Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: B2iqlgwuWRjJSc2KqPWcU07GEo/OXu7s5k9wxxifmuA=
Subject key identifier: 2A:78:ED:8C:F6:2B:B8:E7:7C:AA:E1:64:3D:C4:79:3D:84:8F:D7:D2
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019D32D11F5435BEA61E4626882C6524A6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 05:00:58 +0000
Manifest this update: Sat 28 Mar 2026 05:00:58 +0000
Manifest next update: Sun 29 Mar 2026 05:00:58 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: airHBwvrnxd3Dmoy6tbDEYnwBhRRxp5xda5PxIWz6/s=)
2: cPmuXHtpdWHOv_IohN-yvdSZh00.roa (hash: uWWYQC9FttyGHNgD7wIoeeDy1sX/WMjKSFeXWzNylw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:1f:54:35:be:a6:1e:46:26:88:2c:65:24:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Mar 28 05:00:58 2026 GMT
Not After : Mar 29 05:00:58 2026 GMT
Subject: CN=2a78ed8cf62bb8e77caae1643dc4793d848fd7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:53:9d:c3:35:b2:c2:e4:b8:01:d4:cc:75:
72:53:16:07:f6:40:53:6c:3c:4b:7a:95:61:93:cc:
74:9f:97:cf:d6:27:2a:a8:af:74:55:90:26:54:66:
db:fa:db:17:11:23:cc:e1:97:6a:aa:81:e3:ea:6c:
c9:1b:50:a9:7c:18:c1:c2:2f:da:61:08:6b:ef:2c:
bc:72:95:0a:94:bb:2f:1c:3c:c5:21:c7:6a:7b:61:
10:0f:b6:08:d6:76:41:78:90:b2:a4:8a:e9:a1:a5:
3e:68:ea:b6:58:04:aa:68:16:a7:9b:a0:91:f8:94:
cb:fd:fc:da:63:c8:ea:48:a5:bc:01:88:1c:01:80:
42:1a:a3:ec:2c:78:5c:3c:59:d6:13:39:84:2e:50:
6e:ec:a5:21:b0:b4:7b:42:1f:8b:12:f9:66:21:43:
68:f1:77:09:63:3a:a0:3f:c1:72:76:82:86:15:c9:
b8:f8:8f:d7:0d:d3:da:e8:41:4e:7a:3e:87:5e:e2:
2d:de:d0:3c:39:94:9b:95:78:8e:af:8d:d1:b6:56:
67:0c:37:37:b6:0c:cc:43:cd:26:ec:da:33:03:f1:
8a:f5:58:e6:3b:89:40:d6:37:42:f0:ef:b0:6d:99:
dc:b4:1f:87:47:fb:11:60:45:57:03:a6:0a:86:ac:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:78:ED:8C:F6:2B:B8:E7:7C:AA:E1:64:3D:C4:79:3D:84:8F:D7:D2
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:87:1c:5d:11:d2:3b:3e:4d:f3:84:cd:05:6b:38:0d:2f:1a:
ce:8b:86:16:af:c9:d1:86:a1:6a:16:9b:9f:f8:e0:70:76:18:
63:9a:7f:ef:80:5e:44:8a:47:69:b5:e5:c7:b7:cd:47:82:2c:
7b:24:a7:1e:c2:0d:85:22:d4:6c:bf:fe:55:01:ab:91:ff:ce:
7c:71:bd:15:dc:eb:6c:d1:51:4c:af:31:cc:c0:44:15:94:6d:
57:a0:f5:8a:2d:5c:a1:29:d8:86:4f:a7:06:f4:0b:9d:c7:25:
54:68:b1:05:28:74:01:60:07:31:32:20:31:b6:31:c3:39:51:
af:54:a8:0e:55:1d:86:32:c9:d0:52:37:ef:62:e8:66:95:7b:
80:e1:c8:41:9b:05:03:fd:52:e3:1c:08:43:c5:bf:2b:33:e2:
85:3c:c9:8a:7e:53:12:81:d8:19:bb:d2:ec:ec:a6:8d:32:e4:
d6:88:a1:cf:15:90:03:b6:5a:c6:db:41:71:a5:e4:ed:52:00:
4c:98:d1:f4:7a:81:e2:fe:5b:03:85:2b:e9:cd:b3:7c:36:db:
37:15:ef:57:21:1c:a7:4f:a9:f4:5a:31:95:0b:2d:21:c5:8a:
82:27:ce:96:a3:01:1d:52:d5:08:46:67:b6:2d:a1:f2:d2:18:
6f:dc:88:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0y0R9UNb6mHkYmiCxlJKbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MWQ3MDlkOGIxODRjNWE1MGM5NDMxZGNjYWY2NDliYzg2
ODQ3MDQwHhcNMjYwMzI4MDUwMDU4WhcNMjYwMzI5MDUwMDU4WjAzMTEwLwYDVQQD
EygyYTc4ZWQ4Y2Y2MmJiOGU3N2NhYWUxNjQzZGM0NzkzZDg0OGZkN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhFTncM1ssLkuAHUzHVyUxYH9kBT
bDxLepVhk8x0n5fP1icqqK90VZAmVGbb+tsXESPM4ZdqqoHj6mzJG1CpfBjBwi/a
YQhr7yy8cpUKlLsvHDzFIcdqe2EQD7YI1nZBeJCypIrpoaU+aOq2WASqaBanm6CR
+JTL/fzaY8jqSKW8AYgcAYBCGqPsLHhcPFnWEzmELlBu7KUhsLR7Qh+LEvlmIUNo
8XcJYzqgP8FydoKGFcm4+I/XDdPa6EFOej6HXuIt3tA8OZSblXiOr43RtlZnDDc3
tgzMQ80m7NozA/GK9VjmO4lA1jdC8O+wbZnctB+HR/sRYEVXA6YKhqzuPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp47Yz2K7jnfKrhZD3EeT2Ej9fSMB8GA1UdIwQY
MBaAFOcdcJ2LGExaUMlDHcyvZJvIaEcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMt
MWM1YjEwMTJkMmMzLzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMtMWM1YjEwMTJkMmMz
LzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4ccXRHS
Oz5N84TNBWs4DS8azouGFq/J0Yahahabn/jgcHYYY5p/74BeRIpHabXlx7fNR4Is
eySnHsINhSLUbL/+VQGrkf/OfHG9FdzrbNFRTK8xzMBEFZRtV6D1ii1coSnYhk+n
BvQLncclVGixBSh0AWAHMTIgMbYxwzlRr1SoDlUdhjLJ0FI372LoZpV7gOHIQZsF
A/1S4xwIQ8W/KzPihTzJin5TEoHYGbvS7OymjTLk1oihzxWQA7ZaxttBcaXk7VIA
TJjR9HqB4v5bA4Ur6c2zfDbbNxXvVyEcp0+p9FoxlQstIcWKgifOlqMBHVLVCEZn
ti2h8tIYb9yI7Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:04:22 2026 by rpki-client