Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: kwRO9dPJMoIBkdsetKuMvC2mD8o4li7ffKcfZufN7co=
Subject key identifier: B9:7A:7F:7C:D3:84:9D:8D:EC:E5:9E:B9:23:86:DC:ED:00:86:35:26
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019DDCFAE769DF7993CC6700288304E261B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0970
Signing time: Thu 30 Apr 2026 06:02:03 +0000
Manifest this update: Thu 30 Apr 2026 06:02:03 +0000
Manifest next update: Fri 01 May 2026 06:02:03 +0000
Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: +mFwFRWloUcsBEM4+qoU9u/uDnTqhivE4hmc5nIAciE=)
2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:e7:69:df:79:93:cc:67:00:28:83:04:e2:61:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Apr 30 06:02:03 2026 GMT
Not After : May 1 06:02:03 2026 GMT
Subject: CN=b97a7f7cd3849d8dece59eb92386dced00863526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:04:70:7c:59:87:e2:b1:9a:74:5e:86:30:
f5:6b:e5:80:85:58:ab:2d:49:c0:9f:1e:dc:7e:82:
23:fb:4e:4c:c2:87:18:be:ac:8d:b6:c0:56:5a:b7:
63:bc:f9:ba:9d:5b:be:37:b4:6b:f8:f7:07:03:89:
7b:82:e8:fc:07:03:fd:56:b0:0c:bf:30:6f:1c:a6:
61:62:ea:c4:71:d3:03:40:ac:d4:69:23:f6:2b:ef:
d3:02:84:32:0c:86:ed:bf:fc:3b:85:87:31:39:c2:
0a:cd:97:28:40:41:79:ce:8a:2e:27:e2:a4:fa:63:
b9:df:7b:1e:1e:43:a5:55:9b:41:5d:84:c4:0e:6d:
04:76:c6:8e:74:77:83:68:db:67:91:8f:4c:ed:2c:
5d:04:db:7f:77:e1:d4:0c:87:77:62:02:54:94:a2:
05:c4:14:9b:e1:f8:aa:b0:66:55:9e:f6:dc:76:84:
07:13:12:69:83:a5:ef:d0:a3:ad:72:36:e1:3e:27:
c2:3e:24:f4:31:9b:dd:f3:c0:c9:41:94:cf:9b:24:
4c:ad:a2:36:55:a8:26:c7:b0:44:9f:54:bf:08:24:
f8:50:7a:0c:ca:77:79:d8:59:e2:04:b8:57:da:33:
67:9d:41:2a:e9:45:03:70:7c:38:27:06:e3:44:96:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:7F:7C:D3:84:9D:8D:EC:E5:9E:B9:23:86:DC:ED:00:86:35:26
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:4d:3b:ca:69:85:7a:0f:3e:ae:5c:6c:27:a7:5b:b7:eb:
5d:d8:8c:da:23:8f:99:15:dd:a2:c2:2b:88:bd:b0:92:a1:3d:
fd:7a:b5:16:fd:59:0e:b4:86:2a:62:fd:24:d5:c0:2c:30:dd:
73:ad:6d:42:be:2d:57:da:ba:70:79:54:cb:70:2d:7a:cf:1e:
08:35:6f:70:74:7b:07:33:95:51:09:26:26:0a:5b:d0:b1:d4:
9a:52:74:b9:61:9a:26:a5:f4:1f:36:40:b3:57:bf:69:8e:68:
02:eb:8b:8c:e0:57:1d:40:0e:3a:99:fd:59:e8:f0:b8:43:70:
3a:1c:b8:ed:87:90:bd:c4:c7:fa:0a:ec:05:b6:58:8d:53:e9:
00:be:3d:57:7f:9f:43:d7:7e:29:72:12:65:3f:62:27:8d:2e:
58:8b:30:db:f9:22:07:be:e3:86:35:5f:e1:65:2b:4e:66:e4:
0a:02:76:67:dd:73:4d:32:19:7a:a3:a7:be:71:23:bb:59:1e:
b2:8b:2b:d9:80:56:b8:2d:84:c3:62:0a:c9:09:fa:28:b6:a8:
4b:f5:71:81:04:cf:6a:b8:8c:58:c7:1a:10:df:20:07:2e:d0:
5e:8e:cd:ec:1b:52:3f:9a:33:92:2b:7f:8f:b4:c4:8b:64:62:
18:4a:a8:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3c+udp33mTzGcAKIME4mG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw
ZGU2YmYwHhcNMjYwNDMwMDYwMjAzWhcNMjYwNTAxMDYwMjAzWjAzMTEwLwYDVQQD
EyhiOTdhN2Y3Y2QzODQ5ZDhkZWNlNTllYjkyMzg2ZGNlZDAwODYzNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaQEcHxZh+KxmnRehjD1a+WAhVir
LUnAnx7cfoIj+05MwocYvqyNtsBWWrdjvPm6nVu+N7Rr+PcHA4l7guj8BwP9VrAM
vzBvHKZhYurEcdMDQKzUaSP2K+/TAoQyDIbtv/w7hYcxOcIKzZcoQEF5zoouJ+Kk
+mO533seHkOlVZtBXYTEDm0EdsaOdHeDaNtnkY9M7SxdBNt/d+HUDId3YgJUlKIF
xBSb4fiqsGZVnvbcdoQHExJpg6Xv0KOtcjbhPifCPiT0MZvd88DJQZTPmyRMraI2
Vagmx7BEn1S/CCT4UHoMynd52FniBLhX2jNnnUEq6UUDcHw4JwbjRJZhxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl6f3zThJ2N7OWeuSOG3O0AhjUmMB8GA1UdIwQY
MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt
NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz
LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3lNO8pp
hXoPPq5cbCenW7frXdiM2iOPmRXdosIriL2wkqE9/Xq1Fv1ZDrSGKmL9JNXALDDd
c61tQr4tV9q6cHlUy3Ates8eCDVvcHR7BzOVUQkmJgpb0LHUmlJ0uWGaJqX0HzZA
s1e/aY5oAuuLjOBXHUAOOpn9WejwuENwOhy47YeQvcTH+grsBbZYjVPpAL49V3+f
Q9d+KXISZT9iJ40uWIsw2/kiB77jhjVf4WUrTmbkCgJ2Z91zTTIZeqOnvnEju1ke
sosr2YBWuC2Ew2IKyQn6KLaoS/VxgQTPariMWMcaEN8gBy7QXo7N7BtSP5ozkit/
j7TEi2RiGEqo/Q==
-----END CERTIFICATE-----
Generated at Thu Apr 30 16:42:16 2026 by rpki-client