Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: lsLI8mvL/J0B67fQ8y8m+uvKQbY8iraUaxTk3zdIft4=
Subject key identifier: 8E:FD:12:FE:0A:2D:B6:A7:97:4A:7A:A7:E6:9A:89:E0:18:A0:35:56
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 01A142A87EC63687541ED5A27CBA75FBF6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 1AA8
Signing time: Fri 16 Oct 2026 03:01:40 +0000
Manifest this update: Fri 16 Oct 2026 03:01:40 +0000
Manifest next update: Sat 17 Oct 2026 03:01:40 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: Drqi9s5+X2ipO4TERQALdPL5JREVod9VP0k9+5JSn+E=)
2: SKcRCi3MhMhPXXjYBQ-YY8usu_I.roa (hash: JBdQV9mE5RLBEdRJXZYRJ2qitMx8tzIF6I1KNvvN/sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 23:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:a8:7e:c6:36:87:54:1e:d5:a2:7c:ba:75:fb:f6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Oct 16 03:01:40 2026 GMT
Not After : Oct 17 03:01:40 2026 GMT
Subject: CN=8efd12fe0a2db6a7974a7aa7e69a89e018a03556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:96:eb:46:b0:35:bf:f1:06:82:36:be:ce:
33:db:86:af:7f:b7:4a:9f:07:c9:4d:67:95:47:83:
07:e4:1e:71:fe:66:1c:2e:31:33:21:17:a3:ca:37:
f9:d8:c2:60:66:5f:b6:3e:73:db:26:3e:cf:21:26:
8f:84:f4:e0:57:8f:1b:13:1f:e2:7f:1d:91:e6:10:
c3:61:53:c4:1a:04:86:0f:b0:0b:01:87:1f:b3:d9:
e2:f0:0d:9f:1b:15:72:a3:09:2f:44:cf:eb:e8:ec:
14:18:4e:d8:be:2a:20:7c:14:de:a0:58:e2:64:88:
c0:f8:a9:95:9a:cf:e3:42:e3:9f:bc:66:e3:e2:ff:
19:ae:03:40:0e:34:fd:d7:fd:59:51:72:43:09:6c:
3e:2c:b7:b0:17:02:ad:2e:ff:0f:d8:1e:a0:43:cd:
ef:d3:a5:f3:cd:f3:ed:b4:57:b1:0e:38:25:97:38:
25:48:fa:09:e6:1a:b2:0d:d2:39:4f:0e:b7:7b:90:
62:ad:61:9a:8b:55:8d:bf:9b:ae:2b:6e:f6:da:64:
5c:01:74:b0:2f:7e:5c:63:27:e7:dc:93:a6:d7:c6:
37:53:12:31:c1:a5:19:97:69:17:96:05:c4:d8:83:
7c:aa:fa:0b:21:06:8c:02:ff:14:92:bb:40:b6:31:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:12:FE:0A:2D:B6:A7:97:4A:7A:A7:E6:9A:89:E0:18:A0:35:56
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:fb:b8:f3:78:ff:fc:ae:2d:a7:99:a5:3a:b3:61:1d:c2:
91:01:36:2d:bb:00:56:80:74:1e:44:78:9c:8a:a7:e6:c6:63:
52:35:c8:a0:0c:90:89:e1:bf:23:1d:99:24:d6:21:a9:e9:41:
51:31:97:69:6b:19:7d:a2:72:0a:5c:1e:02:bf:9e:1f:82:8c:
90:bf:cd:65:a5:bb:eb:f9:2f:cc:40:ae:b2:0e:b5:5b:9b:f1:
ff:99:6a:0d:1c:f4:ac:c6:fc:8a:99:80:94:28:01:c0:bb:17:
e2:ca:3a:50:4f:48:44:70:11:a6:36:d3:bf:ec:d6:14:78:d6:
0e:b3:66:cb:7e:81:e1:81:94:74:dc:c8:ea:36:ed:d7:3f:f5:
3c:84:15:08:99:1c:10:13:74:19:be:be:d2:6f:1b:d2:d1:6e:
94:bb:af:4a:7f:f6:97:38:6d:fe:81:87:98:c8:4f:af:03:18:
10:1e:79:7e:ec:dc:cb:1e:7b:fe:fd:85:ca:e1:2e:53:ae:a7:
65:b2:64:4b:15:7b:75:04:05:21:a5:a7:0b:9d:99:c4:eb:9d:
6d:dc:85:81:49:27:c5:a3:82:f0:dc:4a:7b:2d:d1:6d:30:ab:
a8:20:8e:11:dc:24:ec:1c:31:94:17:8d:81:1b:67:5f:f8:b1:
d6:a8:73:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCqH7GNodUHtWifLp1+/bpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MTgwNDVjZmJkOTZhMzc2ZWM5OGUzZjVlOGIyYWZiMTRj
Y2E5M2MwHhcNMjYxMDE2MDMwMTQwWhcNMjYxMDE3MDMwMTQwWjAzMTEwLwYDVQQD
Eyg4ZWZkMTJmZTBhMmRiNmE3OTc0YTdhYTdlNjlhODllMDE4YTAzNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TmW60awNb/xBoI2vs4z24avf7dK
nwfJTWeVR4MH5B5x/mYcLjEzIRejyjf52MJgZl+2PnPbJj7PISaPhPTgV48bEx/i
fx2R5hDDYVPEGgSGD7ALAYcfs9ni8A2fGxVyowkvRM/r6OwUGE7YviogfBTeoFji
ZIjA+KmVms/jQuOfvGbj4v8ZrgNADjT91/1ZUXJDCWw+LLewFwKtLv8P2B6gQ83v
06XzzfPttFexDjgllzglSPoJ5hqyDdI5Tw63e5BirWGai1WNv5uuK2722mRcAXSw
L35cYyfn3JOm18Y3UxIxwaUZl2kXlgXE2IN8qvoLIQaMAv8UkrtAtjG9fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI79Ev4KLbanl0p6p+aaieAYoDVWMB8GA1UdIwQY
MBaAFOUYBFz72Wo3bsmOP16LKvsUzKk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kYjgyNTgtMmYxOC00ZjQ4LTg5YTct
ZmM1MDU2NmIxMThmLzEvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kYjgyNTgtMmYxOC00ZjQ4LTg5YTctZmM1MDU2NmIxMThm
LzEvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSX7uPN4
//yuLaeZpTqzYR3CkQE2LbsAVoB0HkR4nIqn5sZjUjXIoAyQieG/Ix2ZJNYhqelB
UTGXaWsZfaJyClweAr+eH4KMkL/NZaW76/kvzECusg61W5vx/5lqDRz0rMb8ipmA
lCgBwLsX4so6UE9IRHARpjbTv+zWFHjWDrNmy36B4YGUdNzI6jbt1z/1PIQVCJkc
EBN0Gb6+0m8b0tFulLuvSn/2lzht/oGHmMhPrwMYEB55fuzcyx57/v2FyuEuU66n
ZbJkSxV7dQQFIaWnC52ZxOudbdyFgUknxaOC8NxKey3RbTCrqCCOEdwk7BwxlBeN
gRtnX/ix1qhz6g==
-----END CERTIFICATE-----
Generated at Fri Oct 16 08:03:11 2026 by rpki-client