Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: Me9OR/caReXUDpIRXb2CE2HaxRBs/y1YJreMA0lmVMI=
Subject key identifier: 67:FE:AD:99:62:A0:40:0E:E4:D3:FB:A5:B7:E5:BB:AF:AB:E9:22:C9
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 01A134EBDAD8E60CB77468EC9E593102BF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 11:00:34 +0000
Manifest this update: Tue 13 Oct 2026 11:00:34 +0000
Manifest next update: Wed 14 Oct 2026 11:00:34 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: /elFL3wk3tWy5jTRP1MWsnFJtH/uiJT78cFOxi3T1mc=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:eb:da:d8:e6:0c:b7:74:68:ec:9e:59:31:02:bf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Oct 13 11:00:34 2026 GMT
Not After : Oct 14 11:00:34 2026 GMT
Subject: CN=67fead9962a0400ee4d3fba5b7e5bbafabe922c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:3b:21:82:45:f2:14:e5:68:50:7a:22:9f:
71:7e:ca:57:b7:aa:1b:5c:b0:bf:a7:f7:47:13:c7:
13:f1:4d:c3:28:c6:bc:82:68:5c:63:d6:4b:64:79:
59:76:19:9f:ff:c3:b8:72:68:d8:67:cc:39:86:4a:
d0:d5:41:45:14:5b:64:43:2f:8a:ec:d4:e8:da:a4:
5f:db:d0:f8:83:26:dc:9b:4f:b9:c1:29:12:38:e3:
f2:30:e3:a9:a4:be:97:59:cf:84:15:d1:f7:fb:16:
c2:1d:7f:95:28:aa:2c:76:de:5f:e0:a7:e9:c1:26:
8b:03:41:02:8f:a6:db:8e:44:f2:9a:bc:e7:42:aa:
c9:bd:58:3f:4f:87:6e:bb:4a:66:45:70:37:4b:e2:
a0:24:1f:d7:81:a4:08:62:86:43:60:85:e9:0d:f2:
c1:dd:39:7b:ad:b4:09:01:23:8e:34:d3:90:75:1d:
5c:a9:2b:5f:7d:c9:1f:80:21:ba:69:87:e7:71:0c:
17:04:6f:b3:19:b3:0e:4a:2d:5b:58:43:5a:08:c4:
03:99:b7:75:12:9b:f6:cc:82:b9:ee:c4:43:f4:b6:
84:90:73:76:a5:78:9f:b6:97:84:26:f8:d6:49:1e:
71:83:17:07:53:04:91:c3:12:06:c2:5e:10:ff:7d:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:AD:99:62:A0:40:0E:E4:D3:FB:A5:B7:E5:BB:AF:AB:E9:22:C9
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bc:18:d4:bd:59:ef:00:f6:71:10:0a:03:35:f3:de:be:bd:
38:84:2c:d9:47:da:c9:80:ba:fa:fb:f4:9b:94:38:5b:2c:6b:
05:fd:e4:99:9a:da:82:6c:49:34:98:6d:80:89:c4:6f:69:75:
2b:9a:89:7d:b6:83:b8:62:cb:4e:80:19:09:e8:fd:ee:20:cb:
dd:ff:d2:b4:eb:d9:78:1a:1c:08:dc:6e:e0:09:12:0e:66:d4:
3c:4c:72:ad:75:37:e5:16:11:ec:4d:83:c5:58:25:1a:c6:8f:
37:2c:bb:12:9d:22:a2:b7:d6:ca:57:0d:20:1c:14:ec:6a:54:
6c:a9:e5:61:89:08:ce:27:33:10:51:f7:dd:39:d1:27:29:85:
f5:f0:a3:bf:7e:f5:1d:6b:bd:64:4b:ff:5b:01:a5:c6:53:fb:
aa:5b:ab:90:33:b5:be:17:13:3c:3c:21:9d:64:77:11:a5:b7:
48:49:26:85:82:23:f1:32:cf:d7:19:a4:d5:1d:22:11:3a:86:
61:5f:77:6e:9e:4a:4d:5d:eb:87:ce:d6:f6:d1:87:7e:34:94:
31:7e:26:2c:23:1f:78:6c:05:c3:a0:1e:8e:c0:b0:1f:e9:85:
c9:83:b4:1f:0a:d1:32:65:9e:6b:7f:eb:32:f3:2c:ea:fe:67:
43:7d:01:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE069rY5gy3dGjsnlkxAr+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NDY4MmFkYjAyMzhjYzc3MmQxYzViNDk4NmM3YTMzOTg2
MzY0YTAwHhcNMjYxMDEzMTEwMDM0WhcNMjYxMDE0MTEwMDM0WjAzMTEwLwYDVQQD
Eyg2N2ZlYWQ5OTYyYTA0MDBlZTRkM2ZiYTViN2U1YmJhZmFiZTkyMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg47IYJF8hTlaFB6Ip9xfspXt6ob
XLC/p/dHE8cT8U3DKMa8gmhcY9ZLZHlZdhmf/8O4cmjYZ8w5hkrQ1UFFFFtkQy+K
7NTo2qRf29D4gybcm0+5wSkSOOPyMOOppL6XWc+EFdH3+xbCHX+VKKosdt5f4Kfp
wSaLA0ECj6bbjkTymrznQqrJvVg/T4duu0pmRXA3S+KgJB/XgaQIYoZDYIXpDfLB
3Tl7rbQJASOONNOQdR1cqStffckfgCG6aYfncQwXBG+zGbMOSi1bWENaCMQDmbd1
Epv2zIK57sRD9LaEkHN2pXiftpeEJvjWSR5xgxcHUwSRwxIGwl4Q/3312QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf+rZlioEAO5NP7pbflu6+r6SLJMB8GA1UdIwQY
MBaAFOZGgq2wI4zHctHFtJhsejOYY2SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTIt
YWNlY2FkNTNjODE1LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTItYWNlY2FkNTNjODE1
LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrwY1L1Z
7wD2cRAKAzXz3r69OIQs2UfayYC6+vv0m5Q4WyxrBf3kmZragmxJNJhtgInEb2l1
K5qJfbaDuGLLToAZCej97iDL3f/StOvZeBocCNxu4AkSDmbUPExyrXU35RYR7E2D
xVglGsaPNyy7Ep0iorfWylcNIBwU7GpUbKnlYYkIziczEFH33TnRJymF9fCjv371
HWu9ZEv/WwGlxlP7qlurkDO1vhcTPDwhnWR3EaW3SEkmhYIj8TLP1xmk1R0iETqG
YV93bp5KTV3rh87W9tGHfjSUMX4mLCMfeGwFw6AejsCwH+mFyYO0HwrRMmWea3/r
MvMs6v5nQ30BeQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 14:15:41 2026 by rpki-client