Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File: 5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier: VZioNsjumOdUkhwmRW5+9U4RqHTQ5uQdGqrsGclP8iI=
Subject key identifier: 61:A6:E2:E4:31:EB:67:95:C7:CC:5B:09:E7:F9:6F:9F:45:C0:FB:6A
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer: /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial: 01A14015785CA6E7168B98A0D773B73E7221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number: 110C
Signing time: Thu 15 Oct 2026 15:01:51 +0000
Manifest this update: Thu 15 Oct 2026 15:01:51 +0000
Manifest next update: Fri 16 Oct 2026 15:01:51 +0000
Files and hashes: 1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: LKCrPiTDbfvnPJdi43D4Uexr5gULA9uOh7+VwDDGyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:78:5c:a6:e7:16:8b:98:a0:d7:73:b7:3e:72:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Validity
Not Before: Oct 15 15:01:51 2026 GMT
Not After : Oct 16 15:01:51 2026 GMT
Subject: CN=61a6e2e431eb6795c7cc5b09e7f96f9f45c0fb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:5d:c0:09:38:f8:2e:3e:88:82:45:bc:81:
dd:51:b3:94:0a:dd:22:c4:31:89:6c:ea:6b:61:ab:
16:a5:13:cd:7c:b1:bb:ea:55:09:85:5c:7d:37:5c:
11:a4:e7:b6:12:9b:c6:50:20:ca:ba:f8:67:92:84:
31:07:db:05:64:44:3f:33:72:46:1c:4a:64:17:a2:
bf:60:00:aa:f5:0e:20:41:bc:c1:a1:3c:98:7f:cb:
43:35:e2:9f:55:d5:ca:1f:e8:04:c9:7e:eb:fd:77:
a3:43:57:d3:93:eb:5e:71:7c:46:0e:a8:94:1c:c4:
96:6a:f4:33:db:ce:55:bb:2d:27:27:2f:ab:f9:07:
f9:7a:81:68:de:d1:50:c7:10:c5:8b:67:26:57:61:
11:8f:3e:1f:95:59:bd:ad:b2:a8:d1:ad:e5:2a:cf:
3f:4c:7a:6d:2d:97:f7:e6:07:42:38:77:a1:6d:77:
0a:bd:ad:e0:59:60:45:f9:90:f7:8e:98:89:4d:84:
bc:1d:d7:7c:67:c7:fb:05:04:62:57:9b:21:22:01:
47:47:9b:74:77:b6:0b:ec:f4:26:97:27:f1:b8:db:
b0:7d:fb:db:f1:c9:2a:96:c9:16:06:36:13:7a:44:
93:c3:c3:e4:55:6e:8b:98:06:8c:5c:f8:59:f3:d2:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A6:E2:E4:31:EB:67:95:C7:CC:5B:09:E7:F9:6F:9F:45:C0:FB:6A
X509v3 Authority Key Identifier:
keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:42:ae:16:a8:78:a1:48:c3:3b:f0:f5:39:ea:77:92:21:03:
81:a0:2d:b8:82:85:3f:9e:8a:d5:ce:4d:33:e7:b7:cd:18:5c:
1b:d3:eb:29:1a:20:76:90:a6:15:ed:c3:67:0b:57:d8:39:5a:
89:82:6b:2f:46:a3:1b:c4:73:97:34:d4:52:cf:18:1d:35:33:
74:5d:01:ca:79:df:b2:46:8e:b7:f0:6e:7b:9c:5d:41:10:6e:
0e:0c:94:e3:3f:3b:12:93:fa:9d:b4:ed:f9:93:2c:cc:8d:ae:
38:c3:de:56:f5:ac:a9:e1:4d:51:8d:c5:10:12:37:64:4a:6e:
5f:d5:0e:4d:08:dd:67:c1:f2:22:72:ec:34:c2:ba:02:7b:68:
3c:bd:ae:65:b6:29:95:63:fd:2a:4a:37:57:c7:b0:1b:c0:02:
39:6f:e9:aa:07:5c:36:34:76:83:5c:38:dd:36:32:77:fe:10:
d9:0c:ac:c5:15:4c:28:dd:b1:60:f1:3f:b1:ca:1f:e3:4b:de:
2e:3e:e8:4f:39:db:80:7f:78:36:df:d4:56:63:19:59:70:4c:
f5:3e:ce:07:35:5c:da:0a:9e:4a:1a:20:7e:ff:11:0b:a7:75:
46:0a:59:dc:ec:17:87:90:37:d3:f4:2d:c5:27:26:16:b8:2a:
ab:77:5e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFXhcpucWi5ig13O3PnIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2VkZGM0NGJjNmY1MzQ0NTc2Y2Y1OWFmMDAxMzVjNmI2
MmMwMWQwHhcNMjYxMDE1MTUwMTUxWhcNMjYxMDE2MTUwMTUxWjAzMTEwLwYDVQQD
Eyg2MWE2ZTJlNDMxZWI2Nzk1YzdjYzViMDllN2Y5NmY5ZjQ1YzBmYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SVdwAk4+C4+iIJFvIHdUbOUCt0i
xDGJbOprYasWpRPNfLG76lUJhVx9N1wRpOe2EpvGUCDKuvhnkoQxB9sFZEQ/M3JG
HEpkF6K/YACq9Q4gQbzBoTyYf8tDNeKfVdXKH+gEyX7r/XejQ1fTk+tecXxGDqiU
HMSWavQz285Vuy0nJy+r+Qf5eoFo3tFQxxDFi2cmV2ERjz4flVm9rbKo0a3lKs8/
THptLZf35gdCOHehbXcKva3gWWBF+ZD3jpiJTYS8Hdd8Z8f7BQRiV5shIgFHR5t0
d7YL7PQmlyfxuNuwffvb8ckqlskWBjYTekSTw8PkVW6LmAaMXPhZ89I2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGm4uQx62eVx8xbCef5b59FwPtqMB8GA1UdIwQY
MBaAFOQ+3cRLxvU0RXbPWa8AE1xrYsAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQ3ZHhFdkc5VFJGZHM5WnJ3QVRYR3Rpd0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZGFhNzItMDMxNC00NmM1LWJlNWIt
OWE2OTMwNDI1OGEwLzEvNUQ3ZHhFdkc5VFJGZHM5WnJ3QVRYR3Rpd0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yZGFhNzItMDMxNC00NmM1LWJlNWItOWE2OTMwNDI1OGEw
LzEvNUQ3ZHhFdkc5VFJGZHM5WnJ3QVRYR3Rpd0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0KuFqh4
oUjDO/D1Oep3kiEDgaAtuIKFP56K1c5NM+e3zRhcG9PrKRogdpCmFe3DZwtX2Dla
iYJrL0ajG8RzlzTUUs8YHTUzdF0BynnfskaOt/Bue5xdQRBuDgyU4z87EpP6nbTt
+ZMszI2uOMPeVvWsqeFNUY3FEBI3ZEpuX9UOTQjdZ8HyInLsNMK6AntoPL2uZbYp
lWP9Kko3V8ewG8ACOW/pqgdcNjR2g1w43TYyd/4Q2QysxRVMKN2xYPE/scof40ve
Lj7oTznbgH94Nt/UVmMZWXBM9T7OBzVc2gqeShogfv8RC6d1RgpZ3OwXh5A30/Qt
xScmFrgqq3detA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:55 2026 by rpki-client