Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
File: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft (raw, json)
Hash identifier: UTCxnZKhGlEDYgqC9cFURECF6rU5bZ2iyl1l5g85PWI=
Subject key identifier: 89:97:04:B1:12:B3:85:C3:48:BA:B9:35:67:4E:2F:F8:53:09:CA:77
Authority key identifier: E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
Certificate issuer: /CN=e731bb83a213f966e142b40da4f32cd6419ae219
Certificate serial: 019FA89A35E54C33735813F6A8FC55126C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:46 +0000
Manifest this update: Tue 28 Jul 2026 12:01:46 +0000
Manifest next update: Wed 29 Jul 2026 12:01:46 +0000
Files and hashes: 1: 5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl (hash: EMbwiFr+S+8qEv1iWBOjqoxtulBET+pzl1rwE3WRjqc=)
2: AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa (hash: 5mqmiz/CXkUW+cTJVY8j71HIi5cAxYNi2xnFmKTG/HY=)
3: yMvlwhzKfrY9een7T1c_eLiRjek.roa (hash: PbmjqOmGy2hPK1aLZZhguFnKLy5ZFRT3ye/VUztkdts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:35:e5:4c:33:73:58:13:f6:a8:fc:55:12:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e731bb83a213f966e142b40da4f32cd6419ae219
Validity
Not Before: Jul 28 12:01:46 2026 GMT
Not After : Jul 29 12:01:46 2026 GMT
Subject: CN=899704b112b385c348bab935674e2ff85309ca77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:9e:87:5c:63:1b:5a:03:10:ef:aa:f2:49:
fa:56:af:81:4b:63:3c:f5:c2:ab:f1:d7:ba:86:09:
29:53:ed:32:65:8e:92:48:15:ca:46:79:2b:99:47:
64:bf:e4:7c:8c:d4:d3:6d:4a:39:4b:23:e3:c1:5e:
8d:56:a7:be:03:9c:ee:e2:ad:5e:09:24:79:68:46:
ca:78:61:9f:d4:9d:c8:b7:93:a8:71:e0:37:08:ff:
9e:10:5d:b0:38:a1:85:b6:ea:83:2a:e1:ca:e6:ac:
44:ef:00:1e:41:f1:79:ec:24:2e:7e:6c:d5:39:23:
df:70:33:8c:a0:62:dc:64:02:bd:40:26:14:f2:ea:
79:80:c5:bb:f6:89:3b:5c:d8:88:9c:08:1b:1e:75:
e0:c5:b7:5e:ba:f3:82:83:b0:e9:7e:18:a5:e0:9d:
13:10:c3:d5:89:f1:5b:45:ea:0c:0e:82:10:67:68:
f7:af:75:bf:81:1d:48:04:aa:ed:50:6b:3f:49:81:
18:a9:27:b4:a6:3a:79:e5:a2:4f:ca:2b:0a:ed:fa:
45:9f:8d:6e:ba:43:34:2d:5e:4c:77:89:3d:3f:b8:
47:d8:f3:9e:c1:5a:ef:40:7d:5f:4e:69:0e:b2:c6:
53:a2:87:f6:a8:3f:8c:59:4e:ba:ff:b6:c2:ef:ea:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:97:04:B1:12:B3:85:C3:48:BA:B9:35:67:4E:2F:F8:53:09:CA:77
X509v3 Authority Key Identifier:
keyid:E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b8:fc:bf:d7:3e:6f:fc:4f:89:54:1c:26:30:f8:40:ca:77:
72:6a:a3:e9:00:6b:00:bb:21:d7:de:c6:e4:c4:45:a7:29:7a:
d6:a8:1d:eb:b6:8f:a5:37:c8:b9:fb:00:b4:ad:42:47:2f:cc:
4e:c2:d3:7c:a8:ad:e9:34:57:01:63:4c:79:b5:fb:c2:9e:4f:
9d:79:52:c3:30:92:7a:fb:94:3a:fd:36:1e:cf:3c:2a:53:0a:
bd:b3:73:20:4d:1b:d4:6d:ac:50:d4:29:94:46:8b:7a:f1:df:
a3:55:16:31:ac:9d:69:45:64:86:84:bc:85:35:c9:ec:4d:13:
4d:c7:00:cf:35:b9:65:2d:09:fe:af:6e:7e:5b:64:ef:22:76:
44:7a:79:ba:db:b9:85:a8:6a:9e:44:72:58:e5:00:ea:08:30:
c3:a9:3f:47:cf:80:cd:d0:71:bb:94:15:b6:57:76:69:df:75:
0b:46:e4:34:82:54:6a:3b:1a:bc:6a:1b:aa:aa:4d:9e:bd:64:
8a:ea:12:78:2d:d5:54:cb:1b:38:e8:95:d4:cc:5c:63:fc:83:
1f:85:b1:d6:d3:01:c6:ea:52:4e:d3:e6:2f:7c:df:fc:d7:9c:
3b:80:45:6b:37:6f:61:73:41:fc:58:1f:90:26:cd:9f:30:79:
0c:0f:88:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omjXlTDNzWBP2qPxVEmxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzFiYjgzYTIxM2Y5NjZlMTQyYjQwZGE0ZjMyY2Q2NDE5
YWUyMTkwHhcNMjYwNzI4MTIwMTQ2WhcNMjYwNzI5MTIwMTQ2WjAzMTEwLwYDVQQD
Eyg4OTk3MDRiMTEyYjM4NWMzNDhiYWI5MzU2NzRlMmZmODUzMDljYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYSeh1xjG1oDEO+q8kn6Vq+BS2M8
9cKr8de6hgkpU+0yZY6SSBXKRnkrmUdkv+R8jNTTbUo5SyPjwV6NVqe+A5zu4q1e
CSR5aEbKeGGf1J3It5OoceA3CP+eEF2wOKGFtuqDKuHK5qxE7wAeQfF57CQufmzV
OSPfcDOMoGLcZAK9QCYU8up5gMW79ok7XNiInAgbHnXgxbdeuvOCg7Dpfhil4J0T
EMPVifFbReoMDoIQZ2j3r3W/gR1IBKrtUGs/SYEYqSe0pjp55aJPyisK7fpFn41u
ukM0LV5Md4k9P7hH2POewVrvQH1fTmkOssZToof2qD+MWU66/7bC7+rbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImXBLESs4XDSLq5NWdOL/hTCcp3MB8GA1UdIwQY
MBaAFOcxu4OiE/lm4UK0DaTzLNZBmuIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpHN2c2SVQtV2JoUXJRTnBQTXMxa0dhNGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvNXpHN2c2SVQtV2JoUXJRTnBQTXMxa0dhNGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvNXpHN2c2SVQtV2JoUXJRTnBQTXMxa0dhNGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbj8v9c+
b/xPiVQcJjD4QMp3cmqj6QBrALsh197G5MRFpyl61qgd67aPpTfIufsAtK1CRy/M
TsLTfKit6TRXAWNMebX7wp5PnXlSwzCSevuUOv02Hs88KlMKvbNzIE0b1G2sUNQp
lEaLevHfo1UWMaydaUVkhoS8hTXJ7E0TTccAzzW5ZS0J/q9ufltk7yJ2RHp5utu5
hahqnkRyWOUA6ggww6k/R8+AzdBxu5QVtld2ad91C0bkNIJUajsavGobqqpNnr1k
iuoSeC3VVMsbOOiV1MxcY/yDH4Wx1tMBxupSTtPmL3zf/NecO4BFazdvYXNB/Fgf
kCbNnzB5DA+IWA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:31 2026 by rpki-client