Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: 2YCN3BMNaGDSUcOHZSUMlLj5C3I7CTDE/KY15+VXJQU=
Subject key identifier: 98:D7:0A:03:5D:7E:1F:7D:1E:8E:C0:88:A8:0C:B5:7C:03:21:63:AD
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 01A001A606C862D293152BD8CF8A4398F667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 1042
Signing time: Fri 14 Aug 2026 19:00:52 +0000
Manifest this update: Fri 14 Aug 2026 19:00:52 +0000
Manifest next update: Sat 15 Aug 2026 19:00:52 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: x+vDGhx3VkuSVPWorx0cLWoTdnrodllKoApx4SDpP5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:06:c8:62:d2:93:15:2b:d8:cf:8a:43:98:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Aug 14 19:00:52 2026 GMT
Not After : Aug 15 19:00:52 2026 GMT
Subject: CN=98d70a035d7e1f7d1e8ec088a80cb57c032163ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:6e:c1:85:e6:27:a1:f7:a7:39:82:ef:b2:
82:15:cc:3e:32:99:af:55:14:c3:11:35:f6:de:20:
7f:7d:e1:5a:72:0a:8c:9d:11:25:d2:ed:d6:10:5d:
8c:e6:00:4c:1b:37:4c:fb:19:eb:a7:08:b4:25:fe:
f7:5d:80:a8:fd:dd:84:8f:90:48:16:7d:e2:33:e8:
dd:84:e8:67:70:c8:4f:c7:92:c3:05:85:12:70:ef:
8e:3b:79:23:cd:58:cb:36:32:10:c0:55:80:1a:3d:
95:b7:b6:4d:0e:4b:6c:86:80:e5:1c:d4:ff:60:76:
42:33:86:50:4b:64:e3:c8:62:8b:13:a6:f9:b4:de:
b0:e5:15:ee:4d:25:1c:a3:44:53:88:ed:af:ff:32:
1f:17:da:5e:b6:96:fb:44:db:88:fe:53:62:ce:e6:
f6:7d:41:c1:4b:72:c0:f6:fe:52:fe:6d:34:78:c3:
2d:ca:29:72:d4:ad:14:f1:46:fd:bc:a9:61:a7:07:
7a:38:d7:91:43:e4:c3:7b:aa:7c:da:f7:2c:63:af:
be:10:42:ce:33:f2:01:b7:02:c2:83:78:93:f9:b4:
f1:a6:3f:5b:38:70:72:93:54:c8:b1:af:8e:72:70:
63:57:aa:9e:00:36:d8:56:4e:18:c6:36:e5:3c:90:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:0A:03:5D:7E:1F:7D:1E:8E:C0:88:A8:0C:B5:7C:03:21:63:AD
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d2:02:f6:4a:fa:06:ff:28:3c:3c:b0:b0:8a:0c:8c:e1:1d:
15:b9:57:fd:32:bd:65:3d:80:c0:f0:47:07:53:ea:7d:8f:1d:
cf:c6:ae:cf:bb:5a:25:ab:4a:6c:7d:65:e6:7a:d2:cf:31:51:
2f:a8:76:dd:19:9d:70:90:a9:1d:ea:2c:66:36:4e:98:74:45:
f5:23:50:1b:ac:d4:80:28:7d:49:d8:dc:ca:83:60:0b:24:41:
d4:ca:6d:15:0f:f4:fa:e7:4f:4d:7e:88:1d:e8:97:5e:9e:83:
1d:b5:7d:80:95:72:3a:79:4e:91:8e:29:14:92:0f:58:90:4d:
06:6a:82:4c:d5:8d:30:05:d9:80:75:e2:b9:b0:2a:7a:5b:cd:
aa:9e:cc:0f:d5:e5:92:70:50:3b:a3:fe:86:81:46:3b:6d:5a:
14:cd:f5:99:d9:44:5b:4e:35:ea:b4:a3:6c:93:30:95:eb:96:
11:3f:bd:d6:91:6a:32:b7:d2:e0:18:6d:9c:ce:65:65:44:bc:
cd:cb:ec:46:d1:2b:ef:d2:df:46:1c:fb:b7:32:33:9a:e9:2d:
3a:eb:6d:94:4f:09:54:2c:3d:ed:16:3a:52:f8:cd:d3:22:10:
fa:80:12:ae:6c:5b:40:08:f4:b9:b1:5e:a7:44:79:57:0f:b5:
6d:44:70:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpgbIYtKTFSvYz4pDmPZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDQ0MzFiNTU1NDc3YzE5YTNmNGM1Y2I2ZDEwNzM2NThk
NWIzZTMwHhcNMjYwODE0MTkwMDUyWhcNMjYwODE1MTkwMDUyWjAzMTEwLwYDVQQD
Eyg5OGQ3MGEwMzVkN2UxZjdkMWU4ZWMwODhhODBjYjU3YzAzMjE2M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaBuwYXmJ6H3pzmC77KCFcw+Mpmv
VRTDETX23iB/feFacgqMnREl0u3WEF2M5gBMGzdM+xnrpwi0Jf73XYCo/d2Ej5BI
Fn3iM+jdhOhncMhPx5LDBYUScO+OO3kjzVjLNjIQwFWAGj2Vt7ZNDktshoDlHNT/
YHZCM4ZQS2TjyGKLE6b5tN6w5RXuTSUco0RTiO2v/zIfF9petpb7RNuI/lNizub2
fUHBS3LA9v5S/m00eMMtyily1K0U8Ub9vKlhpwd6ONeRQ+TDe6p82vcsY6++EELO
M/IBtwLCg3iT+bTxpj9bOHByk1TIsa+OcnBjV6qeADbYVk4YxjblPJA2xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjXCgNdfh99Ho7AiKgMtXwDIWOtMB8GA1UdIwQY
MBaAFOYEQxtVVHfBmj9MXLbRBzZY1bPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQt
MjgzZWM0MmMyYzk0LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQtMjgzZWM0MmMyYzk0
LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNIC9kr6
Bv8oPDywsIoMjOEdFblX/TK9ZT2AwPBHB1PqfY8dz8auz7taJatKbH1l5nrSzzFR
L6h23RmdcJCpHeosZjZOmHRF9SNQG6zUgCh9SdjcyoNgCyRB1MptFQ/0+udPTX6I
HeiXXp6DHbV9gJVyOnlOkY4pFJIPWJBNBmqCTNWNMAXZgHXiubAqelvNqp7MD9Xl
knBQO6P+hoFGO21aFM31mdlEW0416rSjbJMwleuWET+91pFqMrfS4BhtnM5lZUS8
zcvsRtEr79LfRhz7tzIzmuktOuttlE8JVCw97RY6UvjN0yIQ+oASrmxbQAj0ubFe
p0R5Vw+1bURwEw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:06:36 2026 by rpki-client