Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier: BOPtvpEoHP3zkfTD5tb0OpF+P3+M1pg1bb2YjFjLzu4=
Subject key identifier: AB:BD:C6:A5:1C:4E:FC:F5:E5:A1:F0:D5:B9:CF:36:6A:78:E9:73:7D
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 01A0C2FAECB5CE81DD4B19FF179570F7735E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 08:00:19 +0000
Manifest this update: Mon 21 Sep 2026 08:00:19 +0000
Manifest next update: Tue 22 Sep 2026 08:00:19 +0000
Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: 1RPzZOo5kOEmM6TJs5pH9mSBd746OwfqOehemArVxPc=)
2: Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa (hash: IcpxSZEbw6wlN8c6BwrewScxYORBAdj6421Et1q2/ak=)
3: QyLxV1GsI9UZiOqN--9VZ1wCfac.roa (hash: p/jV8Bz6xxYxD+AW9prSPsf+g1XW829odlRFlONQHfw=)
4: _HACinjTIxRkle58_-0RVGUxyaY.roa (hash: 56U7Y5xzPXcpazN7C00qDGlRUzZsBIL1ftiv8gKYYpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:ec:b5:ce:81:dd:4b:19:ff:17:95:70:f7:73:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Sep 21 08:00:19 2026 GMT
Not After : Sep 22 08:00:19 2026 GMT
Subject: CN=abbdc6a51c4efcf5e5a1f0d5b9cf366a78e9737d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:80:6e:b4:da:41:bd:23:93:6d:d3:4b:b9:
9d:ea:14:27:b4:d0:bb:ee:77:6c:54:c4:ba:44:4d:
89:ea:23:e0:ae:fe:c9:0d:5c:05:27:b7:37:ce:c4:
9f:69:68:06:e1:24:8a:00:87:7e:71:2f:4b:2c:c2:
9c:b7:ef:84:91:d3:cb:9e:82:81:19:32:03:48:d8:
34:68:5a:2e:f7:56:b0:97:2d:47:c7:ed:6b:ae:4b:
b5:9c:f8:cd:0f:e3:d7:d6:62:2b:02:75:61:bb:36:
4e:35:e8:20:ef:37:75:fe:9f:66:03:7b:01:88:f6:
87:d0:75:75:3d:5b:a6:16:15:09:b2:8a:29:8c:c0:
0b:8f:ad:39:f4:b1:73:66:fd:6a:50:70:9f:c3:c2:
e6:de:dc:f6:41:56:1e:35:da:77:05:ab:f1:29:24:
9c:dc:4c:6f:b1:61:c0:29:a2:14:f3:ea:ca:b4:fe:
84:67:a9:b2:2d:1f:a6:61:0e:9f:df:0f:12:db:8e:
be:4e:d4:50:c2:9e:01:2f:9a:12:7c:25:73:70:26:
df:bd:3d:70:ea:82:e6:62:85:ff:23:05:84:21:ee:
1d:fe:1e:76:67:f3:9f:1e:27:b4:e9:b3:83:1e:42:
1b:d5:b2:95:eb:ef:18:00:4f:46:26:e9:1d:bc:44:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BD:C6:A5:1C:4E:FC:F5:E5:A1:F0:D5:B9:CF:36:6A:78:E9:73:7D
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:f4:e7:d6:a4:a6:9f:db:d7:36:11:dd:39:26:14:b9:25:
92:b5:7a:48:47:c9:56:78:ae:4d:2b:e9:77:96:d7:cb:84:be:
2a:0e:06:bc:1a:29:b9:43:85:7e:c2:5b:dc:7a:33:0a:a6:01:
f5:13:3d:5b:f3:d4:8c:97:ea:e8:04:a3:46:76:35:0f:b4:1d:
b9:62:a4:13:dc:c0:a3:50:67:02:68:64:39:ec:26:a0:de:1b:
45:79:b2:48:72:26:76:97:eb:08:80:58:c8:55:51:1b:6e:14:
81:62:b9:fe:f0:c8:90:db:4d:d6:80:aa:81:51:da:22:f3:80:
33:bc:4b:e4:76:db:e5:96:41:b2:82:36:d3:f6:65:60:4b:dc:
7e:04:5a:1f:23:63:83:66:06:7f:37:ff:d6:b6:f5:63:ac:26:
33:5e:a9:af:9e:bd:8a:eb:d3:e5:b6:bc:28:ba:7b:ce:ce:8c:
f3:c0:91:ca:94:14:61:52:a6:ac:44:c5:b8:4f:1e:f7:e4:d6:
ad:6f:13:ac:d5:26:31:e4:74:9d:e9:38:2f:df:e8:70:e1:ca:
8f:7d:1c:e8:2c:17:a9:e4:f8:0d:9f:36:fd:8d:72:d9:52:fe:
ab:25:2e:bc:d1:ae:a0:50:42:ff:87:99:de:52:20:e7:f0:1d:
46:17:06:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+uy1zoHdSxn/F5Vw93NeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzlhZjE3MTZkYzQ2MWU1YmIzZjg3NjIxNWJjYjk0ZTg4
MDhiYTAwHhcNMjYwOTIxMDgwMDE5WhcNMjYwOTIyMDgwMDE5WjAzMTEwLwYDVQQD
EyhhYmJkYzZhNTFjNGVmY2Y1ZTVhMWYwZDViOWNmMzY2YTc4ZTk3MzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr6AbrTaQb0jk23TS7md6hQntNC7
7ndsVMS6RE2J6iPgrv7JDVwFJ7c3zsSfaWgG4SSKAId+cS9LLMKct++EkdPLnoKB
GTIDSNg0aFou91awly1Hx+1rrku1nPjND+PX1mIrAnVhuzZONegg7zd1/p9mA3sB
iPaH0HV1PVumFhUJsoopjMALj6059LFzZv1qUHCfw8Lm3tz2QVYeNdp3BavxKSSc
3ExvsWHAKaIU8+rKtP6EZ6myLR+mYQ6f3w8S246+TtRQwp4BL5oSfCVzcCbfvT1w
6oLmYoX/IwWEIe4d/h52Z/OfHie06bODHkIb1bKV6+8YAE9GJukdvERRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu9xqUcTvz15aHw1bnPNmp46XN9MB8GA1UdIwQY
MBaAFOR5rxcW3EYeW7P4diFby5TogIugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTIt
MjQxZWFiNjE0ODNmLzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTItMjQxZWFiNjE0ODNm
LzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBH059ak
pp/b1zYR3TkmFLklkrV6SEfJVniuTSvpd5bXy4S+Kg4GvBopuUOFfsJb3HozCqYB
9RM9W/PUjJfq6ASjRnY1D7QduWKkE9zAo1BnAmhkOewmoN4bRXmySHImdpfrCIBY
yFVRG24UgWK5/vDIkNtN1oCqgVHaIvOAM7xL5Hbb5ZZBsoI20/ZlYEvcfgRaHyNj
g2YGfzf/1rb1Y6wmM16pr569iuvT5ba8KLp7zs6M88CRypQUYVKmrETFuE8e9+TW
rW8TrNUmMeR0nek4L9/ocOHKj30c6CwXqeT4DZ82/Y1y2VL+qyUuvNGuoFBC/4eZ
3lIg5/AdRhcGFA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:33:25 2026 by rpki-client