Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: 2HV/CCgNkx92Vy9lZQTQrC7N2+5yYsqb4syZMCVTOF8=
Subject key identifier: 97:69:01:74:C2:E7:E8:BD:5B:CC:F9:75:CF:40:47:34:16:91:96:FC
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 01A0005CB289ADC7742826A57C1AE714012B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 13:01:09 +0000
Manifest this update: Fri 14 Aug 2026 13:01:09 +0000
Manifest next update: Sat 15 Aug 2026 13:01:09 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: a8e6oRx+rStFwsRH1DOCWpIgl0si96mXmJ/d/5nastU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:b2:89:ad:c7:74:28:26:a5:7c:1a:e7:14:01:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Aug 14 13:01:09 2026 GMT
Not After : Aug 15 13:01:09 2026 GMT
Subject: CN=97690174c2e7e8bd5bccf975cf404734169196fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:fe:9a:75:39:19:17:d6:da:42:12:f9:d1:
4f:ac:78:68:e1:73:4b:9e:38:51:5a:a8:73:53:2b:
57:08:72:fb:43:19:7b:39:9f:36:d4:c2:e2:fb:3d:
b2:42:a6:8f:03:26:04:cc:ec:ab:ed:f7:fa:61:79:
44:a6:6f:72:db:9a:22:eb:cd:bc:8e:35:80:34:91:
2d:e4:ba:1e:db:eb:75:ba:58:48:e9:69:1e:54:08:
84:81:29:48:77:51:bf:89:46:9b:f6:99:52:5d:26:
b3:e1:5f:a6:cf:20:18:79:fa:eb:97:57:d4:06:8f:
f7:bd:95:19:95:ea:7a:a0:98:be:55:18:4a:1b:25:
8d:a8:b2:da:ed:97:ea:42:13:10:f9:5b:86:10:98:
3d:9b:09:20:06:c8:6f:3a:01:10:17:6c:2c:4b:15:
f5:76:51:2c:93:dd:a6:75:b3:3b:2a:98:a3:e8:ec:
07:28:74:ad:e2:c4:be:86:9e:ec:6c:f4:cf:b9:73:
1d:d2:79:71:74:78:a9:04:91:43:ef:fd:a3:d6:18:
f1:d8:5a:16:4c:68:f6:05:d1:8d:b2:51:cb:ab:34:
cb:6f:c4:e9:c0:4f:5b:26:99:75:f4:d8:30:1c:a2:
08:68:2c:79:fc:3d:7a:ee:0a:42:0d:0a:28:57:26:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:01:74:C2:E7:E8:BD:5B:CC:F9:75:CF:40:47:34:16:91:96:FC
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a0:00:8b:cf:59:95:88:ad:b7:e8:05:a1:a1:6d:ea:23:a7:
c7:e7:a7:88:ce:0d:6b:67:28:ee:da:41:d2:b9:80:d6:27:eb:
92:f3:7b:6b:4d:39:55:39:3f:a7:75:60:43:38:aa:1d:73:46:
a2:c3:19:30:86:b0:37:ce:97:35:68:0d:27:c8:ff:b5:db:63:
e1:cd:61:0e:68:06:43:46:c4:50:fe:df:7c:47:0d:bc:26:97:
ac:09:56:e7:28:90:ce:6a:ad:fb:ed:93:69:5f:e7:52:e5:49:
aa:b3:60:62:1e:11:ed:40:6f:55:b9:21:22:95:0c:1b:42:be:
a2:9b:95:dc:8d:11:05:9c:80:09:f0:23:42:d4:6c:4d:c4:fe:
08:47:86:4a:e4:8c:58:2a:8f:c0:b2:ac:bf:4b:ff:64:d1:49:
fd:6a:89:d6:77:5a:07:94:bb:f5:6e:88:59:66:2a:27:7f:f9:
d8:cc:8b:b5:32:2e:b1:07:9f:46:32:6b:62:d7:0d:e9:59:dc:
25:c5:d5:fd:af:42:8d:0f:12:ae:2f:42:f4:fb:04:33:ae:5f:
cf:fb:92:80:8b:13:03:4c:7e:83:1a:84:fa:96:68:9e:1e:01:
51:ba:02:63:87:05:7f:24:4c:e4:eb:5c:3d:b1:7f:9d:84:f7:
37:ae:b9:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXLKJrcd0KCalfBrnFAErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmNiN2FjZDU1ZjYzNDliOWQ4MTQ2MTc4NmMxMjQ1OGY4
NmY3MmUwHhcNMjYwODE0MTMwMTA5WhcNMjYwODE1MTMwMTA5WjAzMTEwLwYDVQQD
Eyg5NzY5MDE3NGMyZTdlOGJkNWJjY2Y5NzVjZjQwNDczNDE2OTE5NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLv+mnU5GRfW2kIS+dFPrHho4XNL
njhRWqhzUytXCHL7Qxl7OZ821MLi+z2yQqaPAyYEzOyr7ff6YXlEpm9y25oi6828
jjWANJEt5Loe2+t1ulhI6WkeVAiEgSlId1G/iUab9plSXSaz4V+mzyAYefrrl1fU
Bo/3vZUZlep6oJi+VRhKGyWNqLLa7ZfqQhMQ+VuGEJg9mwkgBshvOgEQF2wsSxX1
dlEsk92mdbM7Kpij6OwHKHSt4sS+hp7sbPTPuXMd0nlxdHipBJFD7/2j1hjx2FoW
TGj2BdGNslHLqzTLb8TpwE9bJpl19NgwHKIIaCx5/D167gpCDQooVyZo9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdpAXTC5+i9W8z5dc9ARzQWkZb8MB8GA1UdIwQY
MBaAFOf8t6zVX2NJudgUYXhsEkWPhvcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMt
Y2RiM2E2NTdkOWVlLzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMtY2RiM2E2NTdkOWVl
LzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqAAi89Z
lYitt+gFoaFt6iOnx+eniM4Na2co7tpB0rmA1ifrkvN7a005VTk/p3VgQziqHXNG
osMZMIawN86XNWgNJ8j/tdtj4c1hDmgGQ0bEUP7ffEcNvCaXrAlW5yiQzmqt++2T
aV/nUuVJqrNgYh4R7UBvVbkhIpUMG0K+opuV3I0RBZyACfAjQtRsTcT+CEeGSuSM
WCqPwLKsv0v/ZNFJ/WqJ1ndaB5S79W6IWWYqJ3/52MyLtTIusQefRjJrYtcN6Vnc
JcXV/a9CjQ8Sri9C9PsEM65fz/uSgIsTA0x+gxqE+pZonh4BUboCY4cFfyRM5Otc
PbF/nYT3N665MQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:02 2026 by rpki-client