
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: gWB8ZFokIKR1U4toBKkPmSziHXgdVp8rKoBoPxMcM3g=
Subject key identifier: 86:A7:A4:57:9F:0C:5F:39:60:9E:CA:88:FE:9A:18:F9:43:CE:79:DE
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 019F867B4D887C67A15CA45280F376E8B354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0BD0
Signing time: Tue 21 Jul 2026 21:00:55 +0000
Manifest this update: Tue 21 Jul 2026 21:00:55 +0000
Manifest next update: Wed 22 Jul 2026 21:00:55 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: qHrJ9scm+W9ucdL4jSTrA0ADIEoecKFFBzNMaz1Re3g=)
2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7b:4d:88:7c:67:a1:5c:a4:52:80:f3:76:e8:b3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Jul 21 21:00:55 2026 GMT
Not After : Jul 22 21:00:55 2026 GMT
Subject: CN=86a7a4579f0c5f39609eca88fe9a18f943ce79de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:68:da:7e:4d:4d:e9:b8:5d:53:12:33:4f:
79:f5:a4:80:be:27:36:a5:0c:38:c9:3a:53:eb:fb:
7f:63:91:d4:d6:5f:fe:31:06:c8:f2:04:31:16:75:
95:90:8f:4b:dd:37:51:43:18:26:ab:c7:7c:1a:aa:
47:b6:00:0a:5d:69:8f:85:9b:15:8f:6e:4e:ca:31:
14:4e:c6:bd:d5:9d:57:0f:61:ee:72:77:6f:7c:67:
a8:85:c3:5f:2d:2a:10:f5:3a:26:3d:36:ec:28:13:
9d:24:42:da:7a:5c:3a:13:68:dc:00:6e:9c:a3:58:
24:ed:ca:2e:6e:e8:dc:f4:be:8d:ae:bd:51:86:51:
f8:26:9b:53:75:28:df:9a:6a:d1:0c:4c:25:45:d5:
c4:c3:9f:d3:85:c7:a2:7a:51:22:ce:7c:d0:10:af:
f9:09:c1:3b:1e:7b:8f:62:81:f4:a5:29:da:79:bb:
9a:a2:d2:67:31:6a:f6:d3:8a:53:04:04:4f:38:f9:
99:34:04:5d:10:0a:2e:87:6e:2f:3a:9f:b2:6a:3c:
bd:fb:9c:ed:df:96:74:88:e6:ee:ca:7a:c2:6c:be:
88:e4:48:09:e7:96:54:85:8c:a5:20:da:d5:83:8d:
d7:e5:37:d6:b6:a5:4c:cf:95:d0:58:21:4b:b8:fa:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:A4:57:9F:0C:5F:39:60:9E:CA:88:FE:9A:18:F9:43:CE:79:DE
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:72:3e:04:06:ea:fb:fe:3b:6f:ab:1c:b3:ef:59:43:aa:91:
c3:66:09:dd:3f:e0:05:6e:29:95:a8:a4:30:bf:55:50:7d:32:
16:72:c3:7d:ec:24:a2:eb:b1:b1:07:10:63:b2:59:83:62:e6:
be:70:58:cc:03:0e:30:c3:67:d0:97:94:28:cd:67:41:99:28:
e2:a8:36:27:d3:c3:22:d4:68:3c:be:ee:90:d9:e7:49:12:9a:
f4:6e:2c:72:c6:11:4d:af:79:4c:4d:85:07:8c:59:c1:f1:1b:
72:1d:da:60:1f:35:65:89:41:3e:92:6c:06:95:d9:c4:ac:50:
2b:87:8f:a4:e4:e9:3d:70:9e:3d:6f:de:9e:fe:a9:6d:68:67:
7b:f3:74:7b:be:15:46:fa:f4:22:56:72:d8:c2:e9:57:af:cc:
ad:cf:d5:bf:0e:24:fe:6e:09:8d:8c:da:01:d0:f0:e6:0e:11:
97:08:6a:ab:c6:33:a3:48:72:64:79:1c:48:e9:0f:c9:0f:8b:
c1:c8:67:f6:bd:b2:f4:91:c5:dc:fb:ff:43:d2:e4:d6:3b:2b:
ca:40:c1:72:9e:1a:9d:3d:d6:8c:d2:93:19:15:77:29:59:16:
6e:ff:79:95:c3:02:23:9a:b6:6d:8a:cc:84:e0:66:c0:66:f7:
e4:22:80:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ge02IfGehXKRSgPN26LNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YWFmNzZkMjdiYTgxMmUwZDVjZTIzMDVmMTdjNTMxODhj
MjU4MGMwHhcNMjYwNzIxMjEwMDU1WhcNMjYwNzIyMjEwMDU1WjAzMTEwLwYDVQQD
Eyg4NmE3YTQ1NzlmMGM1ZjM5NjA5ZWNhODhmZTlhMThmOTQzY2U3OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3who2n5NTem4XVMSM0959aSAvic2
pQw4yTpT6/t/Y5HU1l/+MQbI8gQxFnWVkI9L3TdRQxgmq8d8GqpHtgAKXWmPhZsV
j25OyjEUTsa91Z1XD2HucndvfGeohcNfLSoQ9TomPTbsKBOdJELaelw6E2jcAG6c
o1gk7coubujc9L6Nrr1RhlH4JptTdSjfmmrRDEwlRdXEw5/ThceielEiznzQEK/5
CcE7HnuPYoH0pSnaebuaotJnMWr204pTBARPOPmZNARdEAouh24vOp+yajy9+5zt
35Z0iObuynrCbL6I5EgJ55ZUhYylINrVg43X5TfWtqVMz5XQWCFLuPrPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIanpFefDF85YJ7KiP6aGPlDznneMB8GA1UdIwQY
MBaAFOWq920nuoEuDVziMF8XxTGIwlgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUt
ZmQxNTJhNmEwNTg3LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUtZmQxNTJhNmEwNTg3
LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnI+BAbq
+/47b6scs+9ZQ6qRw2YJ3T/gBW4plaikML9VUH0yFnLDfewkouuxsQcQY7JZg2Lm
vnBYzAMOMMNn0JeUKM1nQZko4qg2J9PDItRoPL7ukNnnSRKa9G4scsYRTa95TE2F
B4xZwfEbch3aYB81ZYlBPpJsBpXZxKxQK4ePpOTpPXCePW/env6pbWhne/N0e74V
Rvr0IlZy2MLpV6/Mrc/Vvw4k/m4JjYzaAdDw5g4Rlwhqq8Yzo0hyZHkcSOkPyQ+L
wchn9r2y9JHF3Pv/Q9Lk1jsrykDBcp4anT3WjNKTGRV3KVkWbv95lcMCI5q2bYrM
hOBmwGb35CKAsw==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:36:57 2026 by rpki-client