Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: u7xsYBW7G2MPoO8evyOOVUGYUPmdXKIq9KVYl85h72E=
Subject key identifier: F5:D8:6A:A8:D8:4E:D7:10:01:90:F3:7B:8C:10:0E:C3:35:CE:A7:57
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 01A1DF4C5012762F3490E4D1BC72749D23C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 13:01:22 +0000
Manifest this update: Sun 15 Nov 2026 13:01:22 +0000
Manifest next update: Mon 16 Nov 2026 13:01:22 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: EQj2XEibQ7Jp5xUEwicuG3rJaAEm1kXWEwlvbpC+GhQ=)
2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:50:12:76:2f:34:90:e4:d1:bc:72:74:9d:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Nov 15 13:01:22 2026 GMT
Not After : Nov 16 13:01:22 2026 GMT
Subject: CN=f5d86aa8d84ed7100190f37b8c100ec335cea757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:5c:3b:2e:48:8e:a3:d0:f3:66:dd:95:33:
7a:9b:3f:c9:30:d5:d5:dd:cc:33:99:00:fe:0e:fb:
4a:60:df:c1:5f:f7:2c:f9:a5:c7:75:c3:d7:e4:12:
7d:62:07:3c:ba:9e:62:83:8e:fe:7f:30:ce:ce:01:
b0:12:d0:b8:24:a9:dd:28:a5:b0:79:ff:ab:91:5a:
6a:20:db:a2:e8:bd:90:c5:bd:1f:06:0c:3f:1c:c0:
34:c5:53:3c:29:b6:7c:6e:21:25:50:f5:2f:fe:b9:
40:6a:51:e9:aa:b6:db:2e:71:e1:46:c0:0b:01:ff:
4c:99:6f:da:75:18:71:57:23:86:41:bf:e3:70:cd:
4c:a7:1b:ee:1e:48:91:b3:53:1f:1d:f9:4f:81:0d:
af:1b:b4:3d:bd:e4:16:db:f8:de:71:6a:01:f7:8d:
e3:8a:8d:01:1c:a8:e5:c2:32:1d:0b:82:e7:48:a8:
12:79:b5:99:7a:8f:6f:07:5a:c7:5f:1a:8c:55:f0:
a4:ed:e1:82:a3:31:4a:9e:b0:9f:d6:31:4c:b8:cb:
1e:dc:8b:9b:c2:a9:e0:e0:c6:e4:3a:19:5f:f0:e4:
f5:12:a3:6d:68:48:6c:de:fc:90:4d:6d:99:35:85:
ff:e2:40:f0:dc:18:24:60:9c:86:77:04:50:2a:ea:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:6A:A8:D8:4E:D7:10:01:90:F3:7B:8C:10:0E:C3:35:CE:A7:57
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:88:a5:7d:9a:0c:a2:38:15:4b:a3:56:6a:5c:01:4c:6b:12:
5a:eb:b3:44:6a:c8:7f:08:5e:63:86:3d:4b:1d:14:c3:f0:07:
a6:21:49:69:34:92:74:b5:25:cb:f4:65:e9:34:00:31:04:ea:
a5:9d:84:fe:42:90:88:c4:a9:f0:6e:7e:9b:6a:f5:6f:56:ee:
39:75:41:b6:35:34:4f:1d:e2:e8:84:39:98:64:09:5e:31:58:
66:53:bc:9a:5a:62:e3:cb:a4:aa:2a:f0:be:94:74:dd:a7:88:
b2:0c:3f:18:b6:05:01:dd:1d:4e:09:08:e9:49:f3:89:75:c5:
e7:5b:b4:73:92:8e:21:01:e4:b7:60:2d:c2:17:07:26:31:e5:
c2:71:f9:a4:b2:75:5e:9c:00:50:4c:a7:e1:9a:bf:b3:17:03:
aa:b2:ac:4d:22:93:f1:22:16:4d:e0:e4:2c:ac:fd:ce:01:56:
f5:f0:3b:b3:85:5e:6b:d4:9d:3e:f3:9f:1d:66:48:56:d3:4e:
db:a2:61:8b:af:de:5d:6a:34:c1:aa:9d:b1:88:d3:d7:76:5e:
dc:5f:50:38:be:55:a4:98:57:af:f0:1e:6e:cf:4d:b0:84:69:
d4:1f:26:b7:b7:6a:af:14:5a:63:25:ab:b8:61:bc:ec:9f:c9:
05:31:04:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTFASdi80kOTRvHJ0nSPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDE1ZjFlMjAwNDM1OWNhZTc2NTZiOTY4YWRiMmE1NGE0
MzRmMWUwHhcNMjYxMTE1MTMwMTIyWhcNMjYxMTE2MTMwMTIyWjAzMTEwLwYDVQQD
EyhmNWQ4NmFhOGQ4NGVkNzEwMDE5MGYzN2I4YzEwMGVjMzM1Y2VhNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHNcOy5IjqPQ82bdlTN6mz/JMNXV
3cwzmQD+DvtKYN/BX/cs+aXHdcPX5BJ9Ygc8up5ig47+fzDOzgGwEtC4JKndKKWw
ef+rkVpqINui6L2Qxb0fBgw/HMA0xVM8KbZ8biElUPUv/rlAalHpqrbbLnHhRsAL
Af9MmW/adRhxVyOGQb/jcM1MpxvuHkiRs1MfHflPgQ2vG7Q9veQW2/jecWoB943j
io0BHKjlwjIdC4LnSKgSebWZeo9vB1rHXxqMVfCk7eGCozFKnrCf1jFMuMse3Iub
wqng4MbkOhlf8OT1EqNtaEhs3vyQTW2ZNYX/4kDw3BgkYJyGdwRQKuoi9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXYaqjYTtcQAZDze4wQDsM1zqdXMB8GA1UdIwQY
MBaAFOYBXx4gBDWcrnZWuWitsqVKQ08eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2It
MmY5MjY1MTBmZmJmLzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2ItMmY5MjY1MTBmZmJm
LzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYilfZoM
ojgVS6NWalwBTGsSWuuzRGrIfwheY4Y9Sx0Uw/AHpiFJaTSSdLUly/Rl6TQAMQTq
pZ2E/kKQiMSp8G5+m2r1b1buOXVBtjU0Tx3i6IQ5mGQJXjFYZlO8mlpi48ukqirw
vpR03aeIsgw/GLYFAd0dTgkI6UnziXXF51u0c5KOIQHkt2AtwhcHJjHlwnH5pLJ1
XpwAUEyn4Zq/sxcDqrKsTSKT8SIWTeDkLKz9zgFW9fA7s4Vea9SdPvOfHWZIVtNO
26Jhi6/eXWo0waqdsYjT13Ze3F9QOL5VpJhXr/Aebs9NsIRp1B8mt7dqrxRaYyWr
uGG87J/JBTEE5A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:24:52 2026 by rpki-client