Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: MEkbkQQTnmNha3kNGrETzq+fKRr3b18QUmPHEKO8gg0=
Subject key identifier: 9E:A0:96:11:C1:8D:53:69:98:CB:B6:B0:26:68:5B:4C:1D:53:06:AA
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019F194356F238DF19F216BAA4D1AE19387F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 1109
Signing time: Tue 30 Jun 2026 16:01:11 +0000
Manifest this update: Tue 30 Jun 2026 16:01:11 +0000
Manifest next update: Wed 01 Jul 2026 16:01:11 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: wNqu/F9AUcNT+B9EQHMUV22RUVqYPPXm/W+XEbkwnJQ=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:56:f2:38:df:19:f2:16:ba:a4:d1:ae:19:38:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Jun 30 16:01:11 2026 GMT
Not After : Jul 1 16:01:11 2026 GMT
Subject: CN=9ea09611c18d536998cbb6b026685b4c1d5306aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:09:02:75:7c:78:b7:a5:c7:4c:37:4b:35:
33:bf:03:8d:97:7f:ab:af:52:a5:18:52:82:8f:92:
2b:97:d5:cc:5d:95:18:ca:9a:40:88:e9:7a:9e:77:
4c:5e:4c:13:d6:67:e9:5f:46:d8:bf:68:02:73:70:
c8:82:d7:be:00:41:e8:98:90:71:22:e8:9e:d3:b0:
89:2c:07:f3:db:51:2d:94:76:c2:17:21:6b:61:49:
c0:8a:d9:d5:25:c8:6f:1e:4c:a2:ec:cf:59:98:cf:
b2:13:1d:27:94:b2:ae:e6:9e:e9:ac:09:62:8c:33:
41:66:8d:9c:55:a2:9f:ca:71:e7:e2:ad:b6:85:1c:
ce:62:1b:57:ed:4e:bf:26:66:43:0c:d7:3a:a2:64:
43:d9:5c:ec:f7:0e:47:1f:62:d4:e3:18:34:a0:6f:
27:1c:0e:85:c7:4d:54:76:69:5a:19:0e:f9:e4:92:
ff:00:19:7e:b7:db:02:f5:49:5e:85:69:0c:35:73:
69:e8:7c:bd:2a:63:59:c1:fc:b5:d4:f5:40:cd:3a:
1b:6d:e1:83:cb:82:55:91:e1:52:87:56:61:a4:c6:
ad:0f:f9:88:76:01:96:7a:65:6c:e0:0c:6f:47:35:
5d:06:b7:db:b9:90:bc:9e:87:ca:3b:30:81:27:d0:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:96:11:C1:8D:53:69:98:CB:B6:B0:26:68:5B:4C:1D:53:06:AA
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b2:79:53:f6:6d:ba:55:48:ea:85:4a:19:c9:01:c2:4d:94:
04:9c:ce:77:2d:27:86:3d:b0:05:c3:2a:55:0b:bc:7d:ad:d5:
c0:31:b1:80:ce:23:23:04:1b:03:c7:53:9d:c2:52:31:36:58:
23:fc:bb:32:57:b9:c9:4c:57:02:a9:d3:3e:d9:19:0a:d7:f2:
3d:3e:ed:fb:ae:4f:4d:e3:b6:c9:b5:a0:d7:75:ae:49:28:3b:
94:34:86:ab:ca:09:41:44:11:20:38:77:0a:3a:0e:d5:07:c2:
19:e8:be:b0:4d:7f:02:71:eb:c0:4c:6d:56:1d:27:44:36:17:
e8:af:40:57:95:21:29:41:f3:6c:72:e6:e2:45:6c:4b:be:dc:
02:c1:ce:90:31:44:be:33:57:f3:10:9f:f4:31:70:32:59:b2:
73:c1:94:d5:7a:7d:77:5e:34:12:a6:00:b2:74:bc:74:79:96:
76:79:2c:02:53:8b:f0:f1:73:c1:b7:bd:be:95:17:02:19:6e:
a6:50:9d:6e:53:7f:dc:59:92:33:02:de:44:ce:1f:aa:d3:0d:
48:46:a0:f4:14:fe:d8:82:ed:9d:d9:7f:b4:bc:57:90:ba:39:
f8:e0:a6:91:e7:ea:b3:56:f5:43:c7:7f:86:07:78:84:0c:ff:
a8:21:34:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ1byON8Z8ha6pNGuGTh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5
N2Q4MjkwHhcNMjYwNjMwMTYwMTExWhcNMjYwNzAxMTYwMTExWjAzMTEwLwYDVQQD
Eyg5ZWEwOTYxMWMxOGQ1MzY5OThjYmI2YjAyNjY4NWI0YzFkNTMwNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/QJAnV8eLelx0w3SzUzvwONl3+r
r1KlGFKCj5Irl9XMXZUYyppAiOl6nndMXkwT1mfpX0bYv2gCc3DIgte+AEHomJBx
Iuie07CJLAfz21EtlHbCFyFrYUnAitnVJchvHkyi7M9ZmM+yEx0nlLKu5p7prAli
jDNBZo2cVaKfynHn4q22hRzOYhtX7U6/JmZDDNc6omRD2Vzs9w5HH2LU4xg0oG8n
HA6Fx01UdmlaGQ755JL/ABl+t9sC9UlehWkMNXNp6Hy9KmNZwfy11PVAzTobbeGD
y4JVkeFSh1ZhpMatD/mIdgGWemVs4AxvRzVdBrfbuZC8nofKOzCBJ9B1YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6glhHBjVNpmMu2sCZoW0wdUwaqMB8GA1UdIwQY
MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt
NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx
LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALJ5U/Zt
ulVI6oVKGckBwk2UBJzOdy0nhj2wBcMqVQu8fa3VwDGxgM4jIwQbA8dTncJSMTZY
I/y7Mle5yUxXAqnTPtkZCtfyPT7t+65PTeO2ybWg13WuSSg7lDSGq8oJQUQRIDh3
CjoO1QfCGei+sE1/AnHrwExtVh0nRDYX6K9AV5UhKUHzbHLm4kVsS77cAsHOkDFE
vjNX8xCf9DFwMlmyc8GU1Xp9d140EqYAsnS8dHmWdnksAlOL8PFzwbe9vpUXAhlu
plCdblN/3FmSMwLeRM4fqtMNSEag9BT+2ILtndl/tLxXkLo5+OCmkefqs1b1Q8d/
hgd4hAz/qCE0ww==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:45 2026 by rpki-client