manifest this update: Sat 10 Oct 2026 13:00:58 +0000
Manifest next update: Sun 11 Oct 2026 13:00:58 +0000
Files and hashes: 1: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl (hash: irxNgSImkjQKFBNJ+Lbzd2IaYfOY0auUBB+3NGTe4Ao=)
2: k_j9kCZuBTWuvSVZ-WdJ_g1t6wY.asa (hash: dESwUIcXPpUiW9oc03it11tJGDFnuCkshgfLGftBad8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e7:02:7b:e7:31:0c:c3:a4:55:80:d0:7e:de:f7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Validity
Not Before: Oct 10 13:00:58 2026 GMT
Not After : Oct 11 13:00:58 2026 GMT
Subject: CN=dec646e5d433e9fc593a2c7edf992d6d6068e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:11:18:14:11:34:f9:6a:9e:1d:f0:03:d9:
e7:c0:dc:d8:a9:20:d8:0f:59:c9:6b:f1:01:6b:e0:
0b:fd:3e:6b:98:02:ab:8d:60:c7:3e:51:d8:39:05:
82:94:f2:9e:88:2c:18:af:04:1c:85:49:e6:12:07:
8a:de:5b:07:cc:9c:36:00:02:1a:bb:d1:ad:05:a7:
17:f2:d2:9a:7e:2a:66:07:03:30:c7:b3:62:63:32:
f1:de:2e:67:17:c6:30:42:9c:4f:06:cc:6c:07:d4:
f5:4f:b1:fe:76:5e:88:a7:86:5d:50:05:93:67:4a:
dd:17:ed:5c:60:f7:db:a8:15:78:40:65:38:bc:b6:
e2:f4:84:df:eb:79:6c:06:3d:14:70:a7:03:fa:77:
96:8b:24:bc:3e:df:1f:28:62:04:7c:48:be:79:9a:
52:5c:a4:32:8b:a3:35:d1:b8:c3:73:fa:8b:4e:a9:
02:1d:bb:8f:e0:09:67:c3:52:c4:58:90:dd:c7:c9:
cd:4e:2a:3a:89:b9:5c:4b:57:9f:88:aa:57:9c:67:
c3:3c:c8:e4:ac:c3:ed:49:99:b0:ae:bd:03:4e:9e:
f1:1e:9d:9d:b5:f8:2b:87:44:0d:a8:16:63:fe:10:
68:82:93:6f:03:83:06:56:ee:30:7e:b5:f5:a3:e0:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:46:E5:D4:33:E9:FC:59:3A:2C:7E:DF:99:2D:6D:60:68:E4:57
X509v3 Authority Key Identifier:
keyid:E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c0:83:04:1f:92:70:ee:e7:f9:a5:95:26:32:8b:76:16:64:
38:72:6e:40:3c:15:e8:0c:17:59:44:ab:51:c9:9f:04:2a:a1:
39:9c:8a:f0:fc:05:d8:3c:1b:2d:ae:45:6d:43:55:5c:14:b5:
00:ed:90:b6:6d:bb:c6:00:d3:ee:18:8b:c6:a7:94:a6:74:01:
22:81:72:27:02:8a:9b:a0:0f:b8:12:26:bc:12:5c:f9:df:ae:
98:a4:f5:06:20:7a:22:98:ca:b9:f5:23:ca:21:da:f0:db:5b:
0b:1c:88:fe:2b:ca:da:3f:21:b6:40:09:e0:8e:fb:f6:63:98:
4c:a1:26:cc:0d:bd:de:11:c8:c1:da:d0:9a:8e:b3:09:9e:e3:
c3:97:ad:80:ce:4a:f9:05:08:32:03:bf:2d:e7:37:cb:d6:04:
5b:81:8e:7f:ce:6f:72:34:8d:ee:b9:5d:2a:97:da:ca:8f:84:
05:42:ee:9f:a0:a6:a1:48:97:9e:c3:0b:52:ab:d9:76:a2:18:
d9:ac:c2:6e:9a:48:6d:bc:fe:ba:77:f2:24:c6:71:47:f8:28:
81:14:c0:1b:d2:9c:bf:c9:6a:60:8e:b2:94:cd:d8:40:c9:34:
10:66:8c:7b:20:9e:c6:6a:85:1d:87:8d:ef:1d:cf:98:0a:cc:
dc:19:0f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEl5wJ75zEMw6RVgNB+3vdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OTQ2OTU2NWY3MTliZWQ4NmFkYzczZmI2ZTZjODg2ZjYw
YmRhYWIwHhcNMjYxMDEwMTMwMDU4WhcNMjYxMDExMTMwMDU4WjAzMTEwLwYDVQQD
EyhkZWM2NDZlNWQ0MzNlOWZjNTkzYTJjN2VkZjk5MmQ2ZDYwNjhlNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMsRGBQRNPlqnh3wA9nnwNzYqSDY
D1nJa/EBa+AL/T5rmAKrjWDHPlHYOQWClPKeiCwYrwQchUnmEgeK3lsHzJw2AAIa
u9GtBacX8tKafipmBwMwx7NiYzLx3i5nF8YwQpxPBsxsB9T1T7H+dl6Ip4ZdUAWT
Z0rdF+1cYPfbqBV4QGU4vLbi9ITf63lsBj0UcKcD+neWiyS8Pt8fKGIEfEi+eZpS
XKQyi6M10bjDc/qLTqkCHbuP4Alnw1LEWJDdx8nNTio6iblcS1efiKpXnGfDPMjk
rMPtSZmwrr0DTp7xHp2dtfgrh0QNqBZj/hBogpNvA4MGVu4wfrX1o+AWAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7GRuXUM+n8WTosft+ZLW1gaORXMB8GA1UdIwQY
MBaAFOWUaVZfcZvthq3HP7bmyIb2C9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZDgzMDctNGEwZS00NDUzLWE5NGIt
Njg2NmE0MDFhNjdkLzEvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZDgzMDctNGEwZS00NDUzLWE5NGItNjg2NmE0MDFhNjdk
LzEvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMCDBB+S
cO7n+aWVJjKLdhZkOHJuQDwV6AwXWUSrUcmfBCqhOZyK8PwF2DwbLa5FbUNVXBS1
AO2Qtm27xgDT7hiLxqeUpnQBIoFyJwKKm6APuBImvBJc+d+umKT1BiB6IpjKufUj
yiHa8NtbCxyI/ivK2j8htkAJ4I779mOYTKEmzA293hHIwdrQmo6zCZ7jw5etgM5K
+QUIMgO/Lec3y9YEW4GOf85vcjSN7rldKpfayo+EBULun6CmoUiXnsMLUqvZdqIY
2azCbppIbbz+unfyJMZxR/gogRTAG9Kcv8lqYI6ylM3YQMk0EGaMeyCexmqFHYeN
7x3PmArM3BkPEA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:27:51 2026 by rpki-client