
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
File: X5uimb09E7x3mu-sPnMEfx8MOmo.mft (raw, json)
Hash identifier: +i/fgXbbDRgnhaOmKPe1jSyoDe3kZI+TXDcT1qek+dg=
Subject key identifier: 83:D9:85:9C:B1:E3:33:C5:D1:44:38:CC:8D:56:47:6A:BB:8A:A4:AE
Authority key identifier: 5F:9B:A2:99:BD:3D:13:BC:77:9A:EF:AC:3E:73:04:7F:1F:0C:3A:6A
Certificate issuer: /CN=5f9ba299bd3d13bc779aefac3e73047f1f0c3a6a
Certificate serial: 019FF835128A23CEA79DE545FE8FA3E494DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
Manifest number: 2C
Signing time: Wed 12 Aug 2026 23:00:55 +0000
Manifest this update: Wed 12 Aug 2026 23:00:55 +0000
Manifest next update: Thu 13 Aug 2026 23:00:55 +0000
Files and hashes: 1: X5uimb09E7x3mu-sPnMEfx8MOmo.crl (hash: TClDYgUfbF0D1TM0sKCfduCqNeoEMv2/pHPBcXYY8Kc=)
2: lDaCt5tAcVZ0NMtTwwYMOYiDTbk.asa (hash: VFkjui+AinLbKiSZ5GvaCWkxNTUM+2WMMthvcw4QXWw=)
3: zbSmOdUlXWqGGMqhANIis6d_wOE.roa (hash: w5vtLzzuZtJBW2cAGToEQeLfanqgHPMRHOTiGp/gUYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:12:8a:23:ce:a7:9d:e5:45:fe:8f:a3:e4:94:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f9ba299bd3d13bc779aefac3e73047f1f0c3a6a
Validity
Not Before: Aug 12 23:00:55 2026 GMT
Not After : Aug 13 23:00:55 2026 GMT
Subject: CN=83d9859cb1e333c5d14438cc8d56476abb8aa4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:69:d5:76:bd:a1:9c:b9:c2:09:3c:bd:db:32:
6a:72:7b:cc:ba:47:7e:f2:43:41:82:5a:32:40:2d:
7b:ba:22:f7:2d:e2:d8:8a:0b:b0:9b:78:53:b0:5d:
44:a8:a5:1a:69:5e:d6:22:c0:21:3e:44:42:7e:12:
b0:c6:c9:1b:88:c4:31:d9:b4:5e:e8:1f:08:8c:e4:
c5:4e:f3:51:87:e4:d6:e2:f8:3a:70:63:ae:52:0f:
1e:8f:8a:77:58:ae:76:9c:4e:93:2c:99:89:6c:1a:
a9:3c:63:2e:6c:f4:2a:3d:68:f4:23:89:a7:0f:1a:
09:60:62:f8:32:d0:82:4e:41:59:f5:7f:39:c8:08:
e5:57:52:25:bb:a2:68:2b:f3:13:94:b8:43:69:e2:
eb:55:c1:e9:a9:c3:02:1a:a5:2a:ea:63:09:4d:d8:
fc:32:b8:15:a8:03:bb:55:ab:35:1f:a3:b9:c9:f3:
fe:9d:8e:ea:da:de:62:b8:44:ba:21:9e:43:09:bf:
28:f8:30:ec:e0:66:ef:6f:74:57:90:15:e8:2f:01:
0f:4a:51:15:3e:b4:86:26:50:94:ba:40:79:f1:57:
37:46:38:20:08:7a:26:ff:b2:dc:04:39:39:11:04:
ef:5f:31:87:32:c0:03:24:08:8c:a6:99:0c:8f:13:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D9:85:9C:B1:E3:33:C5:D1:44:38:CC:8D:56:47:6A:BB:8A:A4:AE
X509v3 Authority Key Identifier:
keyid:5F:9B:A2:99:BD:3D:13:BC:77:9A:EF:AC:3E:73:04:7F:1F:0C:3A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a6:8e:b2:32:60:28:47:ba:11:e2:0e:c4:56:1f:e3:4e:a2:
