Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: q4cDYIvH3CfqQjmgGLW66N6fEkHMR6ud+tc/GNppX4M=
Subject key identifier: 54:D2:D9:2A:3D:9D:AC:6F:16:D3:4D:BC:8B:66:9D:8A:B4:37:29:BD
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 01A001A681396265C9E1E6B3882A6D243C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 19:01:24 +0000
Manifest this update: Fri 14 Aug 2026 19:01:24 +0000
Manifest next update: Sat 15 Aug 2026 19:01:24 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: 209BbOzHzQotvM66O+SukH0uwLsEytKkMugKjUYJ8UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:81:39:62:65:c9:e1:e6:b3:88:2a:6d:24:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Aug 14 19:01:24 2026 GMT
Not After : Aug 15 19:01:24 2026 GMT
Subject: CN=54d2d92a3d9dac6f16d34dbc8b669d8ab43729bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:29:81:11:53:6b:0f:ba:a1:89:d3:9f:af:
6f:d3:34:ef:6f:23:7c:83:9e:d2:95:50:03:9a:07:
76:ce:d7:4e:22:c9:9f:fd:ea:5d:a2:d2:56:95:a6:
d6:89:2e:a9:eb:13:ee:a7:7a:4c:08:24:43:7d:94:
44:29:07:55:cb:6b:5d:fc:29:27:8d:48:93:af:92:
e3:6e:19:79:1e:a2:46:18:a2:6d:47:7c:01:66:de:
6f:d4:ed:5f:25:f3:51:48:c1:46:42:25:e9:47:28:
c3:ab:4d:67:fd:9a:a1:ab:f1:ba:27:3d:e9:ac:6a:
87:23:44:8b:51:56:a3:97:b2:ac:21:e3:cc:09:e0:
ad:18:33:5d:1b:b3:e5:06:8f:d3:03:6b:7e:72:db:
13:cf:a3:4d:ad:ba:66:b3:01:bd:c0:8a:3b:0a:52:
66:84:6d:9f:34:07:90:01:49:b9:e1:67:e1:de:2b:
05:8d:15:33:f5:1c:39:22:8e:4f:8d:b2:ee:89:1c:
83:27:34:59:ac:40:29:54:17:69:36:b6:46:02:b6:
fb:2d:aa:35:4e:6c:5c:29:88:1a:b2:9f:4b:a5:d3:
0a:9a:9d:af:e2:02:0d:42:51:39:66:93:a1:e8:8c:
43:d5:50:2f:48:2a:a5:25:a2:0a:d3:eb:17:04:9b:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D2:D9:2A:3D:9D:AC:6F:16:D3:4D:BC:8B:66:9D:8A:B4:37:29:BD
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:62:c4:bd:f1:50:bc:86:6d:50:14:5f:31:29:0a:61:cc:4c:
77:42:0c:77:5f:33:b2:59:66:a4:63:d8:e9:92:91:da:03:70:
43:45:fd:66:12:c7:3c:9c:37:63:64:7d:60:59:60:d3:0e:8d:
b7:82:6c:15:4a:8d:7b:16:de:5e:95:5b:65:ac:74:5a:0a:0e:
13:b3:b8:fe:63:5e:28:81:9a:d9:5f:23:58:88:71:4c:b3:34:
49:78:6f:66:f2:08:ec:53:32:50:5b:6c:8b:50:a2:ff:3f:b3:
97:1e:b7:be:2b:4c:2b:0c:8e:df:66:79:ba:89:df:32:ea:82:
e2:94:4a:b7:dd:31:f8:99:4b:32:48:cf:fa:88:7f:40:80:12:
74:83:54:4d:27:c3:ef:68:10:97:41:28:14:02:56:c9:fc:e0:
d1:7a:8a:7d:26:94:cd:d1:89:c7:42:9b:c3:27:b5:2b:39:d5:
ca:94:98:f7:bd:54:18:24:46:00:bb:7f:e4:1a:24:6b:fe:9a:
a2:f2:d8:ed:d3:7e:b5:d9:d1:92:04:6d:5f:9f:96:f1:28:91:
c8:6e:81:0c:7e:56:7d:83:45:98:68:36:04:ad:2b:2c:32:50:
08:ad:f4:0f:d6:7a:74:a9:0d:81:19:ea:b9:7d:97:39:cc:4f:
6d:63:23:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpoE5YmXJ4eaziCptJDx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzczMWVhODU3YjkwM2FhNDBhOGU1ZmQ4ZDg4NDQ2NTA1
YjUyMzMwHhcNMjYwODE0MTkwMTI0WhcNMjYwODE1MTkwMTI0WjAzMTEwLwYDVQQD
Eyg1NGQyZDkyYTNkOWRhYzZmMTZkMzRkYmM4YjY2OWQ4YWI0MzcyOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZApgRFTaw+6oYnTn69v0zTvbyN8
g57SlVADmgd2ztdOIsmf/epdotJWlabWiS6p6xPup3pMCCRDfZREKQdVy2td/Ckn
jUiTr5Ljbhl5HqJGGKJtR3wBZt5v1O1fJfNRSMFGQiXpRyjDq01n/Zqhq/G6Jz3p
rGqHI0SLUVajl7KsIePMCeCtGDNdG7PlBo/TA2t+ctsTz6NNrbpmswG9wIo7ClJm
hG2fNAeQAUm54Wfh3isFjRUz9Rw5Io5PjbLuiRyDJzRZrEApVBdpNrZGArb7Lao1
TmxcKYgasp9LpdMKmp2v4gINQlE5ZpOh6IxD1VAvSCqlJaIK0+sXBJt6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTS2So9naxvFtNNvItmnYq0Nym9MB8GA1UdIwQY
MBaAFOV3MeqFe5A6pAqOX9jYhEZQW1IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUt
ZjBiYjJlMTVmNmQwLzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUtZjBiYjJlMTVmNmQw
LzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmLEvfFQ
vIZtUBRfMSkKYcxMd0IMd18zsllmpGPY6ZKR2gNwQ0X9ZhLHPJw3Y2R9YFlg0w6N
t4JsFUqNexbeXpVbZax0WgoOE7O4/mNeKIGa2V8jWIhxTLM0SXhvZvII7FMyUFts
i1Ci/z+zlx63vitMKwyO32Z5uonfMuqC4pRKt90x+JlLMkjP+oh/QIASdINUTSfD
72gQl0EoFAJWyfzg0XqKfSaUzdGJx0Kbwye1KznVypSY971UGCRGALt/5Boka/6a
ovLY7dN+tdnRkgRtX5+W8SiRyG6BDH5WfYNFmGg2BK0rLDJQCK30D9Z6dKkNgRnq
uX2XOcxPbWMjQg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:05 2026 by rpki-client