Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: XZO6k7BrFfw/sMbnWp0YEMXlkVt/KjFHSR9VtnaW5IA=
Subject key identifier: BC:99:77:93:CE:1F:02:25:E4:6F:A3:94:17:FA:B6:68:A1:D0:C4:89
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 019FA9756AE1DAD84FEF01C1D27B45DA83CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 12D7
Signing time: Tue 28 Jul 2026 16:01:12 +0000
Manifest this update: Tue 28 Jul 2026 16:01:12 +0000
Manifest next update: Wed 29 Jul 2026 16:01:12 +0000
Files and hashes: 1: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (hash: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0=)
2: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (hash: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g=)
3: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: MGKtnL39tPwOqNCsMnQbduJ1rylNSpkzXRT7W6OhTrc=)
4: 6ecKe0A8FdH_pCFTNXNYem6VwN0.roa (hash: KZ+1oly4tcR/bcNP0ACIfGBzE0lasROyGqTBaCkUeaU=)
5: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (hash: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc=)
6: CZHwjRKRoezncj5wC2tcP7BId0k.roa (hash: NtnGWR67eyLICzLT2JOCuoqA4A2EyKFmQWPiA8KDgfI=)
7: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (hash: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:6a:e1:da:d8:4f:ef:01:c1:d2:7b:45:da:83:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jul 28 16:01:12 2026 GMT
Not After : Jul 29 16:01:12 2026 GMT
Subject: CN=bc997793ce1f0225e46fa39417fab668a1d0c489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:45:fa:b1:ad:77:11:ae:69:b4:49:06:53:
3e:13:41:eb:a7:ba:28:c9:94:7e:45:bd:54:2c:51:
76:05:ff:cc:26:0d:eb:68:54:37:a1:0c:a9:e6:2e:
1a:c4:5a:80:56:f3:97:a2:12:96:43:99:58:46:ae:
df:7a:59:7a:e8:6f:2d:04:12:37:b1:93:dd:70:84:
e1:a4:db:62:d1:00:88:f2:8c:cf:bf:8d:ca:17:d3:
39:1f:eb:37:87:53:45:c6:72:cf:9b:5a:66:a9:5c:
fc:17:f5:66:73:9b:39:7a:48:17:ba:df:c2:03:f4:
e8:ab:b3:32:26:f5:70:98:04:04:6c:c9:35:a8:38:
70:47:2e:fb:89:d4:fd:0e:2c:a0:ad:04:fa:fa:18:
71:c9:31:4e:d3:71:f6:2b:e9:d1:b4:60:55:43:9e:
dd:14:14:ba:c6:4c:c7:ad:08:ef:96:d9:19:e6:b3:
aa:56:b1:bb:69:28:ff:d5:54:a5:df:bb:87:8a:3a:
b9:07:bd:ef:9a:96:7f:fc:f8:eb:f9:f7:19:ec:8c:
d6:d0:2c:dd:db:ee:fb:ba:09:04:63:49:f3:b5:1f:
53:24:be:10:d2:45:2b:01:3f:95:b1:89:28:5a:d1:
02:db:c3:7c:54:53:41:00:64:2c:c3:7c:f8:0f:86:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:99:77:93:CE:1F:02:25:E4:6F:A3:94:17:FA:B6:68:A1:D0:C4:89
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:d7:bf:52:81:b7:02:76:71:c9:5f:06:25:0d:1a:b6:a1:
37:cf:88:66:23:1b:de:0b:fb:3b:73:13:f7:f5:25:ee:ea:9a:
80:53:23:da:d8:e1:b7:5a:a1:15:5b:f5:b4:e1:7a:8d:0c:68:
20:8b:1d:5e:60:79:41:77:ed:a6:22:5b:51:b5:e0:b8:95:b2:
ad:6b:f8:f6:a9:e5:90:76:8b:50:e6:41:0b:4f:06:89:cb:ae:
29:c9:d0:8d:65:e7:4b:9f:c3:f0:41:0a:21:cc:58:1e:dd:1f:
a6:20:e2:89:c7:42:f2:d1:c5:4b:22:84:91:15:74:68:34:be:
47:82:83:09:08:36:2c:55:40:fa:d8:86:da:f6:86:d9:75:25:
12:ef:07:52:31:1f:6b:14:61:1f:4c:2f:a9:c6:0c:7d:1d:fd:
87:85:24:e3:40:94:f2:9e:f2:5e:42:81:b2:c6:d0:b5:b6:5a:
74:7f:e7:1e:0b:1b:39:06:d3:2f:85:0c:2d:e9:e7:d3:49:d0:
bb:21:7b:38:99:5c:52:ae:b2:9e:16:1f:9a:41:18:f0:8e:b6:
e0:0f:4d:6f:6b:91:d6:1d:17:96:63:2e:1b:da:b2:0f:30:bf:
20:79:c1:b0:71:fe:33:d2:16:0a:88:9b:e7:d2:ad:ce:84:07:
94:93:d3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdWrh2thP7wHB0ntF2oPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjYwNzI4MTYwMTEyWhcNMjYwNzI5MTYwMTEyWjAzMTEwLwYDVQQD
EyhiYzk5Nzc5M2NlMWYwMjI1ZTQ2ZmEzOTQxN2ZhYjY2OGExZDBjNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW9F+rGtdxGuabRJBlM+E0Hrp7oo
yZR+Rb1ULFF2Bf/MJg3raFQ3oQyp5i4axFqAVvOXohKWQ5lYRq7fell66G8tBBI3
sZPdcIThpNti0QCI8ozPv43KF9M5H+s3h1NFxnLPm1pmqVz8F/Vmc5s5ekgXut/C
A/Toq7MyJvVwmAQEbMk1qDhwRy77idT9DiygrQT6+hhxyTFO03H2K+nRtGBVQ57d
FBS6xkzHrQjvltkZ5rOqVrG7aSj/1VSl37uHijq5B73vmpZ//Pjr+fcZ7IzW0Czd
2+77ugkEY0nztR9TJL4Q0kUrAT+VsYkoWtEC28N8VFNBAGQsw3z4D4bDeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyZd5POHwIl5G+jlBf6tmih0MSJMB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQDXv1KB
twJ2cclfBiUNGrahN8+IZiMb3gv7O3MT9/Ul7uqagFMj2tjht1qhFVv1tOF6jQxo
IIsdXmB5QXftpiJbUbXguJWyrWv49qnlkHaLUOZBC08GicuuKcnQjWXnS5/D8EEK
IcxYHt0fpiDiicdC8tHFSyKEkRV0aDS+R4KDCQg2LFVA+tiG2vaG2XUlEu8HUjEf
axRhH0wvqcYMfR39h4Uk40CU8p7yXkKBssbQtbZadH/nHgsbOQbTL4UMLenn00nQ
uyF7OJlcUq6ynhYfmkEY8I624A9Nb2uR1h0XlmMuG9qyDzC/IHnBsHH+M9IWCoib
59KtzoQHlJPTFw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:35 2026 by rpki-client