Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: SPzXUackfsGdn7RN7xhGVIuCBDcf+2cVcNo4sFNCk0w=
Subject key identifier: 3B:35:72:F6:46:9E:0D:24:2B:66:3B:6F:9D:76:EC:0D:E5:82:C2:1E
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 019D25F1B155C221935C1811EE42B3DDE234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 0529
Signing time: Wed 25 Mar 2026 17:01:29 +0000
Manifest this update: Wed 25 Mar 2026 17:01:29 +0000
Manifest next update: Thu 26 Mar 2026 17:01:29 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: 1+zdeZKV7/BkAz0NuLyh607BwIU6iFF5Je9Csf+vg/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b1:55:c2:21:93:5c:18:11:ee:42:b3:dd:e2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Mar 25 17:01:29 2026 GMT
Not After : Mar 26 17:01:29 2026 GMT
Subject: CN=3b3572f6469e0d242b663b6f9d76ec0de582c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:03:e9:fa:d7:3d:1e:ff:79:f8:82:de:06:
4c:35:99:15:4c:de:c3:65:a3:26:f4:0a:6f:49:b0:
b1:4d:0f:9f:25:91:83:8d:62:61:6e:ab:59:fd:91:
2c:50:06:00:1b:88:47:a8:f4:e9:f4:83:f3:75:0c:
52:3e:8f:2e:2d:34:d8:df:42:0b:d0:01:76:50:04:
8d:21:23:33:fa:d7:69:d8:da:a7:13:be:c5:f9:ad:
c0:37:42:9a:61:79:86:3a:15:91:00:12:a7:ae:94:
5a:da:1f:f5:2c:a1:3d:31:5f:5d:d4:85:5b:a1:3b:
09:71:a9:c6:9b:e2:ff:07:99:01:c9:df:a0:be:ab:
35:bb:a5:a8:6f:a7:fa:ea:1a:6d:41:05:19:81:eb:
41:bf:3b:ad:50:57:aa:12:77:b9:ce:fd:dc:fc:19:
94:9b:68:66:aa:b1:dd:4c:91:63:6b:c9:6f:f8:65:
cb:ad:ae:22:f5:c2:f1:a4:29:29:91:27:ce:03:54:
51:7c:bf:26:91:2c:f0:ca:da:ee:73:63:0c:0a:63:
39:e9:e7:8a:51:aa:ca:2a:c0:18:0f:fc:bd:94:80:
1b:c0:2c:b0:be:4a:4e:ff:fb:61:af:27:d7:c8:f3:
eb:6a:0f:dc:8c:6b:f0:fb:5a:f6:2c:d7:6d:6b:5f:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:72:F6:46:9E:0D:24:2B:66:3B:6F:9D:76:EC:0D:E5:82:C2:1E
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5b:9c:9b:e2:b3:75:c7:cd:6b:60:1a:fa:3c:f9:35:7d:11:
f2:88:8d:41:b5:b9:8a:13:1e:fd:fb:c2:dd:1e:04:4b:cc:bc:
64:0b:50:8b:72:51:fe:48:57:d8:ec:6f:74:d2:1e:19:c3:bf:
3e:64:4c:ab:96:1b:44:76:31:aa:9e:68:84:3a:5f:f8:61:91:
76:8b:06:54:d2:20:1d:7c:02:e0:8b:a2:d2:5b:d7:4c:a6:f5:
e0:f7:44:2d:f4:9a:3b:72:d1:92:5e:56:d2:fc:34:8e:30:1e:
6c:a0:f1:2d:4d:e7:d2:a3:9c:6a:e8:6c:9b:6f:c0:a2:40:9d:
02:cb:08:f6:50:a4:e2:48:3f:32:83:6e:d1:89:bb:f1:b3:1e:
3e:ad:43:e3:6a:9c:9a:72:c1:71:70:49:75:91:3c:1e:26:41:
df:b5:26:14:56:b1:48:15:33:06:62:47:a1:cc:e0:f0:24:09:
cb:ea:ae:80:74:57:85:36:4e:a4:b9:80:e6:3d:e9:78:f1:ba:
d0:92:00:d7:b8:e0:5e:63:43:d5:70:1b:64:b9:68:c4:d6:2a:
fa:c1:4e:90:96:f3:13:0b:d3:7e:a7:1c:d6:6e:8e:ae:7f:02:
13:e6:8d:16:62:8d:b7:9f:39:c7:5b:f2:db:ce:cb:ee:50:df:
77:42:8c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8bFVwiGTXBgR7kKz3eI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDk4N2U2Y2ZiY2NlNThhZTBjOTZlNzY2NmFiMjFhYjNl
MmUwOTAwHhcNMjYwMzI1MTcwMTI5WhcNMjYwMzI2MTcwMTI5WjAzMTEwLwYDVQQD
EygzYjM1NzJmNjQ2OWUwZDI0MmI2NjNiNmY5ZDc2ZWMwZGU1ODJjMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRgD6frXPR7/efiC3gZMNZkVTN7D
ZaMm9ApvSbCxTQ+fJZGDjWJhbqtZ/ZEsUAYAG4hHqPTp9IPzdQxSPo8uLTTY30IL
0AF2UASNISMz+tdp2NqnE77F+a3AN0KaYXmGOhWRABKnrpRa2h/1LKE9MV9d1IVb
oTsJcanGm+L/B5kByd+gvqs1u6Wob6f66hptQQUZgetBvzutUFeqEne5zv3c/BmU
m2hmqrHdTJFja8lv+GXLra4i9cLxpCkpkSfOA1RRfL8mkSzwytruc2MMCmM56eeK
UarKKsAYD/y9lIAbwCywvkpO//thryfXyPPrag/cjGvw+1r2LNdta1836QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs1cvZGng0kK2Y7b5127A3lgsIeMB8GA1UdIwQY
MBaAFOVJh+bPvM5YrgyW52Zqshqz4uCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGIt
MDBiNTIwODc1Mzc2LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGItMDBiNTIwODc1Mzc2
LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVucm+Kz
dcfNa2Aa+jz5NX0R8oiNQbW5ihMe/fvC3R4ES8y8ZAtQi3JR/khX2OxvdNIeGcO/
PmRMq5YbRHYxqp5ohDpf+GGRdosGVNIgHXwC4Iui0lvXTKb14PdELfSaO3LRkl5W
0vw0jjAebKDxLU3n0qOcauhsm2/AokCdAssI9lCk4kg/MoNu0Ym78bMePq1D42qc
mnLBcXBJdZE8HiZB37UmFFaxSBUzBmJHoczg8CQJy+qugHRXhTZOpLmA5j3pePG6
0JIA17jgXmND1XAbZLloxNYq+sFOkJbzEwvTfqcc1m6Orn8CE+aNFmKNt585x1vy
287L7lDfd0KMXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:29 2026 by rpki-client