Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: ApGiQ/Lgmpl0e4cWJO+gfIL2YdRgJOBcAJmGraV+sQw=
Subject key identifier: 2C:AD:08:33:4E:CF:73:58:A4:BC:A4:B7:2D:E7:2B:7B:88:2A:FA:E8
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 01A1065CD211A82D6E0D89BFAB52C0EDF028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 10:01:48 +0000
Manifest this update: Sun 04 Oct 2026 10:01:48 +0000
Manifest next update: Mon 05 Oct 2026 10:01:48 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: Q7gw6WGmp2VWmywDnKnQaZlQGuPujVxAioZBVDZF1hw=)
2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:d2:11:a8:2d:6e:0d:89:bf:ab:52:c0:ed:f0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Oct 4 10:01:48 2026 GMT
Not After : Oct 5 10:01:48 2026 GMT
Subject: CN=2cad08334ecf7358a4bca4b72de72b7b882afae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:3b:2c:4a:58:e0:cf:da:76:d3:69:cc:eb:
a3:7f:42:51:20:39:ba:ca:01:6a:69:94:83:11:33:
3b:95:30:9e:ab:a7:d3:fa:a8:53:aa:8e:92:70:26:
8f:6e:e3:05:8a:5c:e6:5c:fa:e0:61:76:0f:25:d2:
7f:c0:14:bc:7c:8e:90:50:36:e9:56:ff:e9:98:79:
47:15:21:5b:a0:ec:28:87:e1:9a:03:79:8c:41:29:
77:87:4b:9b:c8:9e:c8:35:fc:83:51:8b:6e:be:eb:
f7:15:08:53:4a:96:6c:a8:ad:f1:3f:8c:ee:53:4d:
a7:76:e2:9d:45:fb:55:fb:07:fe:9e:80:fc:28:ea:
25:1e:67:2a:5a:93:d9:83:e7:6f:73:cc:c5:06:fe:
2c:3f:d0:f5:85:34:7a:11:26:d4:02:44:2e:df:67:
1e:7f:89:2f:f8:7f:8a:1f:9e:c9:e0:73:c1:d5:44:
7e:80:da:46:a2:58:e9:b1:bc:a3:a0:f1:63:8f:fc:
68:41:a9:c5:09:b1:0b:48:dc:5c:c1:d8:c7:79:4d:
9f:32:9c:e0:ec:b7:4e:cc:4e:3d:0e:6d:3a:45:50:
34:ee:1c:be:40:b4:92:f9:29:3d:f6:1c:4a:f6:5f:
c1:29:55:8a:df:71:8f:2e:2e:e5:d9:19:d4:61:6c:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:08:33:4E:CF:73:58:A4:BC:A4:B7:2D:E7:2B:7B:88:2A:FA:E8
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4c:72:0e:67:de:f1:94:5c:80:8b:c0:45:96:2d:b8:da:b1:
5d:06:94:24:8b:07:41:b0:eb:df:cb:22:93:e8:46:de:75:7a:
9b:b2:b5:18:1e:62:cb:77:2c:c7:fa:83:15:82:15:26:a8:c1:
d6:48:cd:2f:53:87:77:16:41:10:9a:49:73:cc:e9:67:94:4a:
59:38:6d:83:65:74:ae:6c:83:2e:de:8f:4e:13:54:8b:df:c5:
5c:fc:fb:75:e8:e7:78:6b:09:5b:f9:24:f4:59:73:6e:56:70:
4b:e8:53:0d:89:78:98:85:b1:09:24:74:2a:bf:a8:fc:72:b8:
02:15:9c:a0:f3:ae:b1:d9:5d:d7:72:22:bd:f8:62:9e:23:7f:
52:dc:f9:64:11:74:b1:c9:e6:39:ac:7c:8e:bf:50:3e:e4:6f:
73:ee:ee:64:7e:b2:c8:12:ce:fc:d7:73:21:eb:6c:a5:a1:ed:
ee:b1:45:73:37:cc:c1:2d:65:a1:ea:e0:d3:1b:14:8b:f7:6e:
f6:d8:d3:3e:56:eb:4c:d6:ce:22:d4:87:82:f9:02:6c:0d:44:
3a:75:a1:18:be:5f:76:5d:12:3a:9c:ee:85:e6:03:20:07:32:
7a:e3:af:1e:12:38:d8:0a:94:7c:8f:a4:ed:b6:02:6c:0d:a7:
9c:8d:0d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGXNIRqC1uDYm/q1LA7fAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3
NGQ1YzUwHhcNMjYxMDA0MTAwMTQ4WhcNMjYxMDA1MTAwMTQ4WjAzMTEwLwYDVQQD
EygyY2FkMDgzMzRlY2Y3MzU4YTRiY2E0YjcyZGU3MmI3Yjg4MmFmYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHo7LEpY4M/adtNpzOujf0JRIDm6
ygFqaZSDETM7lTCeq6fT+qhTqo6ScCaPbuMFilzmXPrgYXYPJdJ/wBS8fI6QUDbp
Vv/pmHlHFSFboOwoh+GaA3mMQSl3h0ubyJ7INfyDUYtuvuv3FQhTSpZsqK3xP4zu
U02nduKdRftV+wf+noD8KOolHmcqWpPZg+dvc8zFBv4sP9D1hTR6ESbUAkQu32ce
f4kv+H+KH57J4HPB1UR+gNpGoljpsbyjoPFjj/xoQanFCbELSNxcwdjHeU2fMpzg
7LdOzE49Dm06RVA07hy+QLSS+Sk99hxK9l/BKVWK33GPLi7l2RnUYWyhPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCytCDNOz3NYpLykty3nK3uIKvroMB8GA1UdIwQY
MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt
NTI3YTlhNGVlNjI0LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0
LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMExyDmfe
8ZRcgIvARZYtuNqxXQaUJIsHQbDr38sik+hG3nV6m7K1GB5iy3csx/qDFYIVJqjB
1kjNL1OHdxZBEJpJc8zpZ5RKWThtg2V0rmyDLt6PThNUi9/FXPz7dejneGsJW/kk
9FlzblZwS+hTDYl4mIWxCSR0Kr+o/HK4AhWcoPOusdld13IivfhiniN/Utz5ZBF0
scnmOax8jr9QPuRvc+7uZH6yyBLO/NdzIetspaHt7rFFczfMwS1loerg0xsUi/du
9tjTPlbrTNbOItSHgvkCbA1EOnWhGL5fdl0SOpzuheYDIAcyeuOvHhI42AqUfI+k
7bYCbA2nnI0NGQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:00:59 2026 by rpki-client