Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: D5DyKcoqRgRkLyNaaJJ5VBga7f+LL7c4JQIVtdAEPL8=
Subject key identifier: 3A:22:88:9A:D5:34:46:D6:86:F5:B0:C6:8C:A8:9F:1E:0E:95:A1:A0
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 019FCD4B702EB81378D3B302CE37D9A642E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 19E5
Signing time: Tue 04 Aug 2026 15:01:40 +0000
Manifest this update: Tue 04 Aug 2026 15:01:40 +0000
Manifest next update: Wed 05 Aug 2026 15:01:40 +0000
Files and hashes: 1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: 3bdIr3D65SOJ/IyV61yvmS31gzy+1fYLF31st3F11S0=)
2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:4b:70:2e:b8:13:78:d3:b3:02:ce:37:d9:a6:42:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Aug 4 15:01:40 2026 GMT
Not After : Aug 5 15:01:40 2026 GMT
Subject: CN=3a22889ad53446d686f5b0c68ca89f1e0e95a1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:af:7d:b2:3d:20:2d:e1:d8:b5:08:53:84:
1f:ab:30:f0:56:79:c8:bc:fb:e3:d8:1a:9e:46:23:
06:ee:d5:7b:04:08:35:a2:9f:86:fc:d4:07:9c:e4:
d5:c0:0c:30:bd:23:29:6a:c6:8e:b8:af:55:89:8b:
b5:d3:89:51:03:ce:d9:1a:92:a9:13:83:81:23:38:
f2:fa:c2:e8:77:ad:ac:f6:78:11:c2:d6:f6:ea:26:
f9:32:0d:84:14:77:03:3e:47:27:d0:d0:a8:d7:cb:
9b:61:90:8f:a0:3f:e1:77:ae:d1:67:9f:0d:41:b8:
6d:87:55:5a:63:da:71:06:23:22:ee:e1:7c:50:90:
f2:c4:5f:7c:08:ba:7d:9e:e0:f8:91:46:4c:45:00:
01:cb:db:7f:94:a6:c5:a4:23:b2:a0:9a:3a:a5:6a:
0f:3c:b0:35:3a:44:7b:80:f9:5a:77:04:04:6d:38:
9d:04:df:50:a8:50:c3:c2:7c:a3:52:b4:e1:75:18:
44:61:d7:c8:fe:30:81:a8:93:06:d2:f1:f1:c2:52:
86:c2:90:8b:e1:b3:96:44:b7:11:5c:d6:87:88:cf:
6e:36:d0:ce:1d:80:c6:09:2a:31:16:e7:65:4d:3a:
2d:ca:a3:77:57:85:37:60:90:f5:14:e9:c9:41:80:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:88:9A:D5:34:46:D6:86:F5:B0:C6:8C:A8:9F:1E:0E:95:A1:A0
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:47:fd:fc:2b:f3:0f:10:9c:e6:81:61:06:e1:da:06:c1:0a:
ef:3f:47:b2:d3:b8:f5:75:98:d9:c7:a9:76:68:3a:33:70:bf:
f2:6a:f1:11:35:9b:f7:3f:b6:34:a8:d2:27:fc:0f:47:12:29:
38:56:c8:ce:e2:56:dc:3c:aa:a6:f6:77:d6:85:f9:3e:45:41:
18:a5:de:4c:42:02:3e:fb:88:f4:58:06:70:ff:b8:fe:4a:96:
c9:a9:a6:1a:42:cb:9f:05:ad:eb:19:d6:b0:66:01:82:fb:7d:
08:47:eb:13:21:a9:ad:b8:00:f9:9f:34:d0:23:7f:06:78:c0:
ab:45:2d:73:73:49:1a:35:ff:25:6b:46:bd:36:9e:c1:f5:03:
64:91:f6:c5:7c:7d:01:55:5e:c3:86:a0:2f:b5:cf:82:6c:17:
54:0d:e8:f2:77:85:1b:02:27:01:af:a3:ed:dc:9b:2b:36:43:
2a:42:3b:df:b3:82:d9:3a:77:5f:de:b9:1d:a7:f5:ce:fa:5b:
2e:69:64:9a:5d:f5:f7:dc:75:49:63:c9:4c:8b:e2:f7:86:4a:
8b:87:a7:65:79:c3:1b:35:dc:7a:c2:d2:2c:8e:8e:d4:ec:e9:
8b:43:79:df:71:63:b4:56:36:b5:ec:99:19:ea:35:b9:52:b7:
a6:4e:10:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/NS3AuuBN407MCzjfZpkLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2RkNDI0Mzg0NzU5YjVlODU1OTU4MjUwMTliNjlmZTli
ZjkyMjAwHhcNMjYwODA0MTUwMTQwWhcNMjYwODA1MTUwMTQwWjAzMTEwLwYDVQQD
EygzYTIyODg5YWQ1MzQ0NmQ2ODZmNWIwYzY4Y2E4OWYxZTBlOTVhMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xCvfbI9IC3h2LUIU4QfqzDwVnnI
vPvj2BqeRiMG7tV7BAg1op+G/NQHnOTVwAwwvSMpasaOuK9ViYu104lRA87ZGpKp
E4OBIzjy+sLod62s9ngRwtb26ib5Mg2EFHcDPkcn0NCo18ubYZCPoD/hd67RZ58N
Qbhth1VaY9pxBiMi7uF8UJDyxF98CLp9nuD4kUZMRQABy9t/lKbFpCOyoJo6pWoP
PLA1OkR7gPladwQEbTidBN9QqFDDwnyjUrThdRhEYdfI/jCBqJMG0vHxwlKGwpCL
4bOWRLcRXNaHiM9uNtDOHYDGCSoxFudlTTotyqN3V4U3YJD1FOnJQYAkswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoiiJrVNEbWhvWwxoyonx4OlaGgMB8GA1UdIwQY
MBaAFOQ91CQ4R1m16FWVglAZtp/pv5IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEt
OTNiNjkxZWUxY2NlLzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEtOTNiNjkxZWUxY2Nl
LzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUf9/Cvz
DxCc5oFhBuHaBsEK7z9HstO49XWY2cepdmg6M3C/8mrxETWb9z+2NKjSJ/wPRxIp
OFbIzuJW3DyqpvZ31oX5PkVBGKXeTEICPvuI9FgGcP+4/kqWyammGkLLnwWt6xnW
sGYBgvt9CEfrEyGprbgA+Z800CN/BnjAq0Utc3NJGjX/JWtGvTaewfUDZJH2xXx9
AVVew4agL7XPgmwXVA3o8neFGwInAa+j7dybKzZDKkI737OC2Tp3X965Haf1zvpb
Lmlkml3199x1SWPJTIvi94ZKi4enZXnDGzXcesLSLI6O1Ozpi0N533FjtFY2teyZ
Geo1uVK3pk4Q7w==
-----END CERTIFICATE-----
Generated at Tue Aug 4 18:15:38 2026 by rpki-client