Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: q8m16HkMFyP972OK2NTHBiLv49Vi7xMc7bFYUYKncts=
Subject key identifier: 1A:A4:07:F4:CC:96:3C:BB:69:B2:F2:2D:E1:E2:CB:44:89:6F:A0:A1
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 019F183035139DD5FC660A1C9615925E9D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 090B
Signing time: Tue 30 Jun 2026 11:00:40 +0000
Manifest this update: Tue 30 Jun 2026 11:00:40 +0000
Manifest next update: Wed 01 Jul 2026 11:00:40 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: IdYjHKqxgayS49Gg0dIKoZrH790Yjkx0RTqZM/HzJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:35:13:9d:d5:fc:66:0a:1c:96:15:92:5e:9d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Jun 30 11:00:40 2026 GMT
Not After : Jul 1 11:00:40 2026 GMT
Subject: CN=1aa407f4cc963cbb69b2f22de1e2cb44896fa0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:8f:1c:9b:ec:39:8b:3e:0c:83:8f:eb:e5:
94:3c:f5:76:9e:eb:f1:7a:1b:c5:1b:a2:82:06:52:
84:05:64:be:4c:97:5b:a1:33:aa:68:f5:83:4a:37:
39:15:73:ce:9a:3c:0a:17:2b:06:65:b5:45:b5:2a:
e4:48:54:52:b3:47:8b:82:49:f0:84:ec:ff:c7:38:
a9:ee:cc:80:5a:a8:c2:13:bd:64:fb:a8:5a:e9:80:
50:d0:5e:d0:29:fc:21:dc:b9:78:2e:ad:39:61:ee:
75:fc:35:bf:71:74:07:70:e9:1d:89:49:7b:c1:f4:
db:6d:20:d1:33:9c:67:4b:37:1f:1a:14:d2:e7:f7:
37:aa:ae:93:ad:cb:79:54:89:31:ef:0c:56:0b:b9:
6a:d3:65:f3:76:ab:15:5a:f0:15:ae:a9:d7:97:f7:
a3:82:c2:e7:9b:6f:ea:56:8d:ef:d4:39:eb:b3:fa:
42:7a:65:d6:01:23:e9:b5:25:1b:da:73:ec:7e:1e:
90:e7:d8:e4:6d:53:bf:cf:04:c1:0a:82:ea:a3:c1:
51:79:53:55:a4:f5:b6:3f:c2:6b:be:7c:bd:6d:cf:
80:4a:3c:d2:8c:07:5a:be:bf:5c:ba:fc:ce:2a:57:
70:4d:3b:6c:e7:92:91:05:79:79:b2:01:26:b1:f5:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A4:07:F4:CC:96:3C:BB:69:B2:F2:2D:E1:E2:CB:44:89:6F:A0:A1
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a4:a5:06:eb:6b:7c:4d:e4:3a:cc:ca:54:ea:07:03:4c:f5:
9f:db:2d:18:48:cb:2d:2e:66:98:9b:ef:7a:d9:03:b8:09:87:
73:ed:37:97:78:d4:30:ef:c9:16:b1:48:13:67:b3:d8:5a:84:
ec:c3:5a:1f:40:e0:1d:03:ff:70:b0:f7:f7:2f:ea:4f:73:0d:
2e:3f:5f:41:66:45:1e:d8:7c:a7:8f:24:1b:a6:74:e5:fc:b4:
9c:12:7e:54:97:ab:6c:56:e0:d2:77:9f:aa:9c:c6:1b:7e:7e:
86:02:76:9c:da:63:7f:c9:ba:b0:74:04:9a:d5:3f:70:58:95:
74:38:aa:8f:66:cd:7d:0a:31:33:d1:95:01:93:47:dc:f7:65:
20:c0:c4:b2:6d:14:ed:0d:9b:5a:4a:37:32:21:57:3a:9f:2c:
c1:c2:42:35:7d:ec:7e:e7:d2:25:c3:4d:9e:98:d9:25:db:6e:
ea:34:8c:4d:e1:0d:b9:a3:d9:2c:c0:f4:7b:17:69:f9:f9:3f:
78:fb:82:19:52:c3:15:9b:d5:7d:a3:bd:81:0b:ae:79:98:ce:
df:ff:3d:b3:5a:21:c2:3f:d7:c2:71:d1:94:73:f6:6b:f7:36:
23:da:26:fe:cb:2e:24:a2:7e:6a:07:67:82:90:56:16:ad:2c:
56:d1:c9:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMDUTndX8ZgoclhWSXp2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmFkNTFiZmFkZDI0NTMyMWJlMDkyZTY4MWQ4ZGU2ZTJk
Mjc1YzMwHhcNMjYwNjMwMTEwMDQwWhcNMjYwNzAxMTEwMDQwWjAzMTEwLwYDVQQD
EygxYWE0MDdmNGNjOTYzY2JiNjliMmYyMmRlMWUyY2I0NDg5NmZhMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH2PHJvsOYs+DIOP6+WUPPV2nuvx
ehvFG6KCBlKEBWS+TJdboTOqaPWDSjc5FXPOmjwKFysGZbVFtSrkSFRSs0eLgknw
hOz/xzip7syAWqjCE71k+6ha6YBQ0F7QKfwh3Ll4Lq05Ye51/DW/cXQHcOkdiUl7
wfTbbSDRM5xnSzcfGhTS5/c3qq6Trct5VIkx7wxWC7lq02XzdqsVWvAVrqnXl/ej
gsLnm2/qVo3v1Dnrs/pCemXWASPptSUb2nPsfh6Q59jkbVO/zwTBCoLqo8FReVNV
pPW2P8Jrvny9bc+ASjzSjAdavr9cuvzOKldwTTts55KRBXl5sgEmsfWztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqkB/TMljy7abLyLeHiy0SJb6ChMB8GA1UdIwQY
MBaAFOX61Rv63SRTIb4JLmgdjebi0nXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYt
ZDViZGI2MzlmYmNhLzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYtZDViZGI2MzlmYmNh
LzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqSlButr
fE3kOszKVOoHA0z1n9stGEjLLS5mmJvvetkDuAmHc+03l3jUMO/JFrFIE2ez2FqE
7MNaH0DgHQP/cLD39y/qT3MNLj9fQWZFHth8p48kG6Z05fy0nBJ+VJerbFbg0nef
qpzGG35+hgJ2nNpjf8m6sHQEmtU/cFiVdDiqj2bNfQoxM9GVAZNH3PdlIMDEsm0U
7Q2bWko3MiFXOp8swcJCNX3sfufSJcNNnpjZJdtu6jSMTeENuaPZLMD0exdp+fk/
ePuCGVLDFZvVfaO9gQuueZjO3/89s1ohwj/XwnHRlHP2a/c2I9om/ssuJKJ+agdn
gpBWFq0sVtHJvQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:08 2026 by rpki-client