Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: cDrikF6attyIM3wtH1QenVLEVyQQP26ubGQeHZSpd9k=
Subject key identifier: 1B:ED:0E:C4:E3:78:E4:0F:3F:1D:D8:6F:11:09:AA:62:90:1A:71:8F
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019D9BBEBAD0188F2DB57F1B45FA314E9432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 09FA
Signing time: Fri 17 Apr 2026 14:01:01 +0000
Manifest this update: Fri 17 Apr 2026 14:01:01 +0000
Manifest next update: Sat 18 Apr 2026 14:01:01 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: CoAt9HEdtmRzFpewR7dJhvTN/aDn3R34glJWW7pMlLc=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ba:d0:18:8f:2d:b5:7f:1b:45:fa:31:4e:94:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Apr 17 14:01:01 2026 GMT
Not After : Apr 18 14:01:01 2026 GMT
Subject: CN=1bed0ec4e378e40f3f1dd86f1109aa62901a718f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:8f:78:76:02:ae:bb:20:97:4d:60:46:fb:
90:e8:42:09:c1:72:69:f4:4c:35:f7:75:e3:99:e5:
da:75:74:c1:e0:f1:ca:14:e9:2a:57:fd:d9:56:c9:
e8:92:0a:7a:31:c0:09:4d:77:de:29:4d:7d:a1:ea:
2e:30:92:6e:37:1c:57:47:21:2a:85:11:65:13:2f:
56:b0:a0:16:b8:c0:1e:0d:d6:93:41:22:59:82:1b:
9c:b7:ee:54:7b:fe:98:52:29:39:3c:da:9d:12:22:
c9:c0:2f:83:a5:7d:a9:30:de:2b:a4:0d:d3:6a:6c:
99:77:41:24:e4:9c:c3:d8:85:ee:58:c3:f5:14:8c:
5d:2f:2b:10:66:d8:de:bd:53:fb:13:23:f5:ad:be:
08:15:1c:d0:9d:a2:ee:0a:04:76:62:02:92:af:32:
0a:36:0d:56:78:b0:22:18:be:58:a4:2c:2f:79:38:
3b:a5:1d:4e:47:cf:3e:40:4f:bb:79:fb:7d:8d:03:
26:48:0f:c2:a8:49:06:29:df:23:1d:ac:b2:a9:40:
0c:06:11:f1:04:2c:0a:04:d4:90:5e:c6:19:a4:0a:
e7:ce:b6:66:1e:8f:52:2d:a8:10:67:e2:a6:e3:36:
8d:5a:7d:36:ee:d2:62:5f:00:b6:03:7f:7f:5c:13:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:0E:C4:E3:78:E4:0F:3F:1D:D8:6F:11:09:AA:62:90:1A:71:8F
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d4:27:1a:ba:6e:32:05:ae:16:21:78:29:a8:bb:57:8a:ed:
ad:b5:60:eb:e5:76:e9:bb:1e:a2:ca:86:86:bd:7d:10:ac:7c:
08:ff:b5:12:69:00:9f:3b:fd:9f:40:ef:bd:ee:d0:65:84:2a:
8a:0b:ab:5d:02:9e:a3:36:45:e9:28:31:61:5e:4a:ed:d5:51:
4d:06:a9:a2:1a:11:3a:ff:c4:3e:d9:b7:c1:5c:c1:57:82:f4:
db:2b:76:60:df:c6:26:bd:92:7a:38:3a:30:8d:84:d6:a0:79:
2b:ee:34:e3:a5:08:ee:1c:98:c0:c4:b4:98:6d:1a:f4:5d:ae:
1d:8f:a5:40:04:15:da:83:c0:85:75:9a:b5:0d:03:7f:b9:04:
1c:58:f0:f1:70:81:e8:9f:1c:39:cf:86:33:af:e3:c7:4e:b8:
be:a8:1c:7a:9e:9e:e4:97:de:a3:85:12:9a:6c:8e:45:c8:ef:
b5:07:b1:44:4e:4f:d9:7a:63:c5:24:f5:a5:45:ca:fd:01:0f:
77:e2:71:fa:7a:0b:44:4b:94:d2:74:e4:34:34:81:6d:4e:7c:
41:28:e9:55:4f:e7:e9:4c:e6:42:c4:fe:d8:3d:44:97:02:4b:
fa:9a:e5:d6:83:9a:9a:01:af:18:62:9e:5b:16:5b:79:e8:8e:
94:ba:05:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvrrQGI8ttX8bRfoxTpQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzAwNzYxNGY2NzcwMGIyY2E3NmQ2MGI0OTQyYjdhOGU0
YjVjZTQwHhcNMjYwNDE3MTQwMTAxWhcNMjYwNDE4MTQwMTAxWjAzMTEwLwYDVQQD
EygxYmVkMGVjNGUzNzhlNDBmM2YxZGQ4NmYxMTA5YWE2MjkwMWE3MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq76PeHYCrrsgl01gRvuQ6EIJwXJp
9Ew193XjmeXadXTB4PHKFOkqV/3ZVsnokgp6McAJTXfeKU19oeouMJJuNxxXRyEq
hRFlEy9WsKAWuMAeDdaTQSJZghuct+5Ue/6YUik5PNqdEiLJwC+DpX2pMN4rpA3T
amyZd0Ek5JzD2IXuWMP1FIxdLysQZtjevVP7EyP1rb4IFRzQnaLuCgR2YgKSrzIK
Ng1WeLAiGL5YpCwveTg7pR1OR88+QE+7eft9jQMmSA/CqEkGKd8jHayyqUAMBhHx
BCwKBNSQXsYZpArnzrZmHo9SLagQZ+Km4zaNWn027tJiXwC2A39/XBMmnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvtDsTjeOQPPx3YbxEJqmKQGnGPMB8GA1UdIwQY
MBaAFOYwB2FPZ3ALLKdtYLSUK3qOS1zkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQt
YjIxMTEwZDhmZmExLzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQtYjIxMTEwZDhmZmEx
LzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9QnGrpu
MgWuFiF4Kai7V4rtrbVg6+V26bseosqGhr19EKx8CP+1EmkAnzv9n0Dvve7QZYQq
igurXQKeozZF6SgxYV5K7dVRTQapohoROv/EPtm3wVzBV4L02yt2YN/GJr2Sejg6
MI2E1qB5K+4046UI7hyYwMS0mG0a9F2uHY+lQAQV2oPAhXWatQ0Df7kEHFjw8XCB
6J8cOc+GM6/jx064vqgcep6e5Jfeo4USmmyORcjvtQexRE5P2XpjxST1pUXK/QEP
d+Jx+noLREuU0nTkNDSBbU58QSjpVU/n6UzmQsT+2D1ElwJL+prl1oOamgGvGGKe
WxZbeeiOlLoFXA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:09 2026 by rpki-client