Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: +8JGorShlNgwejMj/AJMHU38bWYt7Z8s0fo7H9T4jGU=
Subject key identifier: 85:29:86:7D:E2:EF:B2:6A:32:23:6A:F6:7E:EF:2E:12:63:93:E3:E1
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 01A157420ED06C6B2288F1682F6D1CA68709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 17D5
Signing time: Tue 20 Oct 2026 03:01:49 +0000
Manifest this update: Tue 20 Oct 2026 03:01:49 +0000
Manifest next update: Wed 21 Oct 2026 03:01:49 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: Q0C3zzdQMitaaLybFcyoB64rBUvliRmoQ/mK2jrGBO8=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:42:0e:d0:6c:6b:22:88:f1:68:2f:6d:1c:a6:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Oct 20 03:01:49 2026 GMT
Not After : Oct 21 03:01:49 2026 GMT
Subject: CN=8529867de2efb26a32236af67eef2e126393e3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:1e:db:95:86:4c:49:3b:67:c3:3e:56:cd:
e8:65:25:bb:cd:f4:b1:b6:31:96:a1:a1:98:9c:e8:
d5:89:fd:33:81:f8:ee:00:ce:c8:05:1b:84:07:1b:
9f:2b:4c:e0:24:74:7d:cc:c8:07:ec:06:b2:31:b4:
73:49:70:5c:43:f4:95:e4:3e:36:ab:d8:91:e8:b8:
ba:b6:4e:65:64:5c:3b:05:54:b5:fa:58:5e:d1:0b:
6d:89:c3:84:9e:9c:96:56:27:b7:1f:bb:63:80:58:
b4:3b:9e:c6:e4:4d:37:f1:93:b2:20:29:42:0e:cc:
59:c2:00:b2:52:e0:47:13:a0:5b:ad:0d:d2:75:3b:
90:e0:93:87:bc:fb:70:1a:10:6b:bc:21:f2:bb:7a:
c9:67:a6:b9:ff:ba:89:ef:28:2a:c3:d9:9d:e6:50:
2d:9b:71:ea:cd:4b:24:fb:ba:be:49:cf:f7:58:5c:
ef:af:25:07:f0:eb:35:1b:c3:b0:e8:6c:04:64:44:
42:e4:3c:9c:7b:47:14:07:46:54:e0:be:f4:0e:b2:
1f:62:4b:27:7c:74:00:ef:47:f1:91:d7:15:1e:e5:
e1:c0:0c:c8:f4:6c:8c:a2:b8:f4:fb:97:59:bc:9c:
d6:76:ed:dd:69:c5:63:1f:f4:f0:21:cd:84:b1:a7:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:86:7D:E2:EF:B2:6A:32:23:6A:F6:7E:EF:2E:12:63:93:E3:E1
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:ae:4b:8f:9f:38:ab:86:f2:df:21:be:f4:4f:13:29:a1:
e8:13:59:f2:a0:cb:9d:19:8c:0d:2a:1f:5f:9a:cb:d0:3f:e4:
be:b3:60:a6:75:55:ff:11:96:ca:f4:d5:6c:89:af:37:5d:b0:
29:44:27:0f:f7:b0:14:50:6e:27:4b:60:45:31:77:9b:35:48:
40:4e:7c:ee:fc:ef:c5:27:85:df:c8:ce:d6:5f:28:27:c8:eb:
d7:08:6a:dd:b8:43:49:69:00:b3:c9:bf:23:3b:71:83:75:7c:
bb:f5:cf:aa:c3:e8:b1:84:a3:c0:87:5b:68:ae:85:1b:e9:74:
1a:b4:e8:da:50:0c:fb:15:5d:4f:a3:19:e7:75:84:62:67:19:
01:22:39:74:63:d2:4a:ee:4e:18:77:66:84:e3:cf:ae:5e:0c:
ea:ca:bc:37:15:4f:d8:ae:73:39:13:ea:97:f3:3b:d7:9e:dd:
0f:76:a4:3c:35:92:24:f4:fc:6e:13:5b:6b:74:b4:3c:11:b4:
89:fe:88:ca:8a:ad:21:9e:de:09:d0:6d:99:34:77:ef:43:5e:
64:54:4c:a9:c6:45:c8:cb:ea:b5:ec:21:40:d7:5b:01:de:b2:
d5:d0:3c:db:74:46:34:77:d5:1d:1c:e9:8f:13:2d:98:22:d2:
ed:bc:2e:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFXQg7QbGsiiPFoL20cpocJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OTRiNzAwNzA1ZTBiYWE3MzZhNWRkMDkwYWNkMWNiOTEy
YzE3MTkwHhcNMjYxMDIwMDMwMTQ5WhcNMjYxMDIxMDMwMTQ5WjAzMTEwLwYDVQQD
Eyg4NTI5ODY3ZGUyZWZiMjZhMzIyMzZhZjY3ZWVmMmUxMjYzOTNlM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokAe25WGTEk7Z8M+Vs3oZSW7zfSx
tjGWoaGYnOjVif0zgfjuAM7IBRuEBxufK0zgJHR9zMgH7AayMbRzSXBcQ/SV5D42
q9iR6Li6tk5lZFw7BVS1+lhe0QtticOEnpyWVie3H7tjgFi0O57G5E038ZOyIClC
DsxZwgCyUuBHE6BbrQ3SdTuQ4JOHvPtwGhBrvCHyu3rJZ6a5/7qJ7ygqw9md5lAt
m3HqzUsk+7q+Sc/3WFzvryUH8Os1G8Ow6GwEZERC5Dyce0cUB0ZU4L70DrIfYksn
fHQA70fxkdcVHuXhwAzI9GyMorj0+5dZvJzWdu3dacVjH/TwIc2Esaei9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUphn3i77JqMiNq9n7vLhJjk+PhMB8GA1UdIwQY
MBaAFAeUtwBwXguqc2pd0JCs0cuRLBcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYt
OTRlMDJjOWYxNTBjLzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYtOTRlMDJjOWYxNTBj
LzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaOuS4+f
OKuG8t8hvvRPEymh6BNZ8qDLnRmMDSofX5rL0D/kvrNgpnVV/xGWyvTVbImvN12w
KUQnD/ewFFBuJ0tgRTF3mzVIQE587vzvxSeF38jO1l8oJ8jr1whq3bhDSWkAs8m/
Iztxg3V8u/XPqsPosYSjwIdbaK6FG+l0GrTo2lAM+xVdT6MZ53WEYmcZASI5dGPS
Su5OGHdmhOPPrl4M6sq8NxVP2K5zORPql/M7157dD3akPDWSJPT8bhNba3S0PBG0
if6IyoqtIZ7eCdBtmTR370NeZFRMqcZFyMvqtewhQNdbAd6y1dA823RGNHfVHRzp
jxMtmCLS7bwu1w==
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:26:27 2026 by rpki-client