Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: J3WP+wpIqUgjrrUbWd6zsMrHB7Jt6UXssUTSftVV+Y8=
Subject key identifier: 46:8C:99:E8:9D:77:22:09:36:47:0B:AA:48:E8:3F:4A:9B:69:92:56
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 01A08B313442B5D6CBCE5899B034EEA3F3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 0A22
Signing time: Thu 10 Sep 2026 12:00:52 +0000
Manifest this update: Thu 10 Sep 2026 12:00:52 +0000
Manifest next update: Fri 11 Sep 2026 12:00:52 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: I2VDDefA5RdrBHoXdB3Q4yjRt/pOJcMF5P6EUCaZnco=)
2: HALUJ8HMBpoHzskaJCYqZgHex5U.roa (hash: cOZhNR9S9Fv/MNqYDNuqDaMlzhNl0rBxxMK0bBBrUJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:34:42:b5:d6:cb:ce:58:99:b0:34:ee:a3:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Sep 10 12:00:52 2026 GMT
Not After : Sep 11 12:00:52 2026 GMT
Subject: CN=468c99e89d77220936470baa48e83f4a9b699256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:84:0e:e4:40:cf:07:1e:a3:f8:c5:e2:1c:
6f:22:19:fc:bf:3a:ac:82:90:ac:65:4e:8e:02:ad:
30:92:ce:a4:5c:75:8c:0f:0b:06:e5:5f:03:56:89:
61:48:03:6a:67:a0:08:3e:e2:b8:fb:50:9f:15:a6:
50:0b:30:40:e2:f1:6b:79:19:c1:f6:d7:b0:70:7e:
bb:fe:86:6a:f2:48:5d:39:d7:ed:6d:ca:97:36:10:
95:be:95:74:21:9d:ec:a5:d0:96:c8:2a:5f:c2:82:
42:9a:d2:48:31:11:ac:e4:8c:3e:62:8f:6b:b5:01:
7c:33:1f:61:b4:d6:a0:dd:04:72:6e:da:3e:27:f2:
c9:78:06:40:38:e4:3f:e2:ca:a8:7d:e2:06:11:13:
2a:37:9e:a7:02:0c:d1:7d:26:d5:87:dc:7c:b7:7c:
ff:5e:8f:c6:a1:1d:6a:52:ec:e6:45:eb:b2:79:38:
7f:c2:98:7a:dd:72:c3:f7:4c:0f:02:3c:07:49:b2:
04:ad:d4:e8:7c:82:30:a7:82:f0:94:5b:bf:2f:9e:
f0:e4:80:46:06:28:37:73:3e:9d:f8:23:9d:b8:04:
ff:f3:bc:24:c0:36:ef:5f:13:bd:46:7f:99:24:b2:
65:20:4a:d8:31:80:92:03:80:7a:3a:a3:5e:08:9f:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8C:99:E8:9D:77:22:09:36:47:0B:AA:48:E8:3F:4A:9B:69:92:56
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:36:1c:f6:d9:ff:0f:77:f5:4c:2c:bc:0c:dc:5d:2c:e2:c6:
76:5f:2a:9a:fb:4b:f8:20:04:da:5a:ee:3c:f5:2c:e8:f8:6e:
0d:c8:96:fa:75:4a:85:df:56:7b:48:ea:0b:ff:e8:09:37:04:
4b:0a:3e:07:6f:7e:d5:c6:a5:0d:dc:c6:49:e1:f7:c6:c7:a0:
35:f3:9f:97:cf:e5:40:1b:1c:dc:3e:f5:55:76:0b:d0:8a:05:
cf:99:0a:1a:a8:c1:23:b9:65:2b:1e:51:4e:9d:8f:f4:6e:64:
7f:38:a4:d0:8a:36:8a:63:0f:fc:3e:36:02:68:08:9d:3d:e5:
ce:b9:6f:08:c7:83:88:9b:33:9e:0e:fa:bf:00:28:4a:51:e5:
d1:3e:b6:47:27:b4:d6:02:35:e7:b6:27:73:c7:d6:f7:6c:b8:
5d:b9:6c:14:53:a9:4b:85:75:85:61:df:27:6a:0f:9c:84:62:
99:87:9f:ae:fa:9f:53:27:3e:cd:09:0c:19:88:11:a2:8e:4d:
90:96:3a:0b:ea:9a:cc:27:d6:9e:09:d6:9f:69:f1:2c:a8:f5:
27:cf:35:3a:fc:ff:85:79:ab:4c:8c:ee:0c:2c:6c:38:0d:21:
ff:33:9b:96:29:a2:7c:a6:44:41:07:bc:36:9b:ae:99:96:e3:
54:18:39:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMTRCtdbLzliZsDTuo/PuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODBhNTYxMDExMmRmMjAzOTg3ZjMyZjBlNWUxNWFkMzVl
NzEwZDIwHhcNMjYwOTEwMTIwMDUyWhcNMjYwOTExMTIwMDUyWjAzMTEwLwYDVQQD
Eyg0NjhjOTllODlkNzcyMjA5MzY0NzBiYWE0OGU4M2Y0YTliNjk5MjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisiEDuRAzwceo/jF4hxvIhn8vzqs
gpCsZU6OAq0wks6kXHWMDwsG5V8DVolhSANqZ6AIPuK4+1CfFaZQCzBA4vFreRnB
9tewcH67/oZq8khdOdftbcqXNhCVvpV0IZ3spdCWyCpfwoJCmtJIMRGs5Iw+Yo9r
tQF8Mx9htNag3QRybto+J/LJeAZAOOQ/4sqofeIGERMqN56nAgzRfSbVh9x8t3z/
Xo/GoR1qUuzmReuyeTh/wph63XLD90wPAjwHSbIErdTofIIwp4LwlFu/L57w5IBG
Big3cz6d+COduAT/87wkwDbvXxO9Rn+ZJLJlIErYMYCSA4B6OqNeCJ/5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaMmeiddyIJNkcLqkjoP0qbaZJWMB8GA1UdIwQY
MBaAFOaApWEBEt8gOYfzLw5eFa015xDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjIt
ZDE1MDJmN2NmMjM0LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjItZDE1MDJmN2NmMjM0
LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDYc9tn/
D3f1TCy8DNxdLOLGdl8qmvtL+CAE2lruPPUs6PhuDciW+nVKhd9We0jqC//oCTcE
Swo+B29+1calDdzGSeH3xsegNfOfl8/lQBsc3D71VXYL0IoFz5kKGqjBI7llKx5R
Tp2P9G5kfzik0Io2imMP/D42AmgInT3lzrlvCMeDiJszng76vwAoSlHl0T62Rye0
1gI157Ync8fW92y4XblsFFOpS4V1hWHfJ2oPnIRimYefrvqfUyc+zQkMGYgRoo5N
kJY6C+qazCfWngnWn2nxLKj1J881Ovz/hXmrTIzuDCxsOA0h/zOblimifKZEQQe8
NpuumZbjVBg53g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:46:36 2026 by rpki-client