Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: vX/mUPxLunC+NAsvuI8oHNFKcm/9NFxkhekr35MVyuY=
Subject key identifier: 85:FC:C0:BD:28:C6:CE:F9:A4:8B:73:86:09:50:60:58:F7:83:1B:06
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 01A0C21F4ADE7114F141DFBC98EAE41019EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 0C96
Signing time: Mon 21 Sep 2026 04:00:25 +0000
Manifest this update: Mon 21 Sep 2026 04:00:25 +0000
Manifest next update: Tue 22 Sep 2026 04:00:25 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: Zi26e5A4/dqAEkAx+lqC8YNKYstc9I7ujGCsNOMtcS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:4a:de:71:14:f1:41:df:bc:98:ea:e4:10:19:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Sep 21 04:00:25 2026 GMT
Not After : Sep 22 04:00:25 2026 GMT
Subject: CN=85fcc0bd28c6cef9a48b738609506058f7831b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:54:f3:0c:17:42:0a:77:c6:8b:fa:bc:3d:
6b:96:03:22:bf:3c:0d:dc:d7:12:db:c3:7c:db:61:
d0:36:d8:b5:bc:5a:bf:6a:66:45:11:c8:09:22:87:
7e:80:1f:c6:86:4a:69:56:d4:f0:dc:8a:cf:31:2f:
78:3b:af:56:09:ef:e3:55:69:61:1f:86:a0:b7:32:
12:f3:6e:2b:bb:03:0e:92:05:fb:c6:ef:fb:5e:37:
71:06:02:c4:a4:f8:55:8b:26:aa:52:31:ec:f1:19:
8f:be:b9:51:f6:7d:8c:e9:ed:95:67:11:44:bc:29:
29:ef:7c:d2:cc:f7:cb:d8:c4:8f:4e:df:b8:ac:c9:
e9:df:a1:03:64:0e:9e:52:b3:b8:05:c4:5e:a4:45:
96:e7:49:c3:06:c1:00:f6:97:0a:d4:ec:12:13:60:
60:26:e4:b3:d6:4f:8c:4c:5f:de:77:d0:6b:64:08:
99:5a:98:51:54:6b:d4:b8:d4:07:ad:d7:87:83:7f:
9c:d8:ed:35:5d:d2:be:15:2b:9c:a5:30:c6:55:6d:
94:36:cd:23:15:1d:64:63:a0:22:87:48:3a:5d:39:
ea:f4:e1:5e:46:de:9e:ba:63:51:69:16:a9:49:15:
38:e2:8d:2b:ef:03:9a:c2:d4:5f:25:32:6c:9c:48:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FC:C0:BD:28:C6:CE:F9:A4:8B:73:86:09:50:60:58:F7:83:1B:06
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b2:8c:9a:84:d8:05:eb:38:4e:9c:2f:6d:f2:c0:0e:60:6b:
f5:db:7b:1d:55:d1:02:65:2f:52:7c:5f:fc:13:f4:b7:c1:cf:
dd:a1:9d:d7:61:83:81:c3:f8:c9:24:7d:5f:fe:2b:28:92:d2:
11:31:c3:0e:86:0c:c0:52:05:e1:95:65:20:57:cb:3d:ac:c0:
c2:3d:66:f2:02:f2:47:01:56:e8:2e:0e:68:da:f4:31:10:39:
e8:d4:4d:aa:47:5b:72:cd:7b:eb:05:15:f7:88:b2:13:89:50:
14:5e:79:59:41:60:b4:6d:f3:eb:14:4a:2f:01:b2:98:fd:88:
61:ad:41:a3:59:91:d4:48:17:2c:03:85:08:2e:8d:59:80:3f:
e3:ee:95:fc:e2:3f:31:8f:40:83:72:eb:2c:c8:e4:1c:a9:26:
20:93:04:8c:4f:30:e5:e6:72:d5:f0:a0:31:a7:bf:36:a2:ec:
04:36:d2:65:f5:11:80:6d:ce:8e:49:93:af:90:f9:69:50:42:
20:3e:72:13:b1:fb:b4:0b:58:de:68:57:8f:2f:8b:46:26:ef:
d8:90:9b:9f:a8:86:2f:1a:30:6a:a0:31:dc:22:76:20:f8:ee:
80:f9:91:e7:f8:48:fa:d2:8f:29:9b:68:d0:f0:9d:36:b7:94:
98:2b:68:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCH0recRTxQd+8mOrkEBnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzc0ODI0MzRhNDU3YjA0OGI3ZDYyNjFkZGQ4MDk1YzVj
MDkwMjAwHhcNMjYwOTIxMDQwMDI1WhcNMjYwOTIyMDQwMDI1WjAzMTEwLwYDVQQD
Eyg4NWZjYzBiZDI4YzZjZWY5YTQ4YjczODYwOTUwNjA1OGY3ODMxYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5RU8wwXQgp3xov6vD1rlgMivzwN
3NcS28N822HQNti1vFq/amZFEcgJIod+gB/GhkppVtTw3IrPMS94O69WCe/jVWlh
H4agtzIS824ruwMOkgX7xu/7XjdxBgLEpPhViyaqUjHs8RmPvrlR9n2M6e2VZxFE
vCkp73zSzPfL2MSPTt+4rMnp36EDZA6eUrO4BcRepEWW50nDBsEA9pcK1OwSE2Bg
JuSz1k+MTF/ed9BrZAiZWphRVGvUuNQHrdeHg3+c2O01XdK+FSucpTDGVW2UNs0j
FR1kY6Aih0g6XTnq9OFeRt6eumNRaRapSRU44o0r7wOawtRfJTJsnEjoZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIX8wL0oxs75pItzhglQYFj3gxsGMB8GA1UdIwQY
MBaAFOTHSCQ0pFewSLfWJh3dgJXFwJAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUt
YzQ1MDhiNTU1MDcxLzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUtYzQ1MDhiNTU1MDcx
LzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7KMmoTY
Bes4TpwvbfLADmBr9dt7HVXRAmUvUnxf/BP0t8HP3aGd12GDgcP4ySR9X/4rKJLS
ETHDDoYMwFIF4ZVlIFfLPazAwj1m8gLyRwFW6C4OaNr0MRA56NRNqkdbcs176wUV
94iyE4lQFF55WUFgtG3z6xRKLwGymP2IYa1Bo1mR1EgXLAOFCC6NWYA/4+6V/OI/
MY9Ag3LrLMjkHKkmIJMEjE8w5eZy1fCgMae/NqLsBDbSZfURgG3OjkmTr5D5aVBC
ID5yE7H7tAtY3mhXjy+LRibv2JCbn6iGLxowaqAx3CJ2IPjugPmR5/hI+tKPKZto
0PCdNreUmCtoNQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:35 2026 by rpki-client