Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: fmE9Skx+mK6nOzmibLGbN3uvsCcc+05Jj/3ZQquvG4o=
Subject key identifier: EF:31:3E:7C:EF:76:50:F7:EA:21:C8:48:7D:2C:08:D7:6A:48:F3:97
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 01A1822B8605BD729F2DC016029137F6F3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 057C
Signing time: Wed 28 Oct 2026 11:00:52 +0000
Manifest this update: Wed 28 Oct 2026 11:00:52 +0000
Manifest next update: Thu 29 Oct 2026 11:00:52 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: qD+UNZYcrckJ8u2u1u3c7A2cpH0Z7W1Zc5kuC8BtuCU=)
2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:86:05:bd:72:9f:2d:c0:16:02:91:37:f6:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Oct 28 11:00:52 2026 GMT
Not After : Oct 29 11:00:52 2026 GMT
Subject: CN=ef313e7cef7650f7ea21c8487d2c08d76a48f397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:82:d1:c1:1a:3b:e0:16:07:b3:d0:bb:1d:
39:6f:5b:28:30:80:76:08:f6:8d:09:5f:5f:ab:c4:
81:19:ce:22:8d:70:41:be:56:ce:f1:34:fe:fc:d7:
1c:cc:13:b7:1f:47:7f:13:76:7a:5d:3d:8d:b1:49:
c9:b5:bb:76:a0:75:e3:2a:cc:e1:6f:5c:a8:96:d9:
2b:52:24:e1:b3:5b:a9:fc:86:71:8e:de:49:50:87:
6a:f7:06:eb:7a:bb:bd:34:9c:bd:f0:3e:a1:84:5b:
d8:04:00:18:6d:07:7d:aa:83:5f:ca:af:1a:dc:e7:
56:09:d4:e3:b6:df:06:e8:8e:73:6e:25:4f:82:80:
5e:c3:79:61:71:7f:bf:38:a7:3d:64:12:5a:bf:a8:
a6:38:50:fe:0e:61:70:3f:ee:68:a7:3b:d5:ec:3e:
ee:3c:af:ac:b9:48:ca:2a:da:6b:17:5a:b0:d9:7d:
76:f3:03:fd:13:42:d8:b8:78:29:aa:88:be:b0:11:
7c:f4:17:13:da:79:74:19:ae:3f:e3:9f:f6:62:63:
25:0d:f0:5f:4b:34:b1:34:67:5e:87:ec:a5:0d:3c:
a0:79:94:4c:a8:30:48:97:bc:69:95:8a:54:75:65:
48:7b:75:aa:ab:a4:63:5a:34:c1:35:ef:60:a0:b7:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:31:3E:7C:EF:76:50:F7:EA:21:C8:48:7D:2C:08:D7:6A:48:F3:97
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7f:88:03:f5:3b:3d:5d:cb:56:31:14:be:49:f6:aa:ad:b7:
87:f3:8a:f0:fd:04:ca:54:80:7c:00:5c:2d:c9:06:c9:db:96:
18:8b:a2:64:45:d5:62:10:03:e8:27:58:e7:69:2d:8f:fb:7d:
fa:0b:dc:46:65:98:91:6c:ba:4b:31:fa:1b:e0:5b:a0:68:9d:
af:4f:73:b9:75:2c:a4:52:fb:1e:0d:72:80:29:94:d6:97:79:
fc:35:f9:ff:26:2b:64:d5:09:ee:84:bc:5e:4f:2a:22:dc:a8:
d7:07:74:fc:86:c3:61:88:c6:94:75:40:43:9e:4d:53:b3:80:
5a:ec:5e:83:d7:74:19:d2:f9:22:7d:8b:e2:41:ff:c9:69:78:
07:35:b8:91:40:65:3b:1c:e9:0b:e8:1b:2a:cb:15:9c:63:54:
58:e9:36:96:d4:10:6b:61:49:d2:3d:a8:11:ad:65:ce:e5:35:
b8:3b:69:74:25:d6:13:23:fb:fa:56:f5:7b:13:15:61:65:1c:
83:65:26:28:72:d3:be:c1:1b:81:6e:3a:99:64:4f:3a:aa:01:
b8:d4:ac:0f:c3:20:32:a0:a2:4b:78:90:94:b5:ff:dc:40:a2:
6f:47:e7:1a:42:e3:3e:d6:b1:a9:d0:59:69:f5:ff:74:90:98:
82:59:84:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK4YFvXKfLcAWApE39vO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTZjN2IyMDE5NTYwN2YyN2IxM2Q4OGY5MmJmMWQwZWIz
OGU2MGYwHhcNMjYxMDI4MTEwMDUyWhcNMjYxMDI5MTEwMDUyWjAzMTEwLwYDVQQD
EyhlZjMxM2U3Y2VmNzY1MGY3ZWEyMWM4NDg3ZDJjMDhkNzZhNDhmMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX2C0cEaO+AWB7PQux05b1soMIB2
CPaNCV9fq8SBGc4ijXBBvlbO8TT+/NcczBO3H0d/E3Z6XT2NsUnJtbt2oHXjKszh
b1yoltkrUiThs1up/IZxjt5JUIdq9wbreru9NJy98D6hhFvYBAAYbQd9qoNfyq8a
3OdWCdTjtt8G6I5zbiVPgoBew3lhcX+/OKc9ZBJav6imOFD+DmFwP+5opzvV7D7u
PK+suUjKKtprF1qw2X128wP9E0LYuHgpqoi+sBF89BcT2nl0Ga4/45/2YmMlDfBf
SzSxNGdeh+ylDTygeZRMqDBIl7xplYpUdWVIe3Wqq6RjWjTBNe9goLe4GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8xPnzvdlD36iHISH0sCNdqSPOXMB8GA1UdIwQY
MBaAFOYWx7IBlWB/J7E9iPkr8dDrOOYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDkt
NWNkMDA0ZDZlMzY2LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDktNWNkMDA0ZDZlMzY2
LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX+IA/U7
PV3LVjEUvkn2qq23h/OK8P0EylSAfABcLckGyduWGIuiZEXVYhAD6CdY52ktj/t9
+gvcRmWYkWy6SzH6G+BboGidr09zuXUspFL7Hg1ygCmU1pd5/DX5/yYrZNUJ7oS8
Xk8qItyo1wd0/IbDYYjGlHVAQ55NU7OAWuxeg9d0GdL5In2L4kH/yWl4BzW4kUBl
OxzpC+gbKssVnGNUWOk2ltQQa2FJ0j2oEa1lzuU1uDtpdCXWEyP7+lb1exMVYWUc
g2UmKHLTvsEbgW46mWRPOqoBuNSsD8MgMqCiS3iQlLX/3ECib0fnGkLjPtaxqdBZ
afX/dJCYglmEKg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:43 2026 by rpki-client