Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: uwXM5QFdVsx5uvbYUhPSLUlWxy8MErq/zJSryP0sUF0=
Subject key identifier: 9F:F9:3A:A8:C5:E4:2C:1B:F7:F4:98:2C:57:0B:12:FD:57:4A:7C:9A
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 01A000CA00B8B638F97B8367BA16D899E030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 15:00:33 +0000
Manifest this update: Fri 14 Aug 2026 15:00:33 +0000
Manifest next update: Sat 15 Aug 2026 15:00:33 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: OANkLggRLfFQPSC24B/EIoF+w8OayHDDVsNrWDzD4n8=)
2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:00:b8:b6:38:f9:7b:83:67:ba:16:d8:99:e0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Aug 14 15:00:33 2026 GMT
Not After : Aug 15 15:00:33 2026 GMT
Subject: CN=9ff93aa8c5e42c1bf7f4982c570b12fd574a7c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:71:c2:fa:10:cc:52:b3:56:a7:6f:20:f0:
ea:c9:85:81:d5:5a:5c:33:5f:d1:25:e1:5d:9c:fa:
08:76:b5:be:88:c2:f0:2d:b7:87:42:dc:a9:c8:22:
71:3e:9f:08:c0:04:d7:bd:bc:a6:0c:af:a6:73:20:
a0:57:db:59:4a:1f:04:15:88:4a:68:b4:bc:59:90:
d9:cc:12:ac:b6:63:65:44:6b:ec:5e:f5:99:5e:5c:
c9:9e:03:a6:26:60:46:36:7d:38:86:64:7c:93:b7:
1c:de:b8:66:6b:19:fe:23:e6:e0:32:56:62:5f:40:
6d:ee:6e:c5:9e:93:5e:27:3d:08:30:4f:c4:ce:70:
f8:b1:39:33:50:ee:0f:bb:a7:a9:cc:58:ff:28:12:
b6:85:c7:8f:0e:a8:f7:ea:df:ac:90:d1:4e:69:cc:
53:7a:99:76:e4:fb:7f:c3:a1:3c:c8:25:1a:cf:ac:
4f:60:d0:83:fe:5f:64:13:ff:b2:92:4e:5d:2b:19:
21:e1:6a:7a:32:ab:96:23:f3:d3:e7:d4:a1:da:28:
f8:b5:74:7c:8e:65:7d:9b:36:a0:34:4d:f3:9f:87:
68:1e:a5:44:b9:60:46:a8:fc:d8:e7:67:09:49:54:
f9:7a:0f:c7:f8:a8:2e:45:23:aa:a3:a5:7e:4a:d5:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:3A:A8:C5:E4:2C:1B:F7:F4:98:2C:57:0B:12:FD:57:4A:7C:9A
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3d:3a:ae:8d:2b:ca:34:5c:68:a0:f4:92:06:6f:a5:c0:50:
98:ef:18:4e:ea:9a:88:b5:96:4d:8f:00:33:5e:31:a2:ab:64:
ee:b8:db:68:ea:6f:76:f9:a3:b3:0f:d9:f9:2f:e9:43:5e:f0:
c9:b7:02:8f:ad:53:c1:e2:30:5e:9c:38:93:68:02:ff:9f:82:
47:b2:61:85:43:7d:a9:c1:c6:5a:fe:9b:d8:16:19:24:99:e8:
38:12:4d:23:a5:06:bd:d3:4a:96:08:02:a2:92:a5:f3:cb:1e:
de:ac:9d:19:61:fa:09:39:3e:25:65:f4:0f:e1:d5:03:d5:9a:
d1:b1:87:24:45:0d:29:73:2a:78:56:92:7a:be:aa:48:c4:42:
73:09:10:32:ba:75:6f:f7:93:26:71:86:04:81:79:24:76:68:
cb:e5:7a:5f:4e:c9:88:52:15:96:19:6d:68:18:aa:de:98:4f:
64:6a:74:a7:9a:16:2e:ec:fb:96:66:f5:84:f0:5a:9a:d7:f1:
4f:06:f0:f0:1c:c6:0e:63:38:e1:da:d2:60:91:30:3c:e3:14:
1c:d8:b4:7f:2b:72:dd:1f:39:dd:ad:2d:6f:ed:21:b9:59:f9:
5d:f1:33:73:e7:5b:26:07:fd:bd:46:58:99:62:a3:7a:5c:a4:
a7:fa:8c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAygC4tjj5e4NnuhbYmeAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTVjNGM5OWQ2MTMxMDQ5OTgyYWY5YWQ5Yjg2NjAyYjI5
MjliYjgwHhcNMjYwODE0MTUwMDMzWhcNMjYwODE1MTUwMDMzWjAzMTEwLwYDVQQD
Eyg5ZmY5M2FhOGM1ZTQyYzFiZjdmNDk4MmM1NzBiMTJmZDU3NGE3YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubNxwvoQzFKzVqdvIPDqyYWB1Vpc
M1/RJeFdnPoIdrW+iMLwLbeHQtypyCJxPp8IwATXvbymDK+mcyCgV9tZSh8EFYhK
aLS8WZDZzBKstmNlRGvsXvWZXlzJngOmJmBGNn04hmR8k7cc3rhmaxn+I+bgMlZi
X0Bt7m7FnpNeJz0IME/EznD4sTkzUO4Pu6epzFj/KBK2hcePDqj36t+skNFOacxT
epl25Pt/w6E8yCUaz6xPYNCD/l9kE/+ykk5dKxkh4Wp6MquWI/PT59Sh2ij4tXR8
jmV9mzagNE3zn4doHqVEuWBGqPzY52cJSVT5eg/H+KguRSOqo6V+StUj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/5OqjF5Cwb9/SYLFcLEv1XSnyaMB8GA1UdIwQY
MBaAFOflxMmdYTEEmYKvmtm4ZgKykpu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMt
YTFlNDg3N2NlZTQ4LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMtYTFlNDg3N2NlZTQ4
LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj06ro0r
yjRcaKD0kgZvpcBQmO8YTuqaiLWWTY8AM14xoqtk7rjbaOpvdvmjsw/Z+S/pQ17w
ybcCj61TweIwXpw4k2gC/5+CR7JhhUN9qcHGWv6b2BYZJJnoOBJNI6UGvdNKlggC
opKl88se3qydGWH6CTk+JWX0D+HVA9Wa0bGHJEUNKXMqeFaSer6qSMRCcwkQMrp1
b/eTJnGGBIF5JHZoy+V6X07JiFIVlhltaBiq3phPZGp0p5oWLuz7lmb1hPBamtfx
Twbw8BzGDmM44drSYJEwPOMUHNi0fyty3R853a0tb+0huVn5XfEzc+dbJgf9vUZY
mWKjelykp/qM/Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:37 2026 by rpki-client