Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: Z8+uWFAw3OnqeMmItd3+XsiAxhUxpUS1HANYFZDi1A0=
Subject key identifier: 34:DC:73:D8:D3:91:F6:3A:5F:30:F2:EB:CC:B9:4A:07:C7:24:AB:26
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 01A0C47C865AE762821B38524CC53974C7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 1717
Signing time: Mon 21 Sep 2026 15:01:30 +0000
Manifest this update: Mon 21 Sep 2026 15:01:30 +0000
Manifest next update: Tue 22 Sep 2026 15:01:30 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: /C0s2B1ZCdBAfGKBRddQULZ7/9VGHFZmzF4NG1gus0M=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:86:5a:e7:62:82:1b:38:52:4c:c5:39:74:c7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Sep 21 15:01:30 2026 GMT
Not After : Sep 22 15:01:30 2026 GMT
Subject: CN=34dc73d8d391f63a5f30f2ebccb94a07c724ab26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:68:76:61:05:dd:50:6b:a0:92:7c:8e:f7:
55:67:b9:f6:fa:4c:ad:c5:04:bf:f9:01:f1:ae:12:
80:c0:71:76:ec:9d:30:87:92:b0:12:ec:ef:da:94:
53:81:61:21:dc:55:aa:ca:17:03:7e:c0:0c:c3:dc:
03:88:84:ca:ae:9f:17:53:25:11:25:19:ea:e3:fd:
2f:cd:f6:30:e8:df:b3:7e:93:4a:61:9c:d1:91:c8:
2e:1a:0c:84:96:9a:26:83:40:28:da:8a:9b:e8:2a:
89:ab:52:21:f5:e5:96:d2:48:28:e5:d9:cb:82:ab:
16:23:30:32:b8:8f:af:f1:ea:3d:92:b7:f2:d8:f1:
45:0b:1a:9f:63:81:e3:f3:54:f2:b3:2a:e6:aa:c4:
af:09:e9:27:83:56:ad:d2:52:d1:ec:76:c6:ab:16:
de:9f:ca:74:12:89:0f:81:23:1a:60:f5:2e:0e:42:
a6:90:da:b1:8c:2a:91:61:9a:5b:ef:cc:ab:0f:d1:
61:b4:1e:38:b1:1e:05:99:66:95:95:29:14:2e:fe:
a1:64:5c:55:8b:a1:3e:2f:e0:c3:b2:d9:87:b9:1c:
c1:ba:27:76:9d:7a:f9:4c:2f:78:cb:d0:5f:ea:7a:
e7:fc:1a:de:e5:a9:31:dc:4b:41:ca:b5:86:d4:37:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:73:D8:D3:91:F6:3A:5F:30:F2:EB:CC:B9:4A:07:C7:24:AB:26
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0a:1d:b5:d6:5c:5c:81:ea:d9:36:4e:3c:5f:c4:30:5f:0d:
16:77:3a:d8:40:37:86:41:71:33:1f:d7:aa:39:86:d0:7b:f0:
ec:b1:b3:bd:12:4c:f7:ca:25:ed:58:e3:34:c8:81:78:96:19:
22:5f:a7:50:7d:cf:c3:d9:71:aa:86:d1:b1:65:a9:d6:9e:0d:
cd:8e:1b:27:85:07:fd:14:17:5d:60:dc:7f:b0:3f:89:2f:5f:
5d:1b:c7:d1:0d:d8:a3:25:6e:98:c9:e6:02:be:75:23:e6:8f:
55:8c:1f:31:05:63:b3:aa:f1:a1:b7:df:6c:da:c5:84:52:b7:
3f:e5:87:c3:ae:0c:05:7a:49:ad:aa:4e:65:0f:d9:b8:5c:7d:
0b:18:f3:24:ea:3e:c3:fe:08:eb:3e:a2:0a:32:02:b0:93:d2:
6a:76:e4:8f:99:83:c5:90:1d:65:49:c4:ce:57:9c:0a:3a:0b:
0d:3a:c5:b6:7a:02:41:25:67:f7:68:8b:25:de:5e:c1:fe:14:
c4:9d:20:5d:33:30:9a:b1:c1:4e:c1:b3:36:a1:db:ac:b4:35:
b6:37:d5:2d:7b:03:a3:60:16:82:b4:0d:5d:97:de:c3:92:6a:
14:bb:d3:b1:e9:57:6e:62:64:19:8c:21:7b:21:58:55:76:fc:
6e:c6:24:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfIZa52KCGzhSTMU5dMfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTY5MDY4YThiMWZiN2ZhMDc5NWJhZjliYjNhYjg2Yzk0
ZTQ2ZmMwHhcNMjYwOTIxMTUwMTMwWhcNMjYwOTIyMTUwMTMwWjAzMTEwLwYDVQQD
EygzNGRjNzNkOGQzOTFmNjNhNWYzMGYyZWJjY2I5NGEwN2M3MjRhYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgRodmEF3VBroJJ8jvdVZ7n2+kyt
xQS/+QHxrhKAwHF27J0wh5KwEuzv2pRTgWEh3FWqyhcDfsAMw9wDiITKrp8XUyUR
JRnq4/0vzfYw6N+zfpNKYZzRkcguGgyElpomg0Ao2oqb6CqJq1Ih9eWW0kgo5dnL
gqsWIzAyuI+v8eo9krfy2PFFCxqfY4Hj81TysyrmqsSvCekng1at0lLR7HbGqxbe
n8p0EokPgSMaYPUuDkKmkNqxjCqRYZpb78yrD9FhtB44sR4FmWaVlSkULv6hZFxV
i6E+L+DDstmHuRzBuid2nXr5TC94y9Bf6nrn/Bre5akx3EtByrWG1DdJuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTcc9jTkfY6XzDy68y5SgfHJKsmMB8GA1UdIwQY
MBaAFOXmkGiosft/oHlbr5uzq4bJTkb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQt
ZGQxMDI4OTkxZmYzLzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQtZGQxMDI4OTkxZmYz
LzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgodtdZc
XIHq2TZOPF/EMF8NFnc62EA3hkFxMx/XqjmG0Hvw7LGzvRJM98ol7VjjNMiBeJYZ
Il+nUH3Pw9lxqobRsWWp1p4NzY4bJ4UH/RQXXWDcf7A/iS9fXRvH0Q3YoyVumMnm
Ar51I+aPVYwfMQVjs6rxobffbNrFhFK3P+WHw64MBXpJrapOZQ/ZuFx9CxjzJOo+
w/4I6z6iCjICsJPSanbkj5mDxZAdZUnEzlecCjoLDTrFtnoCQSVn92iLJd5ewf4U
xJ0gXTMwmrHBTsGzNqHbrLQ1tjfVLXsDo2AWgrQNXZfew5JqFLvTselXbmJkGYwh
eyFYVXb8bsYkCQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:25:32 2026 by rpki-client