Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: TS+jxotEXFX5bl/QSCmOYWfakPGesAj+3WgOGNw50R0=
Subject key identifier: C0:FA:76:B5:90:C3:D8:BC:74:2F:2A:3D:28:17:85:9C:44:FC:A9:C9
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 019FA975C9C8A66E88FD6EBA6D28E6E9108C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 16:01:36 +0000
Manifest this update: Tue 28 Jul 2026 16:01:36 +0000
Manifest next update: Wed 29 Jul 2026 16:01:36 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: Sq87yd4JrjykgTNU5anA3QOcD1rzRuK9dA1VC+nrlJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:c9:c8:a6:6e:88:fd:6e:ba:6d:28:e6:e9:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Jul 28 16:01:36 2026 GMT
Not After : Jul 29 16:01:36 2026 GMT
Subject: CN=c0fa76b590c3d8bc742f2a3d2817859c44fca9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:af:07:06:c4:69:d2:44:6f:f3:63:a3:d4:
96:c9:be:01:96:1b:36:b7:58:c3:fc:09:1d:8c:6f:
15:fe:3e:fc:5e:61:35:30:01:7c:a6:31:f1:d0:4f:
8b:8d:2b:eb:1a:b9:e0:ca:8f:11:e9:e7:2a:30:c8:
cf:9a:a3:48:8b:85:ee:2b:8d:4a:59:98:27:02:92:
b6:26:a0:da:6c:90:60:32:58:15:63:5b:86:76:f7:
83:01:9e:ee:3e:15:f8:24:30:e1:7a:99:c4:3c:2e:
50:cd:11:28:cf:04:60:d0:3e:d9:73:b4:63:15:6d:
55:36:e0:4c:b2:8f:64:3f:ab:eb:10:7c:2e:88:f3:
0d:d2:08:19:33:6f:79:f4:6c:50:67:f6:76:b4:59:
a5:b3:a8:77:cd:56:e8:07:af:b8:10:ef:aa:75:87:
39:cd:b4:5c:02:83:c8:73:52:bb:df:66:f2:ee:6a:
34:75:ec:0b:84:91:8c:26:b2:f1:e6:01:90:34:2f:
23:85:f8:0b:fe:3a:60:e2:22:34:77:1e:86:55:b0:
47:98:28:24:12:47:b5:66:29:49:4e:d6:ff:c0:a6:
fd:ab:cc:b3:39:7c:7c:c6:00:b5:04:df:2b:67:fb:
c9:93:55:e4:87:85:11:0d:22:9f:63:81:99:fb:4e:
2b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FA:76:B5:90:C3:D8:BC:74:2F:2A:3D:28:17:85:9C:44:FC:A9:C9
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:15:8b:49:84:f6:71:f8:f1:aa:9b:69:dd:40:b0:09:1c:d5:
fb:ad:04:a3:2a:9c:e6:e9:0a:5b:b5:9e:78:96:12:7e:61:c2:
03:5c:0b:04:91:c7:b1:c4:62:d4:11:0c:38:c6:b1:e1:d3:6b:
f3:9a:39:7c:b6:e2:27:af:6e:93:f6:20:d8:4a:b6:c9:27:34:
e3:9e:79:27:40:a1:30:88:bf:9b:87:4d:0b:cd:2c:67:11:29:
13:a5:e3:15:ef:40:63:35:0f:0b:c8:16:a9:3a:51:96:22:80:
18:f6:86:66:49:07:8d:a5:15:bd:31:09:6f:1d:79:0b:bf:0b:
5d:60:b7:84:06:af:66:69:e2:68:77:af:78:d1:93:07:cf:5e:
59:2b:2e:72:48:31:23:f3:06:d1:ba:56:d8:28:8b:b0:fa:70:
64:3f:79:7a:33:35:06:f9:e9:fb:ed:82:70:a2:e6:3a:5a:a7:
e0:d5:36:e9:b3:c2:82:8a:75:1c:11:2c:f5:c8:18:06:25:d8:
6e:ad:ac:75:5e:cb:64:95:6d:cb:bd:ff:87:8f:67:f1:51:c1:
50:cf:88:f3:1a:71:2f:d9:23:36:0e:cb:01:ed:6d:cf:ee:6d:
08:c5:7d:30:e8:ca:b5:fe:7c:04:67:3f:c2:6d:4f:fa:68:2f:
58:a6:05:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdcnIpm6I/W66bSjm6RCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDMzY2RlNTdkYTA5YzdkOTMzNzcxZWVhMTQyNTk0MDc2
ZjlhMjMwHhcNMjYwNzI4MTYwMTM2WhcNMjYwNzI5MTYwMTM2WjAzMTEwLwYDVQQD
EyhjMGZhNzZiNTkwYzNkOGJjNzQyZjJhM2QyODE3ODU5YzQ0ZmNhOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+CvBwbEadJEb/Njo9SWyb4Blhs2
t1jD/AkdjG8V/j78XmE1MAF8pjHx0E+LjSvrGrngyo8R6ecqMMjPmqNIi4XuK41K
WZgnApK2JqDabJBgMlgVY1uGdveDAZ7uPhX4JDDhepnEPC5QzREozwRg0D7Zc7Rj
FW1VNuBMso9kP6vrEHwuiPMN0ggZM2959GxQZ/Z2tFmls6h3zVboB6+4EO+qdYc5
zbRcAoPIc1K732by7mo0dewLhJGMJrLx5gGQNC8jhfgL/jpg4iI0dx6GVbBHmCgk
Eke1ZilJTtb/wKb9q8yzOXx8xgC1BN8rZ/vJk1Xkh4URDSKfY4GZ+04rsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD6drWQw9i8dC8qPSgXhZxE/KnJMB8GA1UdIwQY
MBaAFObTPN5X2gnH2TN3HuoUJZQHb5ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjIt
NDE5NzUzZDNmODhkLzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjItNDE5NzUzZDNmODhk
LzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRWLSYT2
cfjxqptp3UCwCRzV+60Eoyqc5ukKW7WeeJYSfmHCA1wLBJHHscRi1BEMOMax4dNr
85o5fLbiJ69uk/Yg2Eq2ySc04555J0ChMIi/m4dNC80sZxEpE6XjFe9AYzUPC8gW
qTpRliKAGPaGZkkHjaUVvTEJbx15C78LXWC3hAavZmniaHeveNGTB89eWSsuckgx
I/MG0bpW2CiLsPpwZD95ejM1Bvnp++2CcKLmOlqn4NU26bPCgop1HBEs9cgYBiXY
bq2sdV7LZJVty73/h49n8VHBUM+I8xpxL9kjNg7LAe1tz+5tCMV9MOjKtf58BGc/
wm1P+mgvWKYF/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:41 2026 by rpki-client