Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: uzmNGdpk9uq+oawcs/MTsQ3fb/BhrIe1G9CwM7zwQ3s=
Subject key identifier: 19:EA:67:E6:9F:22:8A:1D:64:5D:C7:9D:5D:92:25:DC:CA:50:74:BF
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019D29608928C7741EEBCDA203C3A20CDB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0913
Signing time: Thu 26 Mar 2026 09:01:25 +0000
Manifest this update: Thu 26 Mar 2026 09:01:25 +0000
Manifest next update: Fri 27 Mar 2026 09:01:25 +0000
Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: zpMQs5aMJpNDM+dBOMyv4X9FnLW4akfekJzej9Ae+lw=)
2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:89:28:c7:74:1e:eb:cd:a2:03:c3:a2:0c:db:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Mar 26 09:01:25 2026 GMT
Not After : Mar 27 09:01:25 2026 GMT
Subject: CN=19ea67e69f228a1d645dc79d5d9225dcca5074bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c0:d9:64:ce:1f:bb:73:01:62:b7:64:96:da:
82:fd:a1:3f:10:69:1f:6e:c4:a3:8a:dc:34:bc:d1:
4d:c4:47:77:fc:6f:c5:1b:2a:c5:29:31:c6:2c:24:
72:03:27:ef:b7:00:cb:29:f2:a6:21:bd:db:37:97:
7d:7e:1d:a8:ff:27:b1:3e:81:b4:3f:dd:14:24:fc:
43:b7:e7:ce:f9:bd:f3:99:e4:cc:c2:c9:96:6b:19:
84:d7:e0:ba:79:ab:9b:03:eb:e0:88:81:0d:a3:9c:
61:e0:49:06:f0:f9:34:b1:4d:c7:30:67:60:63:19:
17:72:ae:1c:1e:65:4b:49:bb:95:2f:fd:c1:a2:6e:
18:e5:99:4f:57:f9:bd:be:7b:e3:65:e0:52:13:e1:
d9:76:bd:c3:2e:10:9e:b4:12:ec:55:1f:76:73:fd:
81:dc:fa:87:b7:85:f8:87:58:79:aa:dd:71:a1:39:
e2:2a:40:1b:c0:ae:97:d8:26:b6:19:ca:09:d7:6c:
fb:87:84:8a:84:69:3a:32:16:4c:53:2a:40:67:bc:
9c:a3:f9:3e:c9:f2:77:84:75:7a:ba:11:08:01:8a:
14:d9:a6:ad:b3:c3:c6:d7:1d:26:7d:ad:88:be:52:
6d:38:db:79:82:c1:c3:4f:94:97:f0:27:b1:f5:7f:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EA:67:E6:9F:22:8A:1D:64:5D:C7:9D:5D:92:25:DC:CA:50:74:BF
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:fc:b1:d2:0f:6f:9d:37:8a:ac:2f:94:fa:35:d5:7a:ab:aa:
41:f1:d3:07:f1:16:8c:2c:a2:f8:4f:90:2f:2c:ed:fb:1f:b2:
e7:dc:ae:27:e8:52:2d:f9:b9:40:d6:52:ae:32:3c:36:45:4d:
d3:58:9d:ad:8d:a8:1f:6d:34:8d:9f:b9:0a:0f:59:62:45:d2:
51:2f:02:b9:7a:56:16:de:92:d7:05:ad:ca:6f:56:49:78:d6:
6b:80:41:5c:09:73:b8:ab:68:d8:54:47:b1:68:75:c0:2e:22:
7c:2e:ff:29:2c:57:67:5f:e8:16:c9:ed:c8:7c:ec:22:4b:4f:
2a:85:d3:85:34:38:13:7a:61:cc:37:46:1c:e3:69:92:e3:37:
16:ac:6c:df:2c:3a:35:62:29:e0:f2:8b:64:60:cf:2b:a8:60:
ed:66:8d:f7:2b:78:85:65:c0:c4:67:04:3f:08:3f:7d:24:e0:
56:56:34:8b:62:bc:b8:33:f1:6d:c1:0a:4e:65:fe:4f:59:a9:
74:df:7e:26:04:7b:23:a8:b2:18:56:52:6c:54:5f:55:0b:a8:
91:b7:73:75:a9:8f:14:6c:32:9a:b7:fc:cf:af:e6:98:bb:ed:
d9:8a:8e:a8:de:98:08:2b:0c:74:5c:04:49:d9:01:22:9b:fe:
8f:2c:5e:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYIkox3Qe682iA8OiDNt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw
ZGU2YmYwHhcNMjYwMzI2MDkwMTI1WhcNMjYwMzI3MDkwMTI1WjAzMTEwLwYDVQQD
EygxOWVhNjdlNjlmMjI4YTFkNjQ1ZGM3OWQ1ZDkyMjVkY2NhNTA3NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sDZZM4fu3MBYrdkltqC/aE/EGkf
bsSjitw0vNFNxEd3/G/FGyrFKTHGLCRyAyfvtwDLKfKmIb3bN5d9fh2o/yexPoG0
P90UJPxDt+fO+b3zmeTMwsmWaxmE1+C6eaubA+vgiIENo5xh4EkG8Pk0sU3HMGdg
YxkXcq4cHmVLSbuVL/3Bom4Y5ZlPV/m9vnvjZeBSE+HZdr3DLhCetBLsVR92c/2B
3PqHt4X4h1h5qt1xoTniKkAbwK6X2Ca2GcoJ12z7h4SKhGk6MhZMUypAZ7yco/k+
yfJ3hHV6uhEIAYoU2aats8PG1x0mfa2IvlJtONt5gsHDT5SX8Cex9X8PUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnqZ+afIoodZF3HnV2SJdzKUHS/MB8GA1UdIwQY
MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt
NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz
LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/yx0g9v
nTeKrC+U+jXVequqQfHTB/EWjCyi+E+QLyzt+x+y59yuJ+hSLfm5QNZSrjI8NkVN
01idrY2oH200jZ+5Cg9ZYkXSUS8CuXpWFt6S1wWtym9WSXjWa4BBXAlzuKto2FRH
sWh1wC4ifC7/KSxXZ1/oFsntyHzsIktPKoXThTQ4E3phzDdGHONpkuM3Fqxs3yw6
NWIp4PKLZGDPK6hg7WaN9yt4hWXAxGcEPwg/fSTgVlY0i2K8uDPxbcEKTmX+T1mp
dN9+JgR7I6iyGFZSbFRfVQuokbdzdamPFGwymrf8z6/mmLvt2YqOqN6YCCsMdFwE
SdkBIpv+jyxe6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:48 2026 by rpki-client