Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: wS8n79XNy5SJeXwnJlObd0VhS2gqkSq1DJY3ZZcL3vA=
Subject key identifier: 94:6D:6C:40:78:C5:F1:DE:96:B2:B5:0D:FB:98:B2:65:86:57:8C:8F
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 01A13F6FEBAC66061A6329490E6847FF4015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 1A3F
Signing time: Thu 15 Oct 2026 12:01:01 +0000
Manifest this update: Thu 15 Oct 2026 12:01:01 +0000
Manifest next update: Fri 16 Oct 2026 12:01:01 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: bV+52uKyBKvwQ9Kjm3zw7mjZd97i13ZZFDdk77Poez4=)
2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:6f:eb:ac:66:06:1a:63:29:49:0e:68:47:ff:40:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Oct 15 12:01:01 2026 GMT
Not After : Oct 16 12:01:01 2026 GMT
Subject: CN=946d6c4078c5f1de96b2b50dfb98b26586578c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:4d:e0:ce:03:f7:9c:64:d0:cd:2f:f5:59:
94:90:fb:db:7d:e9:74:9f:56:a4:c8:a6:63:4e:2c:
14:a4:92:64:9f:ca:a5:bc:5a:4a:3b:90:b1:7e:80:
a6:5e:2b:d1:8e:99:1a:2c:fe:d8:37:38:19:25:8a:
93:d6:14:bb:2c:f4:0d:80:c2:25:d1:6c:86:04:4d:
18:e9:59:3d:0b:b1:ed:8c:17:50:a9:9e:fc:a1:99:
e4:77:6d:12:41:1d:f1:f0:8b:e2:45:2a:19:5f:2a:
9d:fe:b7:c7:a2:b2:42:d2:df:32:81:a4:8c:d3:36:
03:6c:3f:84:f3:a2:76:a1:f5:43:06:6e:93:18:e2:
b7:ee:4b:b0:d7:77:18:cd:f7:65:ac:e5:38:4e:30:
22:83:97:70:e1:73:00:f9:fd:82:14:e1:2b:66:31:
e5:6a:4d:75:cd:50:a5:3a:c8:e2:10:88:a7:b4:52:
1a:f0:ed:ce:a2:52:bd:82:a5:7d:c7:cf:e3:ee:cb:
f1:b7:e4:b6:c6:a0:f0:f7:0f:1d:e2:7b:ec:3c:1c:
d7:09:36:f9:7e:c1:2d:0b:15:84:06:3e:5c:20:de:
ed:dc:20:7e:77:54:81:f2:77:60:c3:90:02:c0:08:
85:c1:47:71:04:14:ed:38:ec:78:4c:86:60:1e:c0:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:6C:40:78:C5:F1:DE:96:B2:B5:0D:FB:98:B2:65:86:57:8C:8F
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:70:03:f5:1d:0a:01:4b:f0:e0:c6:cc:6c:26:5a:32:f6:59:
ef:70:14:a6:3a:77:c3:ad:71:57:cb:7b:cc:0a:b8:5e:8c:d8:
ba:67:f0:85:e9:f0:93:ab:63:de:c6:08:7c:4b:12:26:5f:89:
91:03:49:19:6e:64:87:8d:5e:c3:5b:1d:ce:25:60:c4:1f:da:
4b:26:e4:80:f1:1b:51:05:63:b8:95:e8:02:83:e0:96:90:81:
90:0a:7f:9b:c4:09:69:55:fa:49:cb:b7:b8:6a:2a:ae:34:41:
13:21:cc:f7:1c:63:87:c5:5a:54:e0:aa:a1:6b:40:5a:41:30:
cf:c1:2e:6e:6a:4b:7b:8d:4d:24:38:81:15:85:ae:b3:b2:dc:
96:a2:4d:76:56:b9:0a:c7:42:8d:33:f4:b2:40:d2:d8:33:6c:
4f:92:19:b3:da:7b:6c:f8:b9:76:c4:1a:e8:91:cf:40:3a:10:
aa:a5:ba:f6:07:48:28:cf:d1:1f:c8:d3:25:e4:57:31:ea:07:
43:20:6d:c6:96:a7:2d:81:cf:7d:a0:df:3e:e4:00:85:23:9b:
ea:b9:b2:0f:1c:49:44:48:70:7a:af:db:36:e9:be:f0:7f:c3:
b6:e8:88:bc:3f:df:9f:11:1d:08:e4:60:aa:48:4d:88:21:f8:
b9:06:a4:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/b+usZgYaYylJDmhH/0AVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NDNmYzIwM2Y3MDZmOTczMTQxMjc2MWIyN2ExYTRiMzk1
Y2ZjMWUwHhcNMjYxMDE1MTIwMTAxWhcNMjYxMDE2MTIwMTAxWjAzMTEwLwYDVQQD
Eyg5NDZkNmM0MDc4YzVmMWRlOTZiMmI1MGRmYjk4YjI2NTg2NTc4YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR1N4M4D95xk0M0v9VmUkPvbfel0
n1akyKZjTiwUpJJkn8qlvFpKO5CxfoCmXivRjpkaLP7YNzgZJYqT1hS7LPQNgMIl
0WyGBE0Y6Vk9C7HtjBdQqZ78oZnkd20SQR3x8IviRSoZXyqd/rfHorJC0t8ygaSM
0zYDbD+E86J2ofVDBm6TGOK37kuw13cYzfdlrOU4TjAig5dw4XMA+f2CFOErZjHl
ak11zVClOsjiEIintFIa8O3OolK9gqV9x8/j7svxt+S2xqDw9w8d4nvsPBzXCTb5
fsEtCxWEBj5cIN7t3CB+d1SB8ndgw5ACwAiFwUdxBBTtOOx4TIZgHsBuLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRtbEB4xfHelrK1DfuYsmWGV4yPMB8GA1UdIwQY
MBaAFORD/CA/cG+XMUEnYbJ6Gks5XPweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWIt
YzBmOWQwODdmYzEwLzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWItYzBmOWQwODdmYzEw
LzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXAD9R0K
AUvw4MbMbCZaMvZZ73AUpjp3w61xV8t7zAq4XozYumfwhenwk6tj3sYIfEsSJl+J
kQNJGW5kh41ew1sdziVgxB/aSybkgPEbUQVjuJXoAoPglpCBkAp/m8QJaVX6Scu3
uGoqrjRBEyHM9xxjh8VaVOCqoWtAWkEwz8EubmpLe41NJDiBFYWus7LclqJNdla5
CsdCjTP0skDS2DNsT5IZs9p7bPi5dsQa6JHPQDoQqqW69gdIKM/RH8jTJeRXMeoH
QyBtxpanLYHPfaDfPuQAhSOb6rmyDxxJREhweq/bNum+8H/DtuiIvD/fnxEdCORg
qkhNiCH4uQakGA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:10 2026 by rpki-client