2f:2a:b1:cc:09:9b:5c:83:27:57:dd:26:0c:b8:27:31:42:6a:
fe:d2:89:f5:94:c4:00:3a:14:45:37:8b:ce:48:f0:66:c1:52:
27:5d:e5:e6:01:ac:dc:b5:0b:c0:64:2c:15:1b:2e:a9:18:bc:
43:a4:3e:db:10:14:f3:29:55:b8:9c:e4:9c:cc:7a:30:49:be:
21:58:2c:f1:ea:91:38:a5:37:7d:78:f3:57:08:b7:76:21:c4:
f0:0d:a2:b9:2c:85:9e:91:27:60:1d:ee:58:1a:14:64:a8:20:
ee:67:dd:61:37:e6:38:7e:fd:0f:65:c8:d5:a5:e5:86:10:cc:
4d:cb:b3:10:67:fa:3e:9a:16:69:99:2b:8f:14:ca:98:42:1c:
ee:cb:70:60:0a:b3:aa:db:1f:8b:5e:20:6c:34:02:3d:67:84:
02:b5:8b:15:ff:a8:b1:c1:c7:be:95:62:d3:cc:79:77:57:32:
1c:a4:4a:7f:b4:62:ff:1a:6b:79:ef:f4:53:75:91:e8:eb:02:
20:cd:ad:9c:e5:a7:25:ee:be:32:de:00:12:5a:21:0a:5b:c1:
b7:a5:95:db:2c:6a:b2:df:e7:74:80:0d:34:9f:88:d4:fb:07:
83:9f:5a:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4NRKKI86nneVF/o+j5JTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOWJhMjk5YmQzZDEzYmM3NzlhZWZhYzNlNzMwNDdmMWYw
YzNhNmEwHhcNMjYwODEyMjMwMDU1WhcNMjYwODEzMjMwMDU1WjAzMTEwLwYDVQQD
Eyg4M2Q5ODU5Y2IxZTMzM2M1ZDE0NDM4Y2M4ZDU2NDc2YWJiOGFhNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+mnVdr2hnLnCCTy92zJqcnvMukd+
8kNBgloyQC17uiL3LeLYiguwm3hTsF1EqKUaaV7WIsAhPkRCfhKwxskbiMQx2bRe
6B8IjOTFTvNRh+TW4vg6cGOuUg8ej4p3WK52nE6TLJmJbBqpPGMubPQqPWj0I4mn
DxoJYGL4MtCCTkFZ9X85yAjlV1Ilu6JoK/MTlLhDaeLrVcHpqcMCGqUq6mMJTdj8
MrgVqAO7Vas1H6O5yfP+nY7q2t5iuES6IZ5DCb8o+DDs4Gbvb3RXkBXoLwEPSlEV
PrSGJlCUukB58Vc3RjggCHom/7LcBDk5EQTvXzGHMsADJAiMppkMjxPZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPZhZyx4zPF0UQ4zI1WR2q7iqSuMB8GA1UdIwQY
MBaAFF+bopm9PRO8d5rvrD5zBH8fDDpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDV1aW1iMDlFN3gzbXUtc1BuTUVmeDhNT21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNmQ0OWMtNzY4NS00NDc1LWI2MjEt
MzQ2OThmZjU5YjA1LzEvWDV1aW1iMDlFN3gzbXUtc1BuTUVmeDhNT21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lNmQ0OWMtNzY4NS00NDc1LWI2MjEtMzQ2OThmZjU5YjA1
LzEvWDV1aW1iMDlFN3gzbXUtc1BuTUVmeDhNT21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaaOsjJg
KEe6EeIOxFYf406iLyqxzAmbXIMnV90mDLgnMUJq/tKJ9ZTEADoURTeLzkjwZsFS
J13l5gGs3LULwGQsFRsuqRi8Q6Q+2xAU8ylVuJzknMx6MEm+IVgs8eqROKU3fXjz
Vwi3diHE8A2iuSyFnpEnYB3uWBoUZKgg7mfdYTfmOH79D2XI1aXlhhDMTcuzEGf6
PpoWaZkrjxTKmEIc7stwYAqzqtsfi14gbDQCPWeEArWLFf+oscHHvpVi08x5d1cy
HKRKf7Ri/xpree/0U3WR6OsCIM2tnOWnJe6+Mt4AElohClvBt6WV2yxqst/ndIAN
NJ+I1PsHg59ayQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:25 2026 by rpki-client