
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier: WxmV+PDayKi4VoHc/T9q7wFzKNUUSjGcRtRYV30gMe4=
Subject key identifier: 5C:1C:E8:8D:18:EC:BA:D9:C8:FB:05:60:33:43:78:6D:E6:EA:C6:65
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 019D25F22047A6BCDB8BFBCD2D79497B6443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number: 1366
Signing time: Wed 25 Mar 2026 17:01:58 +0000
Manifest this update: Wed 25 Mar 2026 17:01:58 +0000
Manifest next update: Thu 26 Mar 2026 17:01:58 +0000
Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: TrkI8MTkzP7umRqd8ZB6hc7riQpkZ8Nykn7Fq5gVDwQ=)
2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:20:47:a6:bc:db:8b:fb:cd:2d:79:49:7b:64:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Mar 25 17:01:58 2026 GMT
Not After : Mar 26 17:01:58 2026 GMT
Subject: CN=5c1ce88d18ecbad9c8fb05603343786de6eac665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:f6:ec:27:e3:48:f9:6d:3c:2b:68:7f:89:
8a:5b:5f:de:ca:ba:f8:6a:70:2f:b6:ff:f3:37:7b:
a1:ba:bb:0c:1d:d4:ba:cd:b2:cd:c5:3c:54:9f:a2:
0e:88:2b:bf:f0:f5:0d:9e:35:b1:73:30:4e:5f:e2:
05:14:87:95:29:15:f8:3d:e0:33:f1:e5:16:59:91:
6f:81:47:69:38:e3:a1:2d:86:99:8f:eb:a0:1c:a3:
a0:86:61:16:d1:86:50:68:18:24:09:f5:6e:4c:02:
68:ff:82:40:54:84:f9:52:6c:03:3d:73:18:fe:b8:
c8:a1:0a:f7:c2:c7:71:73:9