Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: QUu1BqFVFaRuzFTcJpsLXkkALfpkp/nhxMvYL7/3nOk=
Subject key identifier: A3:04:E5:01:CC:53:43:3B:FE:87:81:48:F5:97:82:3E:B9:D1:DF:CA
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 01A000933721E2CBEDCEB478864EE83AA565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 06BB
Signing time: Fri 14 Aug 2026 14:00:42 +0000
Manifest this update: Fri 14 Aug 2026 14:00:42 +0000
Manifest next update: Sat 15 Aug 2026 14:00:42 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: yZugs/OSMyuI+2xkJGnDdoZ8//mwKZPYAhxfFTSrOQE=)
2: VC6pU8sH53fsSXhpjxvq2spJkW8.asa (hash: eY4uxqqdpm3pkCV4oqysR7RZdD/oSeWBc0FKFASjw1g=)
3: XaMeeXQ5ysc8kABhh0l_VC0xvRQ.roa (hash: f1b46uPGTd/9X8UPdm3VptVXLZpHjki1wLcZZ1TfO/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:37:21:e2:cb:ed:ce:b4:78:86:4e:e8:3a:a5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Aug 14 14:00:42 2026 GMT
Not After : Aug 15 14:00:42 2026 GMT
Subject: CN=a304e501cc53433bfe878148f597823eb9d1dfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:5b:35:ff:1c:29:01:4f:70:88:ad:00:dc:
d7:ff:f8:21:44:dd:8d:8b:e1:e8:03:8a:8e:3b:76:
ec:ef:cd:fe:4f:f9:40:1b:05:2a:c7:9e:78:ae:39:
98:e0:08:05:7c:f5:c0:8b:d7:83:c9:f3:08:58:70:
38:3c:7a:85:de:39:9d:97:c4:e9:32:ad:5a:7b:c7:
61:0c:81:d7:62:20:54:41:32:18:bb:bc:af:30:a2:
d6:d0:a5:25:20:22:48:b7:a3:73:d9:bc:2e:e3:4c:
f9:cf:55:96:e0:7f:cd:e7:5b:c9:e5:40:08:a5:85:
85:c0:ef:df:cf:00:d7:fb:6a:b7:b8:5e:45:d8:bd:
62:a6:db:76:29:d5:26:00:95:19:87:c2:51:5c:45:
b3:7a:a5:9b:83:5f:0a:80:80:39:e0:bf:24:22:8a:
ea:7c:6c:54:ff:f1:c2:5f:d0:f7:34:dc:2c:1b:79:
ae:01:ce:9a:35:db:f7:84:bb:20:18:53:49:8d:50:
11:a3:3a:37:57:ea:c0:3a:9c:f3:29:ec:6e:ed:d3:
7d:10:ff:bd:36:a2:23:31:0a:1d:87:69:c1:11:cf:
79:5b:30:54:1b:af:c2:72:46:a0:a5:85:ef:b0:ad:
fa:46:15:93:e0:86:a6:49:45:c9:d0:ef:db:e0:eb:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:E5:01:CC:53:43:3B:FE:87:81:48:F5:97:82:3E:B9:D1:DF:CA
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6c:b3:d9:68:72:3e:b9:d6:fa:d1:ed:71:5b:68:df:97:c9:
2e:4c:53:c7:e4:1b:44:7b:bd:e6:30:c1:3b:b6:ec:84:99:c3:
a9:a8:3d:41:e5:d2:8b:15:21:b9:9d:21:51:64:27:51:05:f8:
24:55:df:d1:d4:06:96:90:fc:03:c4:cf:97:df:59:49:f9:87:
76:ad:2b:d5:c0:4a:8b:6e:9c:7b:74:fc:41:16:34:29:da:7c:
07:57:d9:ea:65:9d:cf:85:a6:cf:cf:4f:62:b1:e1:f0:4e:f7:
ff:90:8d:d1:e6:5f:c7:bc:12:ae:07:34:c4:e9:17:53:03:e2:
22:00:4e:05:0b:78:92:47:27:b3:9d:62:cd:02:cf:17:06:67:
30:f9:66:43:60:f2:bc:77:60:0d:95:d8:d7:78:53:d8:96:ef:
06:38:63:f1:05:f5:2f:69:02:03:90:52:4a:91:2f:bf:8c:76:
44:2e:13:3a:0f:8e:37:80:ee:5b:39:e0:75:7c:3d:91:04:dd:
f8:58:55:1c:58:bb:02:68:0c:d4:a1:26:84:8c:43:f4:6e:2a:
0e:95:e4:40:e2:26:ec:33:19:4a:57:c6:b4:c0:34:bf:0f:d4:
80:0d:08:7b:a0:d8:2b:d4:13:b5:62:f4:07:bf:69:07:b7:cb:
47:f6:2e:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAkzch4svtzrR4hk7oOqVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzQ1NWI4YThiMDU3NmQ2Zjk0ZjdlMDE0ZjZiMzRkNWFh
NmM0ZDcwHhcNMjYwODE0MTQwMDQyWhcNMjYwODE1MTQwMDQyWjAzMTEwLwYDVQQD
EyhhMzA0ZTUwMWNjNTM0MzNiZmU4NzgxNDhmNTk3ODIzZWI5ZDFkZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomRbNf8cKQFPcIitANzX//ghRN2N
i+HoA4qOO3bs783+T/lAGwUqx554rjmY4AgFfPXAi9eDyfMIWHA4PHqF3jmdl8Tp
Mq1ae8dhDIHXYiBUQTIYu7yvMKLW0KUlICJIt6Nz2bwu40z5z1WW4H/N51vJ5UAI
pYWFwO/fzwDX+2q3uF5F2L1iptt2KdUmAJUZh8JRXEWzeqWbg18KgIA54L8kIorq
fGxU//HCX9D3NNwsG3muAc6aNdv3hLsgGFNJjVARozo3V+rAOpzzKexu7dN9EP+9
NqIjMQodh2nBEc95WzBUG6/CckagpYXvsK36RhWT4IamSUXJ0O/b4OtUvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKME5QHMU0M7/oeBSPWXgj650d/KMB8GA1UdIwQY
MBaAFOV0VbiosFdtb5T34BT2s01apsTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDkt
MDAyMzNhZTUwYjUyLzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDktMDAyMzNhZTUwYjUy
LzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmyz2Why
PrnW+tHtcVto35fJLkxTx+QbRHu95jDBO7bshJnDqag9QeXSixUhuZ0hUWQnUQX4
JFXf0dQGlpD8A8TPl99ZSfmHdq0r1cBKi26ce3T8QRY0Kdp8B1fZ6mWdz4Wmz89P
YrHh8E73/5CN0eZfx7wSrgc0xOkXUwPiIgBOBQt4kkcns51izQLPFwZnMPlmQ2Dy
vHdgDZXY13hT2JbvBjhj8QX1L2kCA5BSSpEvv4x2RC4TOg+ON4DuWzngdXw9kQTd
+FhVHFi7AmgM1KEmhIxD9G4qDpXkQOIm7DMZSlfGtMA0vw/UgA0Ie6DYK9QTtWL0
B79pB7fLR/YuXg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:58 2026 by rpki-client