Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: M6WqKFzuXB0siR1eFVioUpeiBRlJgEK+VKt983T1Fnw=
Subject key identifier: CF:3D:76:53:E2:C2:42:E6:22:82:A3:DD:06:EE:2A:48:94:25:2D:CF
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 01A001A6426C60DAAA0D537DD0AE181A00FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 19:01:08 +0000
Manifest this update: Fri 14 Aug 2026 19:01:08 +0000
Manifest next update: Sat 15 Aug 2026 19:01:08 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: w+dIqzkwGZHKEcXb3DkZrK37Ye3AzvFK21nSPIbaLuQ=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:42:6c:60:da:aa:0d:53:7d:d0:ae:18:1a:00:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Aug 14 19:01:08 2026 GMT
Not After : Aug 15 19:01:08 2026 GMT
Subject: CN=cf3d7653e2c242e62282a3dd06ee2a4894252dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:d9:8c:2b:e2:c6:1f:96:63:1f:98:ea:da:
2a:60:1d:ab:ea:84:3e:21:df:39:ae:41:31:37:9f:
38:ad:8b:61:4f:9d:66:87:c2:42:d7:35:96:07:a9:
88:0a:7a:39:4e:0f:2a:cc:57:41:ef:a7:86:61:d1:
45:75:9b:44:ab:7a:ef:3e:b9:a0:52:59:f5:ff:74:
5e:99:54:ec:7f:f1:ef:9a:09:6a:64:f4:57:63:be:
5f:d3:80:96:1b:62:eb:21:88:6e:32:8e:a3:52:2f:
c8:59:b2:92:5f:82:8b:00:68:1e:b1:15:5a:f4:3d:
6d:ac:e7:24:36:65:c2:01:3b:6e:7f:e2:a8:eb:8d:
b9:5c:f2:09:c9:ff:90:30:17:8d:2f:a9:6a:c6:04:
a8:c0:92:dd:cc:0e:3b:2a:23:ce:19:7b:97:c6:f3:
b7:8a:8a:d8:2c:8b:cb:62:7f:db:db:d4:86:03:fc:
49:b2:f1:ac:35:21:4b:a7:cb:e2:0d:e2:83:a7:d5:
44:48:ca:92:8c:fd:e6:ff:c2:a3:af:c6:9d:f9:dc:
d5:7e:f6:7e:c2:38:11:59:f7:fa:5c:da:42:d6:a8:
d2:47:da:ae:0d:54:df:4f:ea:62:10:89:e2:b0:18:
e0:47:3e:00:ae:71:35:b0:ad:a3:ac:62:58:77:51:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:76:53:E2:C2:42:E6:22:82:A3:DD:06:EE:2A:48:94:25:2D:CF
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1d:31:43:11:69:b6:c9:34:5a:59:e2:8c:11:77:cf:c8:c9:
e2:2c:6b:e6:43:35:a1:15:a0:c0:37:1a:7e:7d:de:fa:61:4d:
55:cf:f5:d8:e0:f6:d8:d2:be:f1:81:6c:ba:f6:b9:40:aa:32:
94:da:88:15:81:b1:cd:b8:a4:f2:c9:ac:54:6f:46:8d:e4:52:
0c:5f:82:64:59:42:52:96:72:1e:e6:30:3a:00:9e:f2:c5:60:
6c:bd:b5:e6:50:d5:d7:07:de:55:25:95:c3:3d:4b:c3:3f:db:
f0:6b:d8:80:a9:62:e2:aa:fb:4a:7f:c3:9e:e9:b7:52:e2:85:
16:62:ab:a4:d9:5a:c2:71:bc:61:2e:4d:31:50:7a:e0:bc:62:
11:84:bb:9d:1d:0f:01:5d:16:64:53:b1:e7:76:6a:89:86:0d:
ec:18:0c:fe:ba:ab:c7:f1:e1:06:89:ff:1e:1e:2e:d8:a3:9b:
d9:e9:23:75:21:5a:f0:4e:51:0c:c9:f0:57:dc:d8:fc:00:f0:
64:3a:9c:d4:26:cb:b9:7c:32:db:a5:9c:f6:f8:c5:d0:54:89:
da:b3:79:7a:a2:41:05:a2:ff:ba:bf:87:2c:96:78:35:ce:38:
58:2e:da:67:e0:d7:d4:f2:c4:bd:b7:d1:b8:48:01:f6:54:e2:
d6:90:b0:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpkJsYNqqDVN90K4YGgD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3
NTU4MjYwHhcNMjYwODE0MTkwMTA4WhcNMjYwODE1MTkwMTA4WjAzMTEwLwYDVQQD
EyhjZjNkNzY1M2UyYzI0MmU2MjI4MmEzZGQwNmVlMmE0ODk0MjUyZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumLZjCvixh+WYx+Y6toqYB2r6oQ+
Id85rkExN584rYthT51mh8JC1zWWB6mICno5Tg8qzFdB76eGYdFFdZtEq3rvPrmg
Uln1/3RemVTsf/HvmglqZPRXY75f04CWG2LrIYhuMo6jUi/IWbKSX4KLAGgesRVa
9D1trOckNmXCATtuf+Ko6425XPIJyf+QMBeNL6lqxgSowJLdzA47KiPOGXuXxvO3
iorYLIvLYn/b29SGA/xJsvGsNSFLp8viDeKDp9VESMqSjP3m/8Kjr8ad+dzVfvZ+
wjgRWff6XNpC1qjSR9quDVTfT+piEInisBjgRz4ArnE1sK2jrGJYd1HEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM89dlPiwkLmIoKj3QbuKkiUJS3PMB8GA1UdIwQY
MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt
ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw
LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATB0xQxFp
tsk0WlnijBF3z8jJ4ixr5kM1oRWgwDcafn3e+mFNVc/12OD22NK+8YFsuva5QKoy
lNqIFYGxzbik8smsVG9GjeRSDF+CZFlCUpZyHuYwOgCe8sVgbL215lDV1wfeVSWV
wz1Lwz/b8GvYgKli4qr7Sn/Dnum3UuKFFmKrpNlawnG8YS5NMVB64LxiEYS7nR0P
AV0WZFOx53ZqiYYN7BgM/rqrx/HhBon/Hh4u2KOb2ekjdSFa8E5RDMnwV9zY/ADw
ZDqc1CbLuXwy26Wc9vjF0FSJ2rN5eqJBBaL/ur+HLJZ4Nc44WC7aZ+DX1PLEvbfR
uEgB9lTi1pCwWg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:07 2026 by rpki-client