Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: /4ZvIbSYRe+anOoE4QcoEBBXibgGreCf0UFCOBLAW7I=
Subject key identifier: C1:B3:C1:37:5D:7B:A8:45:2B:6F:91:2A:57:33:3D:5B:FC:7A:2E:35
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019E3117E858019BB79B20719B416D2D4D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0B36
Signing time: Sat 16 May 2026 14:01:50 +0000
Manifest this update: Sat 16 May 2026 14:01:50 +0000
Manifest next update: Sun 17 May 2026 14:01:50 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: IwCK0dVs1Rnx4Fg1RuQY/TXlVKy9uLSk2RH0p3TyrLA=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:e8:58:01:9b:b7:9b:20:71:9b:41:6d:2d:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: May 16 14:01:50 2026 GMT
Not After : May 17 14:01:50 2026 GMT
Subject: CN=c1b3c1375d7ba8452b6f912a57333d5bfc7a2e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:d9:56:8e:fc:97:96:7c:d0:a3:6d:57:b5:
c3:5d:00:a0:04:e2:96:81:d5:d8:16:3f:e6:bf:e0:
1b:42:bf:a4:b7:84:37:69:ea:8c:f3:65:1c:80:68:
64:d1:86:81:4f:fd:8e:84:a9:eb:03:b3:50:fb:6b:
b8:c3:70:09:c9:78:3d:c6:67:d0:0d:01:58:85:01:
aa:fd:95:24:39:e4:6a:04:4a:0a:89:44:5a:6a:0a:
9a:2f:ec:62:32:42:22:96:ed:b7:11:39:ce:d0:8e:
ca:52:7e:d4:d6:7d:19:00:99:6a:29:fb:7e:ca:d0:
65:59:82:e8:3a:24:62:a0:d8:42:c5:0d:d3:78:8d:
97:7d:5c:01:6b:52:13:21:d7:fa:91:df:74:de:a7:
c5:46:1d:03:ab:3f:1c:76:59:3e:3f:54:d2:ff:c7:
fc:9d:3a:9f:d7:16:bc:cc:56:0e:f6:83:79:b3:db:
02:44:f6:5e:06:04:d3:b0:7c:e9:22:6f:1d:48:09:
30:53:6e:50:22:f6:34:18:89:70:b0:de:8a:57:5b:
a1:c6:86:8d:b2:69:47:3e:8b:40:7b:ee:83:11:59:
d8:64:77:0a:4c:c8:cb:d0:f9:51:19:e6:58:be:b8:
f2:3c:34:d0:a1:9a:85:dc:9a:9d:b9:d1:4a:01:45:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B3:C1:37:5D:7B:A8:45:2B:6F:91:2A:57:33:3D:5B:FC:7A:2E:35
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:9a:67:02:48:00:25:7c:2c:86:e0:8f:0c:ae:86:57:5d:
bd:67:34:71:5a:97:2d:7b:27:a6:da:ac:7f:11:06:4a:05:11:
62:5a:8e:c2:3f:b2:b1:05:e4:ae:3c:40:eb:53:4a:53:62:40:
ac:6f:0d:ab:59:35:00:0a:37:07:6e:60:df:c9:fc:6d:d8:64:
68:3e:86:0b:8c:0b:aa:2b:57:4d:81:50:50:a7:33:56:a1:b4:
55:9c:f7:ca:80:78:47:b9:b4:25:38:59:83:b5:eb:a7:a5:37:
99:da:e8:fe:ae:00:63:c5:8d:1b:54:6c:22:78:5a:26:46:7f:
ca:e4:3c:4a:3d:b1:d5:74:1b:2f:a3:9a:ef:49:de:b2:e2:41:
05:03:e1:17:ef:e9:4e:ac:f5:0f:6c:54:51:46:ab:7a:34:66:
55:8c:b5:a7:de:91:1c:4f:b5:cc:55:cb:54:a2:50:6b:68:b4:
a6:83:7e:03:42:3e:ac:b1:e3:e9:55:ba:28:42:84:5b:22:f0:
76:93:f7:a8:2b:60:68:70:ac:90:6a:4a:6a:4b:cc:e8:6f:89:
6f:45:96:3c:f4:a5:7a:14:2c:b4:67:62:15:de:8c:d5:f9:a5:
b9:35:d9:05:01:00:ab:37:0c:31:15:28:ea:f2:a0:56:28:71:
31:d0:35:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF+hYAZu3myBxm0FtLU0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWU0YThjZDI4OThjNWRlNmQ2NjI1ZjEwYzRiMmU4NWY0
NjFmNzgwHhcNMjYwNTE2MTQwMTUwWhcNMjYwNTE3MTQwMTUwWjAzMTEwLwYDVQQD
EyhjMWIzYzEzNzVkN2JhODQ1MmI2ZjkxMmE1NzMzM2Q1YmZjN2EyZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk3ZVo78l5Z80KNtV7XDXQCgBOKW
gdXYFj/mv+AbQr+kt4Q3aeqM82UcgGhk0YaBT/2OhKnrA7NQ+2u4w3AJyXg9xmfQ
DQFYhQGq/ZUkOeRqBEoKiURaagqaL+xiMkIilu23ETnO0I7KUn7U1n0ZAJlqKft+
ytBlWYLoOiRioNhCxQ3TeI2XfVwBa1ITIdf6kd903qfFRh0Dqz8cdlk+P1TS/8f8
nTqf1xa8zFYO9oN5s9sCRPZeBgTTsHzpIm8dSAkwU25QIvY0GIlwsN6KV1uhxoaN
smlHPotAe+6DEVnYZHcKTMjL0PlRGeZYvrjyPDTQoZqF3JqdudFKAUWiAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGzwTdde6hFK2+RKlczPVv8ei41MB8GA1UdIwQY
MBaAFNMeSozSiYxd5tZiXxDEsuhfRh94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMt
OTEyN2U4MTA1Njk5LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMtOTEyN2U4MTA1Njk5
LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV+aZwJI
ACV8LIbgjwyuhlddvWc0cVqXLXsnptqsfxEGSgURYlqOwj+ysQXkrjxA61NKU2JA
rG8Nq1k1AAo3B25g38n8bdhkaD6GC4wLqitXTYFQUKczVqG0VZz3yoB4R7m0JThZ
g7Xrp6U3mdro/q4AY8WNG1RsInhaJkZ/yuQ8Sj2x1XQbL6Oa70nesuJBBQPhF+/p
Tqz1D2xUUUarejRmVYy1p96RHE+1zFXLVKJQa2i0poN+A0I+rLHj6VW6KEKEWyLw
dpP3qCtgaHCskGpKakvM6G+Jb0WWPPSlehQstGdiFd6M1fmluTXZBQEAqzcMMRUo
6vKgVihxMdA1Ow==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:15 2026 by rpki-client