Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: w5X/uc49j3mcJGDQ/UZLehraXGP8Leb4LEFny99qAhY=
Subject key identifier: B1:5D:D8:4E:4D:F7:09:D4:BC:08:3C:D7:AE:B3:25:D9:0E:5D:DA:5D
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 019E30A908027962726AF8A6163B8810C7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 0FEF
Signing time: Sat 16 May 2026 12:00:44 +0000
Manifest this update: Sat 16 May 2026 12:00:44 +0000
Manifest next update: Sun 17 May 2026 12:00:44 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: e6MgA0ejLDhSaI1Qq0Qo8N+SQpWm0t3RkHfc9j2/zKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:08:02:79:62:72:6a:f8:a6:16:3b:88:10:c7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: May 16 12:00:44 2026 GMT
Not After : May 17 12:00:44 2026 GMT
Subject: CN=b15dd84e4df709d4bc083cd7aeb325d90e5dda5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ea:76:b9:fe:d2:58:3c:53:63:a7:62:2d:5e:
27:fb:2c:2d:05:4d:bd:48:c2:10:16:e7:25:ae:93:
63:65:bd:d0:a5:ed:9c:47:a5:01:0d:9b:c0:49:cb:
55:44:e4:31:7c:1a:51:54:a7:c1:bf:01:1d:6f:27:
d7:cb:3c:fe:79:54:33:f4:f2:0a:c3:9c:ff:04:57:
29:48:a0:9f:6c:fb:96:84:c0:e5:30:0f:fc:ce:39:
81:95:83:45:6f:18:ab:d6:05:e1:d2:29:29:87:b2:
e6:de:36:ab:0d:f0:22:db:a7:e1:82:91:4d:fd:6e:
20:de:ff:50:dd:09:9d:93:8b:64:6c:1d:32:93:5b:
07:83:c3:69:af:ed:a8:8c:62:fe:c9:42:cf:b5:d9:
62:c2:47:16:00:5e:81:39:a1:ad:c5:d9:9c:f3:f3:
ef:c9:2a:ef:7f:9f:3e:db:51:54:95:f1:99:1d:99:
9a:e9:7f:bd:5d:5c:5b:d2:2f:74:62:54:41:48:99:
7f:f6:86:a3:5f:f6:44:a1:e0:fa:2d:cf:1a:d4:f1:
7c:c1:ca:7a:5b:4b:aa:46:71:9e:cb:02:81:85:e2:
87:1d:cd:74:cd:f9:29:5f:1e:88:f2:20:0e:54:fd:
fc:1c:d7:a8:7f:91:c4:dd:8e:fd:66:67:28:86:6a:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:D8:4E:4D:F7:09:D4:BC:08:3C:D7:AE:B3:25:D9:0E:5D:DA:5D
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:31:6f:85:b1:14:c3:c1:c6:13:5a:74:d3:43:f6:79:50:d8:
cc:cd:d9:a5:50:c1:a9:70:2f:43:9f:c4:d8:05:19:bb:85:e1:
b7:70:c7:d1:18:36:06:32:b5:d6:d9:41:17:ed:fe:7f:da:fb:
69:5d:46:8e:96:a8:99:ca:20:14:5f:23:3d:c7:cd:7e:cb:c1:
74:d7:e3:43:e8:57:3b:40:c1:39:dd:8a:2d:a0:ec:e9:ff:c8:
52:d3:4e:60:04:a4:07:78:8b:3a:a4:bd:f3:35:97:0d:64:38:
5e:06:45:59:e2:dd:ec:6a:9c:32:30:32:40:ee:0a:73:df:64:
46:64:53:17:02:ac:c2:2c:db:b3:7a:17:f7:56:b9:a3:fa:79:
4d:31:bb:e7:4a:d1:73:6f:8f:9e:d4:a0:93:8b:e5:84:df:54:
b0:df:2c:ab:d6:c1:15:0f:04:71:f8:3b:be:7f:ff:16:46:04:
ae:ee:a5:a2:15:d0:98:d9:74:d3:08:ed:b2:c8:b1:8c:9f:9f:
f3:5b:2e:ca:66:b5:83:23:e5:00:69:cd:bc:93:83:d2:a0:59:
5e:0b:f9:b5:be:49:49:27:c8:55:d4:77:98:8a:40:52:ef:fa:
41:9f:be:0a:12:b4:e3:27:f0:13:8b:4e:13:2f:f4:93:e9:07:
25:1c:44:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqQgCeWJyavimFjuIEMepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YjkxYjE5ZjRiZGJkNmZmMWQ3ZjM3MmQzYTBkZDEzOTAw
NTAwMDYwHhcNMjYwNTE2MTIwMDQ0WhcNMjYwNTE3MTIwMDQ0WjAzMTEwLwYDVQQD
EyhiMTVkZDg0ZTRkZjcwOWQ0YmMwODNjZDdhZWIzMjVkOTBlNWRkYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+p2uf7SWDxTY6diLV4n+ywtBU29
SMIQFuclrpNjZb3Qpe2cR6UBDZvASctVROQxfBpRVKfBvwEdbyfXyzz+eVQz9PIK
w5z/BFcpSKCfbPuWhMDlMA/8zjmBlYNFbxir1gXh0ikph7Lm3jarDfAi26fhgpFN
/W4g3v9Q3Qmdk4tkbB0yk1sHg8Npr+2ojGL+yULPtdliwkcWAF6BOaGtxdmc8/Pv
ySrvf58+21FUlfGZHZma6X+9XVxb0i90YlRBSJl/9oajX/ZEoeD6Lc8a1PF8wcp6
W0uqRnGeywKBheKHHc10zfkpXx6I8iAOVP38HNeof5HE3Y79Zmcohmr65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFd2E5N9wnUvAg8166zJdkOXdpdMB8GA1UdIwQY
MBaAFOa5Gxn0vb1v8dfzctOg3ROQBQAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDct
MDRiNTI4ZmFlMDNhLzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDctMDRiNTI4ZmFlMDNh
LzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzFvhbEU
w8HGE1p000P2eVDYzM3ZpVDBqXAvQ5/E2AUZu4Xht3DH0Rg2BjK11tlBF+3+f9r7
aV1GjpaomcogFF8jPcfNfsvBdNfjQ+hXO0DBOd2KLaDs6f/IUtNOYASkB3iLOqS9
8zWXDWQ4XgZFWeLd7GqcMjAyQO4Kc99kRmRTFwKswizbs3oX91a5o/p5TTG750rR
c2+PntSgk4vlhN9UsN8sq9bBFQ8Ecfg7vn//FkYEru6lohXQmNl00wjtssixjJ+f
81suyma1gyPlAGnNvJOD0qBZXgv5tb5JSSfIVdR3mIpAUu/6QZ++ChK04yfwE4tO
Ey/0k+kHJRxE/Q==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:47 2026 by rpki-client