Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: JAaBJ1Pa5Zmst9FH3V2bwDZjdeab7xvP68ZlS7f99fQ=
Subject key identifier: E3:B7:DB:82:58:D1:E3:BA:C2:2C:6B:38:57:D5:88:80:CD:AC:75:AE
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 019E916F39A0A80F62ABB7CDA17AD7AF2472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 0C25
Signing time: Thu 04 Jun 2026 07:00:46 +0000
Manifest this update: Thu 04 Jun 2026 07:00:46 +0000
Manifest next update: Fri 05 Jun 2026 07:00:46 +0000
Files and hashes: 1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=)
2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=)
3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: 7Ng8aY0hw0ZkvxF8/hFI9HSdqCRGXxmbnyMimQP+Vj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:39:a0:a8:0f:62:ab:b7:cd:a1:7a:d7:af:24:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Jun 4 07:00:46 2026 GMT
Not After : Jun 5 07:00:46 2026 GMT
Subject: CN=e3b7db8258d1e3bac22c6b3857d58880cdac75ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:f5:9b:1c:fb:d2:8e:5a:9a:36:6d:eb:fa:
04:92:64:9c:6f:8e:90:d2:10:69:82:c5:2e:3a:49:
d7:86:c8:76:29:b2:4e:38:ba:10:86:ba:83:67:ad:
8f:e7:cb:1c:01:b1:ea:48:2c:d7:ca:b9:1c:62:cd:
ce:07:f3:20:4f:53:fe:29:56:ae:1b:b4:a8:e5:29:
95:5d:c9:19:ee:6a:2f:ad:cd:3b:2a:3c:90:49:f5:
5f:6a:db:53:46:39:0b:b9:66:ff:d9:dc:0c:53:80:
16:20:2d:13:f6:b7:0d:75:7e:44:fd:4e:38:96:0c:
4c:35:06:ef:30:ac:9e:4e:28:64:50:00:ed:dd:bd:
3c:a9:33:17:db:9b:55:ab:0a:ba:83:8e:b8:6a:e0:
4d:58:6f:0c:ce:1b:ad:10:e7:b1:d1:ea:88:6d:eb:
31:75:21:9d:1c:0e:3f:3d:37:c0:d8:be:84:b0:1e:
44:78:f7:38:a6:03:4f:ab:00:f5:37:79:29:0d:e1:
0f:a4:d9:b6:69:a8:bb:d8:53:bd:78:df:17:f1:4d:
c4:54:af:86:66:46:12:b0:d9:b8:31:0b:9a:6c:a5:
2b:95:cc:40:2e:f2:47:0a:48:b6:17:cc:f8:25:a1:
25:52:76:96:6a:d9:6d:a8:9b:c0:2f:07:4f:f4:f4:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B7:DB:82:58:D1:E3:BA:C2:2C:6B:38:57:D5:88:80:CD:AC:75:AE
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1f:2a:72:e1:d9:47:16:c8:df:98:9f:15:51:bc:63:cd:68:
ea:97:54:99:d9:46:c6:fe:41:f7:d9:6a:f6:0e:da:6e:f5:7c:
03:98:bb:6f:08:9f:69:9d:65:c7:f4:47:bb:fc:4f:ef:bb:7c:
2d:cd:1d:33:88:79:57:14:95:38:af:73:04:83:02:c6:f2:f8:
6a:0c:ad:59:f9:a0:fe:be:06:42:50:65:f6:dc:22:bf:fa:bd:
b4:20:59:5e:24:3d:27:f0:74:fe:73:cc:e6:6a:80:4f:0f:d6:
b8:e1:99:ce:3c:ac:cf:0b:b8:6e:95:35:a6:d7:18:31:93:1e:
53:73:72:e8:cf:63:0a:ea:b6:61:64:30:5d:94:8d:78:3a:ab:
9b:d5:db:8a:a6:8a:ef:ea:ae:81:ed:c2:fb:85:94:d0:1d:81:
af:78:b1:35:34:e7:a1:a9:d2:f8:8d:b5:e7:e8:3c:42:4d:c5:
c8:7e:6d:96:10:ad:5b:92:f2:46:03:ad:f9:ff:b7:40:7b:c5:
18:e4:ac:35:39:4d:7e:44:eb:7f:bf:42:ab:5c:57:fc:38:0c:
92:2d:e2:24:09:87:3a:9e:b5:43:3b:9a:c7:74:f9:9f:23:67:
a8:63:b9:55:ec:9d:9c:e4:9a:2f:43:b1:71:c2:68:9a:f2:da:
06:83:d7:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6RbzmgqA9iq7fNoXrXryRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz
YTVhNzcwHhcNMjYwNjA0MDcwMDQ2WhcNMjYwNjA1MDcwMDQ2WjAzMTEwLwYDVQQD
EyhlM2I3ZGI4MjU4ZDFlM2JhYzIyYzZiMzg1N2Q1ODg4MGNkYWM3NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwr1mxz70o5amjZt6/oEkmScb46Q
0hBpgsUuOknXhsh2KbJOOLoQhrqDZ62P58scAbHqSCzXyrkcYs3OB/MgT1P+KVau
G7So5SmVXckZ7movrc07KjyQSfVfattTRjkLuWb/2dwMU4AWIC0T9rcNdX5E/U44
lgxMNQbvMKyeTihkUADt3b08qTMX25tVqwq6g464auBNWG8MzhutEOex0eqIbesx
dSGdHA4/PTfA2L6EsB5EePc4pgNPqwD1N3kpDeEPpNm2aai72FO9eN8X8U3EVK+G
ZkYSsNm4MQuabKUrlcxALvJHCki2F8z4JaElUnaWatltqJvALwdP9PSyPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOO324JY0eO6wixrOFfViIDNrHWuMB8GA1UdIwQY
MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt
ZmUxMDNmZDM4NTdjLzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj
LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB8qcuHZ
RxbI35ifFVG8Y81o6pdUmdlGxv5B99lq9g7abvV8A5i7bwifaZ1lx/RHu/xP77t8
Lc0dM4h5VxSVOK9zBIMCxvL4agytWfmg/r4GQlBl9twiv/q9tCBZXiQ9J/B0/nPM
5mqATw/WuOGZzjyszwu4bpU1ptcYMZMeU3Ny6M9jCuq2YWQwXZSNeDqrm9XbiqaK
7+quge3C+4WU0B2Br3ixNTTnoanS+I215+g8Qk3FyH5tlhCtW5LyRgOt+f+3QHvF
GOSsNTlNfkTrf79Cq1xX/DgMki3iJAmHOp61Qzuax3T5nyNnqGO5VeydnOSaL0Ox
ccJomvLaBoPXbA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:30:15 2026 by rpki-client