Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: fU9kmRywpSKxQfDwAiY9Zf2P3/HY4LLEJ/yziXo5tuQ=
Subject key identifier: 76:7F:63:8D:DB:76:AB:0F:78:33:B4:80:12:80:6E:E7:A6:E9:EC:4A
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 019A4EF57811A62F8C3FCBC5B02D64FD59E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 091C
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: qY2q8K4nFq4KvgqyPKzMAm70XsitPa4eJ+jhQjRuQ3o=)
2: GkuupBH0S6UfIOVBxWCowAfIXUM.roa (hash: 0Pa8It6a3TFSH6XKo+NzCtHNBkz88WRMk9KlV3Y4AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:78:11:a6:2f:8c:3f:cb:c5:b0:2d:64:fd:59:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=767f638ddb76ab0f7833b48012806ee7a6e9ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3e:93:fa:06:32:ff:a5:ad:ef:8b:1e:5f:b9:
c4:90:d3:3f:23:96:5e:a3:d9:fc:35:b2:5d:9b:14:
5a:d1:65:84:9e:6a:b3:2d:ed:5f:31:87:00:e2:a2:
47:b5:9b:28:ee:b4:24:aa:88:3c:e3:ef:7e:06:a4:
af:3b:c1:12:83:f0:90:e4:13:2f:90:69:d5:26:36:
fd:0c:be:86:16:bc:b7:ec:0a:d8:c5:83:d2:66:6a:
fa:a1:fc:72:22:10:78:7d:ca:95:0f:de:c6:19:51:
dd:3a:8c:b0:8a:9f:7b:40:be:94:91:91:fd:06:a9:
1e:12:46:4a:0b:0e:98:03:0b:95:aa:b8:21:b2:5d:
59:e9:d7:9f:bd:55:52:b1:62:10:1b:fe:76:5f:e3:
45:4f:47:69:bc:31:0c:b6:ef:4c:24:89:ae:c0:62:
26:d3:00:e1:6e:b5:92:0d:43:b1:0f:78:b1:e5:5b:
f1:32:91:43:59:cc:c5:aa:ad:77:71:31:83:e2:77:
35:45:27:2c:9f:ef:36:b0:bb:32:ff:f6:61:90:82:
60:5e:b8:2e:ca:6f:a3:c4:57:73:97:8b:14:9d:54:
bf:dc:78:83:e4:89:63:77:c2:24:f8:61:df:cc:b7:
99:ee:62:f9:cc:80:f2:fb:22:c0:39:f6:16:07:59:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:63:8D:DB:76:AB:0F:78:33:B4:80:12:80:6E:E7:A6:E9:EC:4A
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:da:2c:34:5f:18:2c:c0:14:0a:46:e0:64:d3:f7:18:81:d2:
1c:cd:7d:cf:71:02:25:0a:19:20:22:0f:05:d9:46:cc:83:ac:
02:fd:09:a9:89:61:ee:fc:85:73:90:00:d2:0a:4a:bd:b0:9d:
b8:51:42:4f:6f:36:c5:58:23:bf:3a:63:9c:73:17:83:39:c4:
cf:af:57:b8:00:cd:7f:28:78:38:69:4f:a9:1b:e7:2b:38:cb:
55:a8:d5:19:28:d7:e7:25:fb:58:b6:9f:7d:a0:f5:90:bf:f4:
5e:dd:ad:f7:d8:64:a5:da:cd:aa:f9:87:f9:40:8a:1d:c5:db:
d2:ba:45:a0:cb:f3:73:69:cd:53:7f:c9:d6:45:52:fd:17:1f:
31:49:c0:e9:ab:51:f3:3c:54:d8:fd:a3:c1:45:76:02:1c:3d:
be:ad:4a:23:cb:75:a7:cc:2b:ec:4f:bb:0d:8e:fa:16:b8:70:
8f:a8:b7:d9:51:31:27:7f:c2:9f:f8:c1:79:52:92:ba:bd:ab:
10:87:b1:30:25:78:bf:49:13:3d:43:c3:76:54:ea:08:ad:ba:
54:34:a1:59:cd:a0:18:65:e6:55:18:b9:f6:2a:4a:86:36:9a:
59:2d:8b:64:bf:6b:a9:26:1f:19:88:dc:2d:88:1c:08:11:6e:
47:bd:d0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9XgRpi+MP8vFsC1k/VnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YWFmNzZkMjdiYTgxMmUwZDVjZTIzMDVmMTdjNTMxODhj
MjU4MGMwHhcNMjUxMTA0MTMwMTQxWhcNMjUxMTA1MTMwMTQxWjAzMTEwLwYDVQQD
Eyg3NjdmNjM4ZGRiNzZhYjBmNzgzM2I0ODAxMjgwNmVlN2E2ZTllYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz6T+gYy/6Wt74seX7nEkNM/I5Ze
o9n8NbJdmxRa0WWEnmqzLe1fMYcA4qJHtZso7rQkqog84+9+BqSvO8ESg/CQ5BMv
kGnVJjb9DL6GFry37ArYxYPSZmr6ofxyIhB4fcqVD97GGVHdOoywip97QL6UkZH9
BqkeEkZKCw6YAwuVqrghsl1Z6defvVVSsWIQG/52X+NFT0dpvDEMtu9MJImuwGIm
0wDhbrWSDUOxD3ix5VvxMpFDWczFqq13cTGD4nc1RScsn+82sLsy//ZhkIJgXrgu
ym+jxFdzl4sUnVS/3HiD5Iljd8Ik+GHfzLeZ7mL5zIDy+yLAOfYWB1koawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ/Y43bdqsPeDO0gBKAbuem6exKMB8GA1UdIwQY
MBaAFOWq920nuoEuDVziMF8XxTGIwlgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUt
ZmQxNTJhNmEwNTg3LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUtZmQxNTJhNmEwNTg3
LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNosNF8Y
LMAUCkbgZNP3GIHSHM19z3ECJQoZICIPBdlGzIOsAv0JqYlh7vyFc5AA0gpKvbCd
uFFCT282xVgjvzpjnHMXgznEz69XuADNfyh4OGlPqRvnKzjLVajVGSjX5yX7WLaf
faD1kL/0Xt2t99hkpdrNqvmH+UCKHcXb0rpFoMvzc2nNU3/J1kVS/RcfMUnA6atR
8zxU2P2jwUV2Ahw9vq1KI8t1p8wr7E+7DY76Frhwj6i32VExJ3/Cn/jBeVKSur2r
EIexMCV4v0kTPUPDdlTqCK26VDShWc2gGGXmVRi59ipKhjaaWS2LZL9rqSYfGYjc
LYgcCBFuR73QOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:34 2025 by rpki-client