Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: KDdUmyGW9aepXWB//qvRLqEKoTIVSb12bulysGBugco=
Subject key identifier: 81:E8:09:9B:C2:22:D7:B6:32:DF:2D:B2:D9:22:30:F1:6C:2A:E1:69
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019DCDBD76F7D0CCB524307E07A0481E6734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 05C0
Signing time: Mon 27 Apr 2026 07:00:39 +0000
Manifest this update: Mon 27 Apr 2026 07:00:39 +0000
Manifest next update: Tue 28 Apr 2026 07:00:39 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: ctPMBogRsf9kEdYimpVqY104iHLnzC2KJS8/QIwZcYU=)
2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:76:f7:d0:cc:b5:24:30:7e:07:a0:48:1e:67:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Apr 27 07:00:39 2026 GMT
Not After : Apr 28 07:00:39 2026 GMT
Subject: CN=81e8099bc222d7b632df2db2d92230f16c2ae169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:f9:75:39:6c:e4:ca:c6:8f:1b:18:af:12:
40:07:71:72:30:93:e3:ef:af:37:66:6e:01:40:99:
2b:35:a4:56:2c:63:19:42:29:55:1b:4a:a1:fa:5d:
df:07:d5:29:a6:1d:89:ba:9d:9a:1b:5d:81:8d:a7:
86:eb:d6:c4:06:30:7f:f4:8d:97:d4:b2:c6:c8:77:
92:1c:d4:62:1a:0c:dc:a1:20:5c:f0:56:fa:90:7e:
b9:d3:f4:f3:68:cd:52:f7:fc:fb:0f:db:5c:16:d7:
fb:b6:61:92:07:f3:be:e6:52:a8:74:d2:88:0e:51:
29:0e:f4:95:3c:26:7d:6f:ad:fe:2c:2a:1b:fd:85:
8f:47:88:61:58:bc:18:c4:8d:a7:92:91:9c:40:e1:
00:da:84:8d:54:ef:a8:c9:e8:7e:c6:00:a1:0f:92:
8f:58:11:79:91:59:17:a2:61:16:6b:df:2e:6f:60:
26:8d:82:b8:2a:22:07:44:76:52:c0:b9:c7:b6:38:
33:4c:4a:70:d8:b2:81:ce:35:92:24:06:a0:6a:a0:
e9:e6:8b:00:a5:78:c1:98:04:c1:00:da:fc:cb:a6:
4a:24:1f:49:fc:23:7e:c3:f1:8e:12:92:79:71:b6:
2e:7f:4b:f0:35:c3:7b:2f:c9:61:d6:a8:32:01:91:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E8:09:9B:C2:22:D7:B6:32:DF:2D:B2:D9:22:30:F1:6C:2A:E1:69
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c0:9c:b6:25:4d:7a:d1:25:bd:a7:5a:81:b9:4d:f3:c6:34:
2d:ef:83:94:95:64:2b:91:4d:1d:cf:3d:d4:23:e7:cf:69:7a:
06:c6:93:3c:0f:ac:3e:cb:20:b2:79:c3:22:85:d3:6e:ff:b7:
f7:25:88:5f:59:16:87:8d:c8:23:35:db:cb:1a:d8:ff:bc:9e:
7a:15:fd:dd:c9:ce:6f:68:90:b6:c7:f9:56:d9:93:bc:a2:6a:
32:87:c4:92:52:db:4d:87:32:81:c6:08:19:96:30:ec:7c:7f:
1d:10:7a:27:9b:b6:ce:49:72:7e:07:13:47:15:38:0a:e9:c3:
52:57:5a:08:2c:8f:01:69:d5:e7:ed:c9:4f:a5:db:f5:8b:98:
6a:82:9a:db:8f:e9:74:9d:ab:aa:76:c4:78:14:cc:36:9d:f6:
f5:23:36:22:43:63:02:c9:3c:76:dd:70:a1:02:7f:24:3c:60:
f3:57:bb:a4:12:3d:05:b4:fd:48:f3:6a:3d:e5:b1:3b:ec:a6:
1a:c7:97:81:db:ad:0e:0e:74:81:15:03:d7:4d:c9:8c:77:31:
26:ba:89:21:02:1b:90:8d:60:b0:e1:36:2c:ef:60:01:6c:71:
f8:e2:e0:bf:a1:58:28:93:e1:00:c6:93:93:5d:90:2c:35:5c:
b4:9b:62:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvXb30My1JDB+B6BIHmc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5
YmQ3MTAwHhcNMjYwNDI3MDcwMDM5WhcNMjYwNDI4MDcwMDM5WjAzMTEwLwYDVQQD
Eyg4MWU4MDk5YmMyMjJkN2I2MzJkZjJkYjJkOTIyMzBmMTZjMmFlMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTr5dTls5MrGjxsYrxJAB3FyMJPj
7683Zm4BQJkrNaRWLGMZQilVG0qh+l3fB9Upph2Jup2aG12BjaeG69bEBjB/9I2X
1LLGyHeSHNRiGgzcoSBc8Fb6kH650/TzaM1S9/z7D9tcFtf7tmGSB/O+5lKodNKI
DlEpDvSVPCZ9b63+LCob/YWPR4hhWLwYxI2nkpGcQOEA2oSNVO+oyeh+xgChD5KP
WBF5kVkXomEWa98ub2AmjYK4KiIHRHZSwLnHtjgzTEpw2LKBzjWSJAagaqDp5osA
pXjBmATBANr8y6ZKJB9J/CN+w/GOEpJ5cbYuf0vwNcN7L8lh1qgyAZFVrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHoCZvCIte2Mt8tstkiMPFsKuFpMB8GA1UdIwQY
MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct
YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1
LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8CctiVN
etElvadagblN88Y0Le+DlJVkK5FNHc891CPnz2l6BsaTPA+sPssgsnnDIoXTbv+3
9yWIX1kWh43IIzXbyxrY/7yeehX93cnOb2iQtsf5VtmTvKJqMofEklLbTYcygcYI
GZYw7Hx/HRB6J5u2zklyfgcTRxU4CunDUldaCCyPAWnV5+3JT6Xb9YuYaoKa24/p
dJ2rqnbEeBTMNp329SM2IkNjAsk8dt1woQJ/JDxg81e7pBI9BbT9SPNqPeWxO+ym
GseXgdutDg50gRUD103JjHcxJrqJIQIbkI1gsOE2LO9gAWxx+OLgv6FYKJPhAMaT
k12QLDVctJtiNg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:09 2026 by rpki-client