Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: JGXdTpuWojSpjkulD83C2Il4cTxe7mIqGlA1T+kNJDo=
Subject key identifier: 77:19:03:D1:C8:7F:16:0D:31:CB:92:1C:0E:4E:DF:D5:D0:73:D5:90
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 01A1404BB8724740B1A569F3F7DA371FF439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 16:01:06 +0000
Manifest this update: Thu 15 Oct 2026 16:01:06 +0000
Manifest next update: Fri 16 Oct 2026 16:01:06 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: 30NosRT58XJkY6+9I9dwrRUBFGegmAmenepliajVK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4b:b8:72:47:40:b1:a5:69:f3:f7:da:37:1f:f4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Oct 15 16:01:06 2026 GMT
Not After : Oct 16 16:01:06 2026 GMT
Subject: CN=771903d1c87f160d31cb921c0e4edfd5d073d590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:85:c8:55:65:12:f4:0c:2d:c3:04:11:72:
2a:14:c9:75:aa:18:31:cd:18:7f:c5:eb:5c:4c:82:
30:f5:83:0e:9d:fb:59:88:87:57:67:c1:f7:c1:f8:
01:6d:14:b5:fb:56:11:81:2e:d7:64:b5:86:53:1f:
ef:95:fd:aa:2a:c9:d4:4e:00:91:b8:bd:99:84:3c:
0f:0b:ae:79:be:bf:05:35:ca:b5:68:85:8f:ca:43:
33:99:4f:ee:27:94:6a:1a:6c:73:ba:39:02:b0:7a:
39:38:af:bf:5d:a5:09:51:4b:d7:1a:f7:af:2b:c7:
24:38:44:f7:80:ed:ae:c0:1d:ad:f9:28:4e:3e:4f:
c5:0a:3a:ae:42:33:d2:b3:5e:64:f1:ef:a6:3b:13:
1e:9a:37:75:48:42:db:e3:8d:80:44:6b:9a:3c:1a:
d2:1e:a6:c0:e4:41:87:9c:0a:e9:bb:ec:62:b5:93:
f8:4b:6d:b5:74:5d:e1:c1:27:61:04:55:db:5a:35:
a3:96:cc:48:69:03:e4:45:10:b9:e3:c8:43:dd:8c:
89:ea:57:87:69:e4:51:c9:03:a9:c8:82:ad:5f:5b:
30:73:5b:61:c6:76:0e:b4:1b:75:c9:76:ad:de:84:
ab:80:0b:4a:60:5f:ef:93:b3:25:7b:6d:07:79:2d:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:03:D1:C8:7F:16:0D:31:CB:92:1C:0E:4E:DF:D5:D0:73:D5:90
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5c:44:7d:4b:3d:d3:11:39:59:7a:25:42:91:09:24:c5:58:
5f:64:91:eb:e5:48:bf:35:a1:91:60:60:7f:a5:39:16:2d:34:
a3:f5:74:5a:3a:aa:27:ef:77:5b:a3:66:fd:3d:b3:93:e2:05:
1b:f7:2c:7f:6b:30:64:43:56:40:17:96:80:0e:d8:ad:db:b3:
e0:61:d7:e5:02:66:72:2c:36:72:10:cd:6c:5a:38:21:e5:63:
34:92:2b:66:cd:c9:ca:14:70:ee:c5:80:b6:f4:85:c1:f3:f4:
24:09:f5:c9:ac:97:45:af:28:e7:ec:ba:55:90:7c:4b:16:b4:
6d:53:65:d8:f0:45:43:aa:68:bf:cd:09:11:7c:48:9c:52:7a:
f9:10:c4:a9:41:c9:df:4e:c8:7d:e3:83:37:0e:38:f4:e5:2f:
c9:7e:84:77:75:fe:6c:3b:58:dd:e9:61:bf:00:b2:09:b1:d7:
c8:6d:21:b5:aa:db:76:77:85:d9:22:1d:5e:12:af:1c:5b:ef:
5d:eb:32:82:33:c6:8b:fb:00:23:18:c3:ed:1e:53:de:fe:fc:
67:7b:6e:76:05:ca:c6:80:4a:f5:68:23:d4:44:bf:12:3a:70:
f1:6c:da:49:70:70:34:34:ed:50:a5:81:c0:2c:fc:2d:54:82:
70:b3:10:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAS7hyR0CxpWnz99o3H/Q5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzczMWVhODU3YjkwM2FhNDBhOGU1ZmQ4ZDg4NDQ2NTA1
YjUyMzMwHhcNMjYxMDE1MTYwMTA2WhcNMjYxMDE2MTYwMTA2WjAzMTEwLwYDVQQD
Eyg3NzE5MDNkMWM4N2YxNjBkMzFjYjkyMWMwZTRlZGZkNWQwNzNkNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FiFyFVlEvQMLcMEEXIqFMl1qhgx
zRh/xetcTIIw9YMOnftZiIdXZ8H3wfgBbRS1+1YRgS7XZLWGUx/vlf2qKsnUTgCR
uL2ZhDwPC655vr8FNcq1aIWPykMzmU/uJ5RqGmxzujkCsHo5OK+/XaUJUUvXGvev
K8ckOET3gO2uwB2t+ShOPk/FCjquQjPSs15k8e+mOxMemjd1SELb442ARGuaPBrS
HqbA5EGHnArpu+xitZP4S221dF3hwSdhBFXbWjWjlsxIaQPkRRC548hD3YyJ6leH
aeRRyQOpyIKtX1swc1thxnYOtBt1yXat3oSrgAtKYF/vk7Mle20HeS1RgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcZA9HIfxYNMcuSHA5O39XQc9WQMB8GA1UdIwQY
MBaAFOV3MeqFe5A6pAqOX9jYhEZQW1IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUt
ZjBiYjJlMTVmNmQwLzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUtZjBiYjJlMTVmNmQw
LzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVxEfUs9
0xE5WXolQpEJJMVYX2SR6+VIvzWhkWBgf6U5Fi00o/V0WjqqJ+93W6Nm/T2zk+IF
G/csf2swZENWQBeWgA7Yrduz4GHX5QJmciw2chDNbFo4IeVjNJIrZs3JyhRw7sWA
tvSFwfP0JAn1yayXRa8o5+y6VZB8Sxa0bVNl2PBFQ6pov80JEXxInFJ6+RDEqUHJ
307IfeODNw449OUvyX6Ed3X+bDtY3elhvwCyCbHXyG0htarbdneF2SIdXhKvHFvv
XesygjPGi/sAIxjD7R5T3v78Z3tudgXKxoBK9Wgj1ES/Ejpw8WzaSXBwNDTtUKWB
wCz8LVSCcLMQcQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:11:26 2026 by rpki-client