Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
File: 5QkPYoTNm-1eNlwJf33tcQZVj1k.mft (raw, json)
Hash identifier: jHRYPBoxSRUWLVz9OiCF8vlmklY0n7EbkFlLiVe05/U=
Subject key identifier: DF:21:11:B9:CC:23:30:E3:AA:2C:A4:9E:8C:60:BC:12:40:AC:89:F3
Authority key identifier: E5:09:0F:62:84:CD:9B:ED:5E:36:5C:09:7F:7D:ED:71:06:55:8F:59
Certificate issuer: /CN=e5090f6284cd9bed5e365c097f7ded7106558f59
Certificate serial: 01A04017B47F4D5C9FBFE35D4C8C307F7AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
Manifest number: 0159
Signing time: Wed 26 Aug 2026 22:01:30 +0000
Manifest this update: Wed 26 Aug 2026 22:01:30 +0000
Manifest next update: Thu 27 Aug 2026 22:01:30 +0000
Files and hashes: 1: 5QkPYoTNm-1eNlwJf33tcQZVj1k.crl (hash: Bphb2FJ+CCCiIf21GFRPHqNijWqUrr6oo5PW6xdM7sM=)
2: T-nFUADDOe_gVl6vpCX2jmb_ysw.roa (hash: AOWlKIZZ81Ea4+CdSRVuTl2Mle2x0FskHzHQS5873EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:b4:7f:4d:5c:9f:bf:e3:5d:4c:8c:30:7f:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5090f6284cd9bed5e365c097f7ded7106558f59
Validity
Not Before: Aug 26 22:01:30 2026 GMT
Not After : Aug 27 22:01:30 2026 GMT
Subject: CN=df2111b9cc2330e3aa2ca49e8c60bc1240ac89f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:2d:49:63:61:10:59:2a:3f:6d:00:7d:b7:
ff:ae:42:16:a8:eb:80:0a:64:2c:f7:7e:23:01:71:
b4:27:23:77:49:6c:b0:f3:4b:fc:dd:3b:63:45:b1:
b2:5c:6b:7f:c8:6c:73:81:5a:60:f2:b9:ee:47:e9:
8c:72:cf:87:eb:6c:18:ef:80:d6:db:6a:1a:93:e2:
ca:a4:d7:26:c2:9b:11:d2:4e:12:d4:17:79:6e:63:
f6:7d:72:61:ae:27:e8:22:c9:be:53:51:2f:d9:1a:
c3:13:e0:22:eb:0f:30:3b:01:5a:4b:83:aa:b5:6c:
61:cf:8c:6d:bd:6e:66:42:60:fe:01:23:d7:b2:0b:
ed:e0:f6:b7:25:64:bd:9e:ec:f5:84:29:50:59:75:
0c:10:5a:7f:b7:08:f5:12:ab:c1:70:c4:18:43:3b:
df:2d:88:a9:7c:61:ed:5f:b2:b0:b5:11:45:af:bb:
0d:80:62:d8:c1:f6:09:6d:7d:33:f8:b6:18:a0:25:
15:89:49:6f:7f:28:fe:f2:d5:db:f0:29:a8:c6:e0:
84:60:8f:01:18:8b:ea:a0:ba:f9:52:af:fe:dc:5a:
83:c8:0d:4a:00:41:32:de:fe:f9:0a:7e:e4:18:cf:
34:e2:37:11:7a:83:10:fe:de:d7:22:9a:11:62:8f:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:11:B9:CC:23:30:E3:AA:2C:A4:9E:8C:60:BC:12:40:AC:89:F3
X509v3 Authority Key Identifier:
keyid:E5:09:0F:62:84:CD:9B:ED:5E:36:5C:09:7F:7D:ED:71:06:55:8F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d4:76:d3:2c:09:cc:c9:ee:30:17:d1:7a:69:6f:9d:51:3c:
