Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: QfKWThUup5tyEcesnRcmIzW4kFH0BDeWkhQgqx+X6mE=
Subject key identifier: F2:C5:C9:A1:DF:AA:1D:A2:C0:A0:E0:01:3B:5E:98:C3:A3:3B:44:89
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 019F17F92D29AEF61726EFB97A03A303CF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 10:00:33 +0000
Manifest this update: Tue 30 Jun 2026 10:00:33 +0000
Manifest next update: Wed 01 Jul 2026 10:00:33 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: ADgcyYjIw0RFoMg/C0BFG6HU6O5fvW6FurR45hPkVhQ=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:2d:29:ae:f6:17:26:ef:b9:7a:03:a3:03:cf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Jun 30 10:00:33 2026 GMT
Not After : Jul 1 10:00:33 2026 GMT
Subject: CN=f2c5c9a1dfaa1da2c0a0e0013b5e98c3a33b4489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:39:35:ad:48:de:7c:40:00:dc:40:39:32:
f6:41:20:9f:f8:a0:e8:d5:97:69:a3:0f:dd:40:46:
45:83:67:82:26:f7:49:5f:8a:e5:35:be:16:5e:f6:
9b:99:fc:e6:74:52:cf:3c:7d:f4:36:f4:34:97:45:
37:f9:84:f0:05:be:e0:a7:6d:18:27:7a:9f:25:5e:
4d:6b:35:83:09:da:6c:0c:5e:8d:a4:bb:8b:d9:7a:
bc:b3:f0:bf:21:40:13:75:65:2d:89:3d:23:6d:30:
3c:9c:04:de:d7:48:09:18:a8:8a:4e:cb:bd:c8:7a:
ce:d1:0b:f9:30:d7:31:bd:42:f6:b9:2f:ce:f5:ab:
dd:84:d6:fe:f5:d3:d5:fc:a9:2d:81:f2:93:5d:ec:
6a:46:85:8d:44:84:c1:cb:0c:0c:7e:5c:bc:15:cf:
62:3a:26:42:89:6e:0a:5f:42:7e:f2:8e:9e:2d:91:
23:8f:8e:9b:8e:7d:ad:3c:37:d0:03:ed:35:90:9b:
50:21:29:de:ea:51:96:1b:fd:03:67:b7:ab:ea:01:
3f:2b:c6:3c:a5:eb:0f:c0:5b:ca:66:65:c5:a4:7f:
62:6c:d2:4c:14:97:28:3c:be:8b:f0:e5:05:fc:44:
11:99:05:3d:be:b7:82:39:89:dc:07:b1:32:99:48:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:C9:A1:DF:AA:1D:A2:C0:A0:E0:01:3B:5E:98:C3:A3:3B:44:89
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bb:7d:79:b0:59:16:fd:99:02:27:2a:f5:af:22:2e:fe:48:
83:b3:31:ee:28:22:8b:ff:b4:49:4f:cb:86:47:79:f4:97:a3:
d1:f8:03:ff:43:22:a8:0d:13:ab:cd:c6:b5:56:08:ee:bb:90:
e1:18:38:69:9b:ed:b2:06:92:0e:10:ef:d3:db:45:3b:b1:cd:
a4:41:57:2b:01:8c:48:ef:70:88:bd:c8:9a:98:49:af:08:ce:
be:64:81:4a:5b:9e:8d:0d:26:f9:49:61:d7:0f:91:dd:aa:3f:
c2:3b:1c:81:fd:71:b7:e4:2e:89:37:9c:1f:ee:03:7c:0c:f7:
95:ca:b4:c0:06:52:c5:4c:7e:0a:b7:b2:53:60:55:4c:65:92:
16:b3:1d:8b:9f:1a:a7:98:18:40:7a:7f:5c:ef:64:5b:4c:94:
a2:36:6a:f7:d0:bc:b0:81:bc:ba:23:4e:9a:98:95:9f:fc:eb:
92:0f:ea:ac:a0:71:e1:f0:9d:e0:d7:67:2a:89:f4:b6:98:8e:
55:ab:ea:bd:0c:67:0f:18:53:f4:1b:14:74:f3:47:58:d5:80:
e4:f1:b3:e0:cb:df:7a:76:18:e8:5f:fc:38:c2:d2:2c:61:bc:
6a:eb:3f:f1:ad:56:5e:80:0c:5c:b1:5d:0e:92:9e:1e:e4:06:
e3:e9:0c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+S0prvYXJu+5egOjA88fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3
NTU4MjYwHhcNMjYwNjMwMTAwMDMzWhcNMjYwNzAxMTAwMDMzWjAzMTEwLwYDVQQD
EyhmMmM1YzlhMWRmYWExZGEyYzBhMGUwMDEzYjVlOThjM2EzM2I0NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVM5Na1I3nxAANxAOTL2QSCf+KDo
1Zdpow/dQEZFg2eCJvdJX4rlNb4WXvabmfzmdFLPPH30NvQ0l0U3+YTwBb7gp20Y
J3qfJV5NazWDCdpsDF6NpLuL2Xq8s/C/IUATdWUtiT0jbTA8nATe10gJGKiKTsu9
yHrO0Qv5MNcxvUL2uS/O9avdhNb+9dPV/KktgfKTXexqRoWNRITBywwMfly8Fc9i
OiZCiW4KX0J+8o6eLZEjj46bjn2tPDfQA+01kJtQISne6lGWG/0DZ7er6gE/K8Y8
pesPwFvKZmXFpH9ibNJMFJcoPL6L8OUF/EQRmQU9vreCOYncB7EymUhjawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLFyaHfqh2iwKDgATtemMOjO0SJMB8GA1UdIwQY
MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt
ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw
LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7t9ebBZ
Fv2ZAicq9a8iLv5Ig7Mx7igii/+0SU/Lhkd59Jej0fgD/0MiqA0Tq83GtVYI7ruQ
4Rg4aZvtsgaSDhDv09tFO7HNpEFXKwGMSO9wiL3ImphJrwjOvmSBSluejQ0m+Ulh
1w+R3ao/wjscgf1xt+QuiTecH+4DfAz3lcq0wAZSxUx+CreyU2BVTGWSFrMdi58a
p5gYQHp/XO9kW0yUojZq99C8sIG8uiNOmpiVn/zrkg/qrKBx4fCd4NdnKon0tpiO
VavqvQxnDxhT9BsUdPNHWNWA5PGz4MvfenYY6F/8OMLSLGG8aus/8a1WXoAMXLFd
DpKeHuQG4+kMXA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:45 2026 by rpki-client