Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: 5e8KeosbXfMHKmNhpsPIXr0GYfjst6TdhhNvZIyR8+4=
Subject key identifier: F7:24:A2:31:2A:03:94:1D:70:56:74:AD:82:86:FA:DF:63:86:BF:A2
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 01A13FA70D9407167315341E4CD6ABEC1027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 1226
Signing time: Thu 15 Oct 2026 13:01:14 +0000
Manifest this update: Thu 15 Oct 2026 13:01:14 +0000
Manifest next update: Fri 16 Oct 2026 13:01:14 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: RhJUctpw2mBBs/tQXggI351CaFyXASH3obqRsmgowM8=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:0d:94:07:16:73:15:34:1e:4c:d6:ab:ec:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Oct 15 13:01:14 2026 GMT
Not After : Oct 16 13:01:14 2026 GMT
Subject: CN=f724a2312a03941d705674ad8286fadf6386bfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:87:4e:cf:4e:12:4d:a1:e8:91:f2:95:7c:
bc:9b:17:99:e7:8f:8d:2b:97:bf:03:04:95:29:c5:
0f:e2:e7:ad:49:36:d9:51:ab:9b:af:a3:66:9e:43:
6c:a6:c4:73:4f:e2:4d:51:dd:7a:8f:ca:12:6e:4e:
17:cc:58:46:45:0a:05:84:a6:29:c9:0c:2e:4a:94:
a3:9a:5b:22:ea:28:4b:22:73:02:db:0e:2e:71:17:
4e:58:1f:f7:04:3b:5e:e6:d0:6b:c6:af:79:cd:c4:
af:5e:53:43:e2:1e:93:e3:c4:a9:10:46:01:5c:9f:
13:fd:94:03:2a:ae:af:0e:2f:a8:38:ad:a6:7b:43:
03:91:71:2b:e7:80:4d:6c:8c:1d:26:d9:01:3a:ef:
df:5d:41:fa:58:1d:29:4d:c2:6d:b0:60:4f:e4:34:
76:74:a7:7f:d0:70:48:3a:ea:85:89:83:ce:76:6a:
06:b6:4b:bd:8f:7d:08:fa:97:07:de:7f:cd:b8:9c:
e0:18:27:ef:22:8a:f1:8d:51:33:5f:d9:fa:01:b2:
9d:fb:6e:be:5b:98:99:6e:10:f4:98:06:56:40:a9:
ec:79:7b:f8:d7:4f:2f:c3:b4:d9:ff:d4:27:6d:6e:
a2:52:21:84:40:81:44:0d:f1:a1:8d:3c:10:6b:97:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:A2:31:2A:03:94:1D:70:56:74:AD:82:86:FA:DF:63:86:BF:A2
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f9:f7:9b:51:ca:9d:e1:6a:fb:2c:75:01:73:a1:d3:b4:49:
ff:87:db:20:15:32:34:e5:e5:45:fa:a1:f3:2f:0f:0e:08:cc:
d5:9b:65:17:2b:ce:75:eb:ff:fb:e0:63:7f:a3:8c:e2:b9:02:
cc:30:ce:c9:dd:8f:cd:67:f6:18:fe:5e:e3:a0:2e:38:a8:8b:
b5:f8:f4:5e:98:e5:e0:b5:d6:35:da:6f:c6:dc:07:fe:12:53:
48:9b:4f:bb:d9:f9:79:8b:ba:38:9c:eb:ad:34:e7:f3:b0:c8:
c8:fb:83:1c:7d:c8:8c:40:89:33:6c:b4:e7:d4:dc:4e:a8:5f:
07:d5:05:04:bf:ce:ad:e0:7b:9f:49:dd:de:0f:19:5e:3a:04:
26:8b:a8:dc:81:19:09:41:33:ac:a7:eb:37:53:31:69:22:21:
5a:fb:39:58:31:5d:94:ed:3c:33:c1:77:44:b8:48:d8:f1:f9:
2b:01:e2:e1:e5:9a:87:b9:c6:e8:08:f5:cc:dd:1c:22:fe:eb:
2c:64:81:20:56:42:6a:8f:5a:a7:61:2d:8d:34:98:f4:37:5d:
85:db:d4:8f:a2:a1:d1:e6:72:40:1f:65:e2:4b:aa:47:90:c8:
f7:96:95:26:ae:6b:62:3c:da:11:d9:f8:e2:1f:72:36:16:d8:
70:5d:77:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/pw2UBxZzFTQeTNar7BAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5
N2Q4MjkwHhcNMjYxMDE1MTMwMTE0WhcNMjYxMDE2MTMwMTE0WjAzMTEwLwYDVQQD
EyhmNzI0YTIzMTJhMDM5NDFkNzA1Njc0YWQ4Mjg2ZmFkZjYzODZiZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRqHTs9OEk2h6JHylXy8mxeZ54+N
K5e/AwSVKcUP4uetSTbZUaubr6NmnkNspsRzT+JNUd16j8oSbk4XzFhGRQoFhKYp
yQwuSpSjmlsi6ihLInMC2w4ucRdOWB/3BDte5tBrxq95zcSvXlND4h6T48SpEEYB
XJ8T/ZQDKq6vDi+oOK2me0MDkXEr54BNbIwdJtkBOu/fXUH6WB0pTcJtsGBP5DR2
dKd/0HBIOuqFiYPOdmoGtku9j30I+pcH3n/NuJzgGCfvIorxjVEzX9n6AbKd+26+
W5iZbhD0mAZWQKnseXv4108vw7TZ/9QnbW6iUiGEQIFEDfGhjTwQa5c9RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPckojEqA5QdcFZ0rYKG+t9jhr+iMB8GA1UdIwQY
MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt
NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx
LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvn3m1HK
neFq+yx1AXOh07RJ/4fbIBUyNOXlRfqh8y8PDgjM1ZtlFyvOdev/++Bjf6OM4rkC
zDDOyd2PzWf2GP5e46AuOKiLtfj0Xpjl4LXWNdpvxtwH/hJTSJtPu9n5eYu6OJzr
rTTn87DIyPuDHH3IjECJM2y059TcTqhfB9UFBL/OreB7n0nd3g8ZXjoEJouo3IEZ
CUEzrKfrN1MxaSIhWvs5WDFdlO08M8F3RLhI2PH5KwHi4eWah7nG6Aj1zN0cIv7r
LGSBIFZCao9ap2EtjTSY9DddhdvUj6Kh0eZyQB9l4kuqR5DI95aVJq5rYjzaEdn4
4h9yNhbYcF13Cg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:02 2026 by rpki-client