Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: GLSOhV+Q18XejXbYvRm/U160gcYDPCLFP5inu98CXkQ=
Subject key identifier: 69:89:EB:30:04:B4:82:E6:14:92:8F:A9:8C:5F:5C:8F:89:C6:2E:96
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 01A14082FE54819ACBD97030C83A81ABAE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 17:01:28 +0000
Manifest this update: Thu 15 Oct 2026 17:01:28 +0000
Manifest next update: Fri 16 Oct 2026 17:01:28 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: ssn8m/UjIgElTlblYY8rNxjlFMPsdJRlmTvU1qyxrU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:fe:54:81:9a:cb:d9:70:30:c8:3a:81:ab:ae:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: Oct 15 17:01:28 2026 GMT
Not After : Oct 16 17:01:28 2026 GMT
Subject: CN=6989eb3004b482e614928fa98c5f5c8f89c62e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:d3:06:5d:62:83:b7:5f:68:d4:e5:82:f5:
5d:60:06:42:34:50:03:d7:ff:78:b0:d0:b0:5c:54:
36:d8:50:c6:13:64:43:9c:e3:6e:70:69:2c:5c:4d:
0c:95:22:12:be:1c:c6:08:22:42:e8:88:c1:21:3e:
b1:70:92:ea:a0:28:4b:b5:68:7c:70:7d:37:1a:6d:
a0:4e:56:2b:ab:06:30:99:ea:88:c4:84:87:6a:50:
9b:9a:02:bf:a0:01:9e:d6:3c:55:e5:ed:f1:b3:40:
9b:68:6d:60:04:fc:3b:b4:de:58:65:9c:00:01:06:
34:9a:0e:dd:2b:47:e7:40:cb:57:cb:24:9a:d8:9a:
86:4c:cd:91:20:c0:43:41:cb:d0:4e:cd:16:c0:cc:
a3:f2:10:5e:fd:df:86:56:f6:b7:b6:6b:f6:ba:12:
92:57:3b:23:07:a8:a1:64:e1:b9:58:4d:b8:c5:71:
7e:c7:b3:ab:1e:05:90:72:70:ac:18:ab:f1:27:1b:
0c:fa:0a:f2:f0:05:e7:36:2e:01:38:bc:98:26:42:
2f:1f:20:e5:b7:4b:7a:7e:e5:00:e0:09:f1:79:be:
f0:6b:f9:e9:ef:77:bf:63:be:cf:6f:33:dd:e7:35:
2a:45:47:cd:f6:30:08:49:bb:a6:74:a8:56:53:6b:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:EB:30:04:B4:82:E6:14:92:8F:A9:8C:5F:5C:8F:89:C6:2E:96
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7e:4c:59:ed:c2:75:8b:45:53:d1:fe:d9:96:fa:2d:5e:7c:
68:d7:2c:d6:2b:5f:5a:fd:35:54:43:68:05:18:f9:a7:73:6a:
94:77:b4:b7:52:8f:79:0a:d4:5e:0d:ad:5a:4e:69:77:41:d0:
26:6a:80:a4:89:92:43:d9:19:a7:17:a0:bf:44:dd:c6:cf:b2:
83:1c:15:7c:7e:85:ad:0f:89:76:84:a7:ce:f9:9c:f9:94:b2:
53:2f:2e:12:f7:63:6b:ad:1b:a5:64:0e:bb:ab:c5:da:53:35:
4d:eb:9b:d6:8c:1e:e2:f0:a7:01:f8:e5:96:cc:a7:ca:f6:16:
d2:55:8d:c6:9c:7e:40:96:65:8a:c7:27:a1:ef:9a:c3:d0:52:
b9:21:0e:fd:52:15:ad:6b:a8:a9:7b:ba:e0:03:33:48:8c:1d:
60:7f:56:1d:1f:7a:ba:87:60:09:31:b2:8d:03:10:21:d5:1a:
7f:f0:68:e2:e1:9c:dd:3b:2f:4d:44:fd:d8:11:05:1c:b0:a1:
a3:d7:16:b4:5b:c0:7c:b3:e5:e5:cd:ad:90:71:c2:89:7d:47:
e0:2f:4e:1f:8e:49:57:ba:c8:a7:38:a2:34:92:4d:09:8d:0c:
78:eb:8a:2e:23:12:3d:2c:5f:40:07:ce:8e:30:df:03:bd:99:
5d:af:5b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgv5UgZrL2XAwyDqBq654MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWI5YTVkNmQ5ODcwM2MzODcyYTFiYjNmOTBkMTAzNjg1
Y2JkMDQwHhcNMjYxMDE1MTcwMTI4WhcNMjYxMDE2MTcwMTI4WjAzMTEwLwYDVQQD
Eyg2OTg5ZWIzMDA0YjQ4MmU2MTQ5MjhmYTk4YzVmNWM4Zjg5YzYyZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxbTBl1ig7dfaNTlgvVdYAZCNFAD
1/94sNCwXFQ22FDGE2RDnONucGksXE0MlSISvhzGCCJC6IjBIT6xcJLqoChLtWh8
cH03Gm2gTlYrqwYwmeqIxISHalCbmgK/oAGe1jxV5e3xs0CbaG1gBPw7tN5YZZwA
AQY0mg7dK0fnQMtXyySa2JqGTM2RIMBDQcvQTs0WwMyj8hBe/d+GVva3tmv2uhKS
VzsjB6ihZOG5WE24xXF+x7OrHgWQcnCsGKvxJxsM+gry8AXnNi4BOLyYJkIvHyDl
t0t6fuUA4Anxeb7wa/np73e/Y77PbzPd5zUqRUfN9jAISbumdKhWU2sDNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmJ6zAEtILmFJKPqYxfXI+Jxi6WMB8GA1UdIwQY
MBaAFOYbml1tmHA8OHKhuz+Q0QNoXL0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYjg3OWItOWM5Ni00MjlhLTliYjMt
ZTE4ZDk5OGM2NGVmLzEvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYjg3OWItOWM5Ni00MjlhLTliYjMtZTE4ZDk5OGM2NGVm
LzEvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUH5MWe3C
dYtFU9H+2Zb6LV58aNcs1itfWv01VENoBRj5p3NqlHe0t1KPeQrUXg2tWk5pd0HQ
JmqApImSQ9kZpxegv0Tdxs+ygxwVfH6FrQ+JdoSnzvmc+ZSyUy8uEvdja60bpWQO
u6vF2lM1Teub1owe4vCnAfjllsynyvYW0lWNxpx+QJZliscnoe+aw9BSuSEO/VIV
rWuoqXu64AMzSIwdYH9WHR96uodgCTGyjQMQIdUaf/Bo4uGc3TsvTUT92BEFHLCh
o9cWtFvAfLPl5c2tkHHCiX1H4C9OH45JV7rIpziiNJJNCY0MeOuKLiMSPSxfQAfO
jjDfA72ZXa9bhA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:55:37 2026 by rpki-client