Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier: cvjsgyuiMeoPusnk9EbJXKFHVx+sRk6QGS3oRShdhg4=
Subject key identifier: AE:52:0B:AF:23:A6:AE:BA:CF:10:45:D6:8C:14:C2:7A:7A:12:59:4F
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 019FAD1A91141282114D69C7DF71209A9870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number: 152A
Signing time: Wed 29 Jul 2026 09:00:27 +0000
Manifest this update: Wed 29 Jul 2026 09:00:27 +0000
Manifest next update: Thu 30 Jul 2026 09:00:27 +0000
Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: q7+U5RAL6EZ+l1Y+pjN32Fxv7bqtpHaPK7aAUI6IqCQ=)
2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:91:14:12:82:11:4d:69:c7:df:71:20:9a:98:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Jul 29 09:00:27 2026 GMT
Not After : Jul 30 09:00:27 2026 GMT
Subject: CN=ae520baf23a6aebacf1045d68c14c27a7a12594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:ca:fe:88:eb:69:52:2e:68:94:c2:b5:a0:
39:75:70:5a:16:79:9c:69:b3:59:7c:9f:17:f3:71:
40:48:f7:1d:9c:4e:20:75:2f:3c:9b:e6:18:9f:49:
3a:ed:8e:2b:29:02:94:f4:a5:c3:ef:1e:24:da:22:
4f:43:f3:e0:40:aa:4e:45:9d:51:4c:9a:45:4a:b2:
d8:74:39:a4:d9:29:7d:c0:49:b8:97:f2:f4:0a:66:
83:df:44:6f:64:a3:33:00:1a:ee:01:e2:dc:d5:78:
6d:37:06:cc:9f:ec:be:94:7a:15:fd:8f:81:1a:f0:
ca:d8:1e:b3:0f:14:5a:95:b9:db:48:b6:de:20:da:
7c:80:b6:d3:e7:9f:ff:1d:aa:5f:83:57:ff:b2:ec:
07:1d:61:66:22:01:dc:7e:94:a3:a6:a1:96:e7:f9:
17:7b:06:bc:6f:5d:b6:96:e2:25:d9:d0:31:47:cc:
7a:75:90:99:13:f0:58:09:d3:00:04:63:d8:71:6d:
85:ac:f4:c5:51:92:da:d2:87:49:d4:64:b8:db:bc:
99:cf:b8:87:e0:b5:d3:0d:8f:7c:bf:38:53:2f:68:
1e:d4:60:7e:42:c2:90:b6:90:3e:43:89:ac:3f:97:
48:95:28:78:78:89:ed:be:50:32:0d:b9:96:c6:76:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:0B:AF:23:A6:AE:BA:CF:10:45:D6:8C:14:C2:7A:7A:12:59:4F
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:12:a7:ef:17:10:0f:7c:69:14:d3:55:7c:e2:e1:37:be:
01:24:ce:ea:92:23:1a:89:37:ad:ce:79:b3:c1:67:3e:b1:e7:
b1:e3:65:1c:ef:b5:b6:7f:9b:e9:82:bb:6a:48:d3:58:d8:f1:
89:30:02:d0:9a:9f:5a:ed:e4:2f:a7:08:8e:dd:a5:09:0e:c4:
32:0f:2d:60:33:b7:39:f3:43:37:bc:49:7f:71:f9:56:5b:60:
38:3f:90:cf:39:11:9a:5d:8f:a4:40:00:34:80:a8:4b:2a:3f:
2e:ea:19:55:a8:47:08:ff:c0:19:90:aa:f0:a9:a9:ed:a2:34:
cf:2f:ef:20:13:6e:83:3c:ef:89:59:b2:8d:c5:3c:25:19:4a:
c7:48:4f:05:c2:be:fd:7c:c9:74:c6:8f:16:ab:dd:da:c0:28:
38:52:1b:63:cf:00:c1:ae:07:c9:3b:86:68:d4:e5:f8:47:64:
2e:43:2c:bb:d5:35:9b:f1:eb:88:49:44:ad:2f:a7:17:d8:80:
8a:06:c4:ef:d1:28:7b:dd:96:b9:01:b3:56:c3:8e:4a:56:43:
e7:81:2c:64:75:32:31:80:2d:c2:0d:fa:ff:5f:03:39:29:bb:
56:cb:cd:4b:75:66:c1:c4:c9:4d:54:95:e1:69:08:de:22:d0:
6f:47:bd:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGpEUEoIRTWnH33EgmphwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4
ZjhmMzgwHhcNMjYwNzI5MDkwMDI3WhcNMjYwNzMwMDkwMDI3WjAzMTEwLwYDVQQD
EyhhZTUyMGJhZjIzYTZhZWJhY2YxMDQ1ZDY4YzE0YzI3YTdhMTI1OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt7K/ojraVIuaJTCtaA5dXBaFnmc
abNZfJ8X83FASPcdnE4gdS88m+YYn0k67Y4rKQKU9KXD7x4k2iJPQ/PgQKpORZ1R
TJpFSrLYdDmk2Sl9wEm4l/L0CmaD30RvZKMzABruAeLc1XhtNwbMn+y+lHoV/Y+B
GvDK2B6zDxRalbnbSLbeINp8gLbT55//Hapfg1f/suwHHWFmIgHcfpSjpqGW5/kX
ewa8b122luIl2dAxR8x6dZCZE/BYCdMABGPYcW2FrPTFUZLa0odJ1GS427yZz7iH
4LXTDY98vzhTL2ge1GB+QsKQtpA+Q4msP5dIlSh4eIntvlAyDbmWxnYBdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5SC68jpq66zxBF1owUwnp6EllPMB8GA1UdIwQY
MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt
NDcyZDg4MmU5ZDcyLzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy
LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXISp+8X
EA98aRTTVXzi4Te+ASTO6pIjGok3rc55s8FnPrHnseNlHO+1tn+b6YK7akjTWNjx
iTAC0JqfWu3kL6cIjt2lCQ7EMg8tYDO3OfNDN7xJf3H5VltgOD+QzzkRml2PpEAA
NICoSyo/LuoZVahHCP/AGZCq8Kmp7aI0zy/vIBNugzzviVmyjcU8JRlKx0hPBcK+
/XzJdMaPFqvd2sAoOFIbY88Awa4HyTuGaNTl+EdkLkMsu9U1m/HriElErS+nF9iA
igbE79Eoe92WuQGzVsOOSlZD54EsZHUyMYAtwg36/18DOSm7VsvNS3VmwcTJTVSV
4WkI3iLQb0e91Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:33 2026 by rpki-client