be:ab:c7:81:c6:0b:00:33:95:06:a8:bf:78:2e:9d:52:03:f3:
0e:45:ff:ce:fd:cf:bb:f6:fc:0e:cd:a7:5d:a7:27:cc:0e:78:
1d:71:6f:22:fb:0c:ac:5d:84:fd:e5:4f:d0:8f:3d:ee:e7:b1:
cb:08:de:ae:cb:c6:e1:9f:1e:1e:64:1a:50:48:72:c2:ba:93:
7a:7f:ab:77:86:00:77:dc:bf:43:67:a2:a1:1d:7c:8a:45:eb:
47:b0:27:9c:13:85:c0:60:28:45:5e:6f:cc:0a:e0:5c:1e:77:
49:b1:cd:6a:48:25:80:a7:08:fa:cc:83:e5:1e:78:16:e3:af:
ef:ea:05:1f:68:c2:4f:6a:e6:54:3a:9b:48:7d:5a:26:0d:ec:
12:e6:83:48:dd:d5:5c:2f:f2:2f:30:38:94:89:39:30:83:eb:
af:cd:c5:4c:0a:6b:a6:aa:c3:d7:c0:11:c2:e3:a3:ae:9e:49:
c0:89:4a:25:8c:5d:5a:91:d5:5f:b2:2a:da:ff:bf:fd:d1:cc:
23:27:3d:be:97:d1:f0:15:26:6d:e6:9e:2d:af:ba:18:d0:8d:
61:77:a3:ad:bc:2c:f9:a2:90:ab:b4:6e:0d:8d:a0:00:13:03:
56:fe:a2:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAF7R/TVyfv+NdTIwwf3qtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDkwZjYyODRjZDliZWQ1ZTM2NWMwOTdmN2RlZDcxMDY1
NThmNTkwHhcNMjYwODI2MjIwMTMwWhcNMjYwODI3MjIwMTMwWjAzMTEwLwYDVQQD
EyhkZjIxMTFiOWNjMjMzMGUzYWEyY2E0OWU4YzYwYmMxMjQwYWM4OWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H0tSWNhEFkqP20Afbf/rkIWqOuA
CmQs934jAXG0JyN3SWyw80v83TtjRbGyXGt/yGxzgVpg8rnuR+mMcs+H62wY74DW
22oak+LKpNcmwpsR0k4S1Bd5bmP2fXJhrifoIsm+U1Ev2RrDE+Ai6w8wOwFaS4Oq
tWxhz4xtvW5mQmD+ASPXsgvt4Pa3JWS9nuz1hClQWXUMEFp/twj1EqvBcMQYQzvf
LYipfGHtX7KwtRFFr7sNgGLYwfYJbX0z+LYYoCUViUlvfyj+8tXb8CmoxuCEYI8B
GIvqoLr5Uq/+3FqDyA1KAEEy3v75Cn7kGM804jcReoMQ/t7XIpoRYo9LfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8hEbnMIzDjqiyknoxgvBJArInzMB8GA1UdIwQY
MBaAFOUJD2KEzZvtXjZcCX997XEGVY9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFrUFlvVE5tLTFlTmx3SmYzM3RjUVpWajFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMDU4NWEtYzhkYy00MzRmLTgxODkt
MDQzMmY0YzRkNGYwLzEvNVFrUFlvVE5tLTFlTmx3SmYzM3RjUVpWajFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMDU4NWEtYzhkYy00MzRmLTgxODktMDQzMmY0YzRkNGYw
LzEvNVFrUFlvVE5tLTFlTmx3SmYzM3RjUVpWajFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNR20ywJ
zMnuMBfRemlvnVE8vqvHgcYLADOVBqi/eC6dUgPzDkX/zv3Pu/b8Ds2nXacnzA54
HXFvIvsMrF2E/eVP0I897uexywjersvG4Z8eHmQaUEhywrqTen+rd4YAd9y/Q2ei
oR18ikXrR7AnnBOFwGAoRV5vzArgXB53SbHNakglgKcI+syD5R54FuOv7+oFH2jC
T2rmVDqbSH1aJg3sEuaDSN3VXC/yLzA4lIk5MIPrr83FTAprpqrD18ARwuOjrp5J
wIlKJYxdWpHVX7Iq2v+//dHMIyc9vpfR8BUmbeaeLa+6GNCNYXejrbws+aKQq7Ru
DY2gABMDVv6isw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:04:53 2026 by rpki-client