Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
File: 5akg5_Td28JaYDiLxP0ejmRqbdI.mft (raw, json)
Hash identifier: MNk3u7I8DvTy9OCJO+vIa6o7t4Fj+u3/t3BLdu9c16M=
Subject key identifier: 22:0C:38:F9:5B:65:8C:5B:7B:BD:44:49:3D:2A:96:3B:BF:A3:0E:1F
Authority key identifier: E5:A9:20:E7:F4:DD:DB:C2:5A:60:38:8B:C4:FD:1E:8E:64:6A:6D:D2
Certificate issuer: /CN=e5a920e7f4dddbc25a60388bc4fd1e8e646a6dd2
Certificate serial: 01A0404E0FFE897EA14F7A1526DFAE666BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:00:52 +0000
Manifest this update: Wed 26 Aug 2026 23:00:52 +0000
Manifest next update: Thu 27 Aug 2026 23:00:52 +0000
Files and hashes: 1: 5akg5_Td28JaYDiLxP0ejmRqbdI.crl (hash: 2ibaec+CaKehzMuY/K7UioYjEmHtV/3U1cdu4VxyO5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:0f:fe:89:7e:a1:4f:7a:15:26:df:ae:66:6b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a920e7f4dddbc25a60388bc4fd1e8e646a6dd2
Validity
Not Before: Aug 26 23:00:52 2026 GMT
Not After : Aug 27 23:00:52 2026 GMT
Subject: CN=220c38f95b658c5b7bbd44493d2a963bbfa30e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:12:c0:fe:5a:65:03:cf:bb:bd:a2:4d:93:
20:0f:9b:4e:4f:73:3d:df:28:2e:94:c0:a4:e0:c1:
af:bc:f6:cd:3d:8a:14:7b:d0:8c:d1:88:f8:e5:a2:
a5:1e:57:12:89:67:ca:37:06:55:98:cb:49:3e:91:
59:f4:0d:1f:2a:4e:19:05:50:4f:94:a8:4e:ba:5d:
02:01:31:5a:e9:ff:5d:fe:55:36:59:a9:68:40:f9:
8f:b9:7e:5f:f3:48:af:e9:91:61:ab:3d:13:ba:7d:
a3:91:6e:3b:aa:59:e8:1f:d3:f9:0f:c7:3f:46:92:
b1:19:7f:4b:28:55:05:b8:fe:f6:0e:d4:11:7e:0f:
55:fb:ad:a5:bb:2f:71:cb:28:c8:87:3a:e1:fa:3e:
94:7c:df:9a:8b:60:11:82:1a:10:dc:15:2a:f3:03:
25:2c:78:04:64:5a:18:e1:8f:40:c0:0f:48:cf:0c:
2a:22:ec:5e:ae:c7:39:a6:57:cf:39:b4:02:e3:c8:
0a:1a:ea:fd:61:38:42:24:88:79:c0:33:71:cc:94:
bd:e5:9e:1c:94:54:a3:a1:0b:f1:81:16:4a:eb:3e:
64:5b:26:13:10:0f:f1:15:82:9a:db:43:8b:3a:d2:
25:44:14:bc:c8:1b:1a:b7:f4:50:2f:75:de:a4:85:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0C:38:F9:5B:65:8C:5B:7B:BD:44:49:3D:2A:96:3B:BF:A3:0E:1F
X509v3 Authority Key Identifier:
keyid:E5:A9:20:E7:F4:DD:DB:C2:5A:60:38:8B:C4:FD:1E:8E:64:6A:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:55:87:ff:bc:d4:78:f6:33:67:28:e7:91:f5:02:4c:e0:a1:
3d:40:d7:53:5d:ca:54:a8:07:5a:a6:99:96:cb:c5:3c:97:b5:
c1:dc:cc:cd:1f:e8:97:70:46:69:7b:4d:26:f6:68:91:0a:1e:
5c:72:a7:a3:f7:5a:86:16:ff:41:a8:e2:a0:d0:52:6f:5c:e0:
07:9a:b4:6a:ec:23:18:31:d2:9f:5c:32:29:14:16:ac:e9:b8:
4e:1f:c4:6a:25:79:13:75:93:6a:06:66:db:8d:c6:81:95:74:
97:c2:29:37:2c:70:68:90:24:b6:da:28:79:9e:b4:8b:dc:20:
59:bb:4b:6f:fe:83:ff:ee:eb:63:fd:ba:c0:bd:21:aa:2d:79:
89:13:c8:c4:de:9c:c1:47:e0:46:51:94:ee:8b:c5:de:7b:04:
49:04:9c:ae:fa:2e:a4:95:72:6f:19:24:06:81:4b:29:d8:52:
a7:38:cc:21:e7:53:44:00:2c:5f:6d:bb:36:13:37:fa:e5:66:
f4:74:d0:91:74:9b:49:4d:b8:53:d1:fe:73:74:a5:94:64:66:
ba:c8:7c:8d:69:00:ad:53:bd:e1:5a:c2:5e:af:07:c6:52:ca:
be:ce:fd:41:b3:b8:01:af:9a:72:78:fc:44:32:b4:a1:09:78:
ec:c5:67:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATg/+iX6hT3oVJt+uZmvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTkyMGU3ZjRkZGRiYzI1YTYwMzg4YmM0ZmQxZThlNjQ2
YTZkZDIwHhcNMjYwODI2MjMwMDUyWhcNMjYwODI3MjMwMDUyWjAzMTEwLwYDVQQD
EygyMjBjMzhmOTViNjU4YzViN2JiZDQ0NDkzZDJhOTYzYmJmYTMwZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP4SwP5aZQPPu72iTZMgD5tOT3M9
3ygulMCk4MGvvPbNPYoUe9CM0Yj45aKlHlcSiWfKNwZVmMtJPpFZ9A0fKk4ZBVBP
lKhOul0CATFa6f9d/lU2WaloQPmPuX5f80iv6ZFhqz0Tun2jkW47qlnoH9P5D8c/
RpKxGX9LKFUFuP72DtQRfg9V+62luy9xyyjIhzrh+j6UfN+ai2ARghoQ3BUq8wMl
LHgEZFoY4Y9AwA9IzwwqIuxersc5plfPObQC48gKGur9YThCJIh5wDNxzJS95Z4c
lFSjoQvxgRZK6z5kWyYTEA/xFYKa20OLOtIlRBS8yBsat/RQL3XepIUIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIMOPlbZYxbe71EST0qlju/ow4fMB8GA1UdIwQY
MBaAFOWpIOf03dvCWmA4i8T9Ho5kam3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFrZzVfVGQyOEphWURpTHhQMGVqbVJxYmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNzExZDctZWEwNi00ZTQyLTk4Zjct
NjNhNGNhZWRiMzhlLzEvNWFrZzVfVGQyOEphWURpTHhQMGVqbVJxYmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNzExZDctZWEwNi00ZTQyLTk4ZjctNjNhNGNhZWRiMzhl
LzEvNWFrZzVfVGQyOEphWURpTHhQMGVqbVJxYmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlWH/7zU
ePYzZyjnkfUCTOChPUDXU13KVKgHWqaZlsvFPJe1wdzMzR/ol3BGaXtNJvZokQoe
XHKno/dahhb/QajioNBSb1zgB5q0auwjGDHSn1wyKRQWrOm4Th/EaiV5E3WTagZm
243GgZV0l8IpNyxwaJAkttooeZ60i9wgWbtLb/6D/+7rY/26wL0hqi15iRPIxN6c
wUfgRlGU7ovF3nsESQScrvoupJVybxkkBoFLKdhSpzjMIedTRAAsX227NhM3+uVm
9HTQkXSbSU24U9H+c3SllGRmush8jWkArVO94VrCXq8HxlLKvs79QbO4Aa+acnj8
RDK0oQl47MVnvw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:54:18 2026 by rpki-client