Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: 3WpjfQDYnRYV4uzKLuZePrK6Hqa6v9dTOPCbUfaCHh0=
Subject key identifier: 99:04:70:F7:1B:BF:B5:94:9F:F9:CB:04:7C:36:FB:5B:C5:DA:34:48
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 019F183048E68C36724A0627F340B132F5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 11:00:45 +0000
Manifest this update: Tue 30 Jun 2026 11:00:45 +0000
Manifest next update: Wed 01 Jul 2026 11:00:45 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: cpwyhH2lKIsXmFW00hO8H8C+v3pRiAHM9aaRkhYmdYU=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:48:e6:8c:36:72:4a:06:27:f3:40:b1:32:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jun 30 11:00:45 2026 GMT
Not After : Jul 1 11:00:45 2026 GMT
Subject: CN=990470f71bbfb5949ff9cb047c36fb5bc5da3448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:41:75:7c:85:f3:c0:82:05:2f:ff:d1:68:
db:eb:b9:df:52:e4:e6:cf:5d:d3:67:a6:eb:d4:36:
45:47:96:99:b7:68:0b:6e:41:a3:34:ef:75:08:7e:
59:77:a2:de:85:dc:23:64:32:32:69:24:5f:f3:49:
53:cb:83:25:df:9b:d2:63:95:14:91:1d:f1:cd:8f:
17:a8:c8:50:f2:9d:ea:dd:cb:b6:ca:36:97:cd:b5:
33:04:8a:a5:50:33:a2:82:c1:74:17:1e:47:a5:56:
cf:ec:18:9b:e5:e9:17:5d:ad:f9:99:b1:38:26:27:
7c:c6:5e:7d:fd:12:4f:c2:b4:99:3e:5a:4b:3d:23:
58:cb:23:d3:0e:2f:e9:c1:1e:06:f7:45:c4:17:54:
fe:85:58:d5:ff:00:2f:07:98:f3:96:27:0a:36:14:
c7:55:07:5d:86:66:15:25:5a:87:19:40:dc:69:6d:
f3:54:21:53:62:35:07:e9:99:78:c6:2f:f9:4d:85:
37:69:b8:21:4c:c3:63:a6:08:69:7a:d6:40:e3:1d:
6f:e7:69:1c:13:87:7b:86:57:c8:38:47:c3:65:53:
53:99:f4:58:24:ad:ab:d0:45:d3:61:44:d3:b9:4e:
0f:af:4c:e1:65:1c:0f:31:bd:81:fc:79:b0:a9:5c:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:04:70:F7:1B:BF:B5:94:9F:F9:CB:04:7C:36:FB:5B:C5:DA:34:48
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d7:fb:c0:8a:a6:ae:87:99:b6:79:6c:3d:62:b2:60:75:0b:
49:de:7d:ea:10:ca:c4:10:48:2a:7d:e8:ec:ee:a7:08:b8:f4:
df:dd:2e:52:db:fa:99:2e:5b:dc:b4:47:96:af:6c:28:99:ee:
22:3d:3b:3b:e6:ca:4f:a3:c5:da:fa:ed:35:70:76:0e:a7:dc:
7e:f6:8e:5b:ae:0c:bf:6e:f1:91:47:05:b8:1f:c5:74:2a:ea:
63:dd:95:22:b2:63:57:b7:8b:23:96:e9:5b:85:a0:ab:51:c7:
69:c6:bd:d1:2e:01:dc:a8:fd:c7:45:32:b9:6a:db:9d:34:20:
12:bb:e3:7e:2f:ab:ec:4d:d7:54:fb:3a:54:f1:2b:b7:71:49:
87:79:f2:72:e1:b9:8a:24:e0:10:ce:c2:ce:6d:b7:51:f6:ab:
e5:c2:ac:f0:df:4a:81:65:2b:28:be:9c:a4:7a:df:3b:91:dd:
e5:46:59:dd:fd:0e:4e:fe:a4:4a:d0:0e:54:38:5f:4e:ba:ed:
ce:14:c8:21:b0:d5:a3:c9:13:84:c5:d7:9a:fa:63:8d:4c:95:
ea:ca:04:a4:f9:ab:7a:1f:ca:7f:09:2e:42:85:7f:40:c1:24:
2a:ac:8e:cd:e3:62:71:93:97:8b:60:83:fa:e7:75:df:88:0c:
ee:74:38:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMEjmjDZySgYn80CxMvWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5
MzViODgwHhcNMjYwNjMwMTEwMDQ1WhcNMjYwNzAxMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg5OTA0NzBmNzFiYmZiNTk0OWZmOWNiMDQ3YzM2ZmI1YmM1ZGEzNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8NBdXyF88CCBS//0Wjb67nfUuTm
z13TZ6br1DZFR5aZt2gLbkGjNO91CH5Zd6LehdwjZDIyaSRf80lTy4Ml35vSY5UU
kR3xzY8XqMhQ8p3q3cu2yjaXzbUzBIqlUDOigsF0Fx5HpVbP7Bib5ekXXa35mbE4
Jid8xl59/RJPwrSZPlpLPSNYyyPTDi/pwR4G90XEF1T+hVjV/wAvB5jzlicKNhTH
VQddhmYVJVqHGUDcaW3zVCFTYjUH6Zl4xi/5TYU3abghTMNjpghpetZA4x1v52kc
E4d7hlfIOEfDZVNTmfRYJK2r0EXTYUTTuU4Pr0zhZRwPMb2B/HmwqVwS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkEcPcbv7WUn/nLBHw2+1vF2jRIMB8GA1UdIwQY
MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt
ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz
LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdf7wIqm
roeZtnlsPWKyYHULSd596hDKxBBIKn3o7O6nCLj0390uUtv6mS5b3LRHlq9sKJnu
Ij07O+bKT6PF2vrtNXB2DqfcfvaOW64Mv27xkUcFuB/FdCrqY92VIrJjV7eLI5bp
W4Wgq1HHaca90S4B3Kj9x0UyuWrbnTQgErvjfi+r7E3XVPs6VPErt3FJh3nycuG5
iiTgEM7Czm23Ufar5cKs8N9KgWUrKL6cpHrfO5Hd5UZZ3f0OTv6kStAOVDhfTrrt
zhTIIbDVo8kThMXXmvpjjUyV6soEpPmreh/KfwkuQoV/QMEkKqyOzeNicZOXi2CD
+ud134gM7nQ4lA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:50 2026 by rpki-client