Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: jB64K/ACRHVZ5ur1wIRWJA+tMcF2hVjLVs+3HNWWRsw=
Subject key identifier: 12:74:E8:35:11:72:28:D2:B5:B4:08:B4:2A:BF:7D:F2:58:28:30:70
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 01A15E1EBB8C888B38F0748C85AD28799438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 1AB7
Signing time: Wed 21 Oct 2026 11:00:34 +0000
Manifest this update: Wed 21 Oct 2026 11:00:34 +0000
Manifest next update: Thu 22 Oct 2026 11:00:34 +0000
Files and hashes: 1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: b6IyqwrjDgPHdebILpdTY0eyqyQwU68KuvbGmi8PKJM=)
3: _Jzbksm-JMXJG_vIupQOGd5OWfA.asa (hash: Tb8L6c/yPd6zHGW5vozp+7vssh8lOxc/2tcpUf5JfNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:1e:bb:8c:88:8b:38:f0:74:8c:85:ad:28:79:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Oct 21 11:00:34 2026 GMT
Not After : Oct 22 11:00:34 2026 GMT
Subject: CN=1274e835117228d2b5b408b42abf7df258283070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:5f:9b:27:64:18:d7:96:3d:0f:82:52:17:
d5:bb:0d:74:e7:c9:95:aa:51:5b:8b:ee:33:22:17:
5b:b0:25:3f:60:75:3c:40:ff:e3:18:46:3d:b3:f1:
14:83:c7:95:d0:88:50:00:1e:d3:7b:d7:fd:93:c7:
de:8d:a2:92:89:62:37:34:49:9c:82:1e:fb:32:96:
d4:6b:6a:55:59:35:2f:9e:6b:99:e5:d3:43:cf:bc:
24:52:9d:49:26:a8:04:d5:b5:89:f9:3d:6c:ba:47:
95:f3:16:d3:dd:7b:8d:0a:14:a2:13:ad:a1:80:1d:
dc:06:fb:df:90:c9:d4:ba:85:4c:73:7f:72:7b:83:
a3:8f:7b:58:d3:7b:02:23:98:87:67:e0:df:1f:7e:
23:c6:af:5b:5c:b6:01:fe:29:3c:2e:7e:b1:fb:3a:
19:23:10:a9:79:ee:ad:0c:d4:79:09:1a:a4:27:a3:
31:f3:13:af:8d:73:51:72:cd:f6:0e:70:25:56:9e:
d5:79:a1:69:7f:a9:54:49:88:fb:8a:1f:65:64:57:
b7:ae:41:21:7f:90:90:71:e7:7d:ed:ff:58:fb:93:
61:63:8c:36:f9:38:29:04:cd:7b:3a:84:09:b8:c6:
cd:45:ac:87:93:57:14:da:d4:ec:fd:c4:6a:53:18:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:74:E8:35:11:72:28:D2:B5:B4:08:B4:2A:BF:7D:F2:58:28:30:70
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:65:f2:5b:f7:05:41:3f:a1:8e:c2:bd:8d:bd:32:d5:7b:52:
0f:3f:10:c1:eb:10:ed:70:97:04:43:50:95:1f:d3:7a:35:ba:
c3:eb:59:4e:a7:40:29:64:68:98:96:a6:5f:b1:12:e4:0b:18:
95:91:67:c4:17:a0:70:e8:6d:62:ac:0a:52:2e:5a:98:fb:71:
b3:51:62:35:56:13:41:b8:75:4f:eb:2d:20:bd:43:dd:7e:47:
4d:01:5f:91:8a:fb:0e:3e:7a:b2:f2:44:ed:0a:8a:d2:21:bc:
4d:de:cf:65:1e:b8:c7:18:42:69:d0:73:fa:e2:fb:61:52:f9:
51:ea:03:27:a6:ce:27:0d:3b:9d:7d:6a:be:25:3f:31:a3:64:
f4:d9:d0:3f:87:9f:e1:7b:f5:09:72:83:78:c7:c4:ab:90:57:
5a:29:5e:e4:21:fa:e3:4b:ef:1d:d9:d3:15:de:eb:26:73:79:
eb:49:f3:60:c7:5d:25:47:eb:c6:da:82:b5:c3:94:1d:97:34:
cb:21:30:4c:8c:9a:52:43:33:30:b5:59:19:2a:be:d4:b4:c9:
2f:0c:81:47:79:51:b0:4b:d5:82:ad:90:e4:d0:66:ab:e7:aa:
ae:07:0d:72:35:f8:48:e1:b7:5f:2c:26:61:21:16:e6:b4:90:
68:67:49:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFeHruMiIs48HSMha0oeZQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NGQwOTIwNDdkYmU5YTk2OGExNjBmMzE1ZmFiOWJiOWM4
MzU2ZDcwHhcNMjYxMDIxMTEwMDM0WhcNMjYxMDIyMTEwMDM0WjAzMTEwLwYDVQQD
EygxMjc0ZTgzNTExNzIyOGQyYjViNDA4YjQyYWJmN2RmMjU4MjgzMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfdfmydkGNeWPQ+CUhfVuw1058mV
qlFbi+4zIhdbsCU/YHU8QP/jGEY9s/EUg8eV0IhQAB7Te9f9k8fejaKSiWI3NEmc
gh77MpbUa2pVWTUvnmuZ5dNDz7wkUp1JJqgE1bWJ+T1sukeV8xbT3XuNChSiE62h
gB3cBvvfkMnUuoVMc39ye4Ojj3tY03sCI5iHZ+DfH34jxq9bXLYB/ik8Ln6x+zoZ
IxCpee6tDNR5CRqkJ6Mx8xOvjXNRcs32DnAlVp7VeaFpf6lUSYj7ih9lZFe3rkEh
f5CQced97f9Y+5NhY4w2+TgpBM17OoQJuMbNRayHk1cU2tTs/cRqUxj6jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ06DURcijStbQItCq/ffJYKDBwMB8GA1UdIwQY
MBaAFOVNCSBH2+mpaKFg8xX6ubucg1bXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQt
YTdmZDJmOWU3NGNmLzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQtYTdmZDJmOWU3NGNm
LzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWXyW/cF
QT+hjsK9jb0y1XtSDz8QwesQ7XCXBENQlR/TejW6w+tZTqdAKWRomJamX7ES5AsY
lZFnxBegcOhtYqwKUi5amPtxs1FiNVYTQbh1T+stIL1D3X5HTQFfkYr7Dj56svJE
7QqK0iG8Td7PZR64xxhCadBz+uL7YVL5UeoDJ6bOJw07nX1qviU/MaNk9NnQP4ef
4Xv1CXKDeMfEq5BXWile5CH640vvHdnTFd7rJnN560nzYMddJUfrxtqCtcOUHZc0
yyEwTIyaUkMzMLVZGSq+1LTJLwyBR3lRsEvVgq2Q5NBmq+eqrgcNcjX4SOG3Xywm
YSEW5rSQaGdJhA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 13:30:39 2026 by rpki-client