Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: uGIMdISMle3uD1q/IbBsds1qG6vuwVc/a0pH3Y0o4gw=
Subject key identifier: BE:C7:B8:5E:41:73:F7:6B:56:C0:93:A3:62:8E:CC:7B:29:85:1C:17
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 01A001DD0C4DFE04BF8592481B6A931DDD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:00:58 +0000
Manifest this update: Fri 14 Aug 2026 20:00:58 +0000
Manifest next update: Sat 15 Aug 2026 20:00:58 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: BwFJHwUi8m68VIxX/saNo7d+Jl4FuWC5hq1vDkhL/Lw=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0c:4d:fe:04:bf:85:92:48:1b:6a:93:1d:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Aug 14 20:00:58 2026 GMT
Not After : Aug 15 20:00:58 2026 GMT
Subject: CN=bec7b85e4173f76b56c093a3628ecc7b29851c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:8a:d1:3e:92:41:e7:e0:1a:34:e2:fb:6c:
9f:ae:a9:3e:84:b3:58:89:30:e9:de:78:73:a2:5d:
40:d2:d0:2f:38:b7:6e:09:b0:fa:ce:12:fc:69:f1:
da:e3:c7:71:f3:17:11:7b:15:05:11:34:e1:58:7a:
ea:a5:f6:6a:57:8c:91:9f:db:f4:4a:e8:80:74:9a:
89:aa:e6:f4:a2:a8:73:f7:91:1b:af:d3:49:91:b6:
2e:f1:8e:97:89:6b:a6:86:77:7f:1c:21:fe:65:2a:
ad:fd:fb:18:95:63:d5:e0:22:79:c7:c9:9d:32:62:
77:22:ce:dd:83:26:ba:2e:5f:45:97:34:cd:1f:7a:
38:84:df:54:71:90:6e:0a:e4:68:f0:61:0f:21:81:
4c:0a:9a:37:30:0b:55:36:6c:34:0a:c1:5b:1d:46:
2b:37:1c:c7:a5:31:0a:34:d4:97:d9:d8:a0:e2:1d:
9a:d2:90:64:61:c2:aa:ec:22:5f:c4:b6:a1:02:ef:
76:27:27:27:39:6a:1c:2e:91:9e:c1:15:7f:f3:4f:
4b:cf:09:7f:a2:38:e5:96:bf:c8:84:41:9e:df:98:
08:6d:f8:b5:55:a7:f0:fa:72:52:95:fa:7c:63:ed:
b8:0b:e8:03:52:03:97:c8:7c:6d:77:ac:a4:fb:0a:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:B8:5E:41:73:F7:6B:56:C0:93:A3:62:8E:CC:7B:29:85:1C:17
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:87:e4:38:9c:ff:fa:b8:1c:15:36:1b:32:96:17:9e:7c:74:
de:bf:9e:f8:58:8a:03:09:ab:bc:0a:08:d7:13:9b:0f:56:2f:
47:09:b3:ef:fc:a6:53:d1:f5:93:07:0c:53:0a:97:65:8d:1f:
65:04:0e:92:b5:93:63:f6:bb:40:0d:ae:16:05:0d:4a:b5:41:
03:11:4b:d8:23:d9:38:77:42:89:fe:40:6d:00:00:8c:9b:ac:
6d:a8:bb:5c:fb:64:9d:d5:b5:6d:af:85:10:0e:c5:6e:66:c0:
c6:ec:f0:ce:0d:79:42:28:2d:98:48:f7:ba:88:6f:bc:e1:b2:
aa:32:18:2f:b2:ea:0f:4f:a5:a5:10:35:ab:e0:a6:43:22:f4:
36:1a:52:73:b3:db:cd:a7:6e:9c:c0:21:f8:8a:3e:85:9c:41:
28:d8:ee:8f:31:2f:12:5a:c5:a0:6a:5f:95:95:c3:7b:59:6b:
f8:74:06:37:d7:cc:0c:7c:8f:62:ca:cb:f3:40:49:d2:2b:72:
37:04:c6:52:69:b5:b4:f4:e1:f7:d0:78:e5:3d:ab:a7:9a:27:
a8:9e:c7:4c:6a:c3:61:c6:fd:ae:26:e7:95:12:d9:b2:73:2e:
80:09:8b:19:56:8d:39:5f:bf:ba:44:6e:92:4f:28:42:d5:ef:
fb:c2:36:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3QxN/gS/hZJIG2qTHd0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5
MzViODgwHhcNMjYwODE0MjAwMDU4WhcNMjYwODE1MjAwMDU4WjAzMTEwLwYDVQQD
EyhiZWM3Yjg1ZTQxNzNmNzZiNTZjMDkzYTM2MjhlY2M3YjI5ODUxYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjOK0T6SQefgGjTi+2yfrqk+hLNY
iTDp3nhzol1A0tAvOLduCbD6zhL8afHa48dx8xcRexUFETThWHrqpfZqV4yRn9v0
SuiAdJqJqub0oqhz95Ebr9NJkbYu8Y6XiWumhnd/HCH+ZSqt/fsYlWPV4CJ5x8md
MmJ3Is7dgya6Ll9FlzTNH3o4hN9UcZBuCuRo8GEPIYFMCpo3MAtVNmw0CsFbHUYr
NxzHpTEKNNSX2dig4h2a0pBkYcKq7CJfxLahAu92JycnOWocLpGewRV/809Lzwl/
ojjllr/IhEGe35gIbfi1Vafw+nJSlfp8Y+24C+gDUgOXyHxtd6yk+wpszwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7HuF5Bc/drVsCTo2KOzHsphRwXMB8GA1UdIwQY
MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt
ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz
LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPofkOJz/
+rgcFTYbMpYXnnx03r+e+FiKAwmrvAoI1xObD1YvRwmz7/ymU9H1kwcMUwqXZY0f
ZQQOkrWTY/a7QA2uFgUNSrVBAxFL2CPZOHdCif5AbQAAjJusbai7XPtkndW1ba+F
EA7FbmbAxuzwzg15QigtmEj3uohvvOGyqjIYL7LqD0+lpRA1q+CmQyL0NhpSc7Pb
zadunMAh+Io+hZxBKNjujzEvElrFoGpflZXDe1lr+HQGN9fMDHyPYsrL80BJ0ity
NwTGUmm1tPTh99B45T2rp5onqJ7HTGrDYcb9ribnlRLZsnMugAmLGVaNOV+/ukRu
kk8oQtXv+8I2Xg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:50 2026 by rpki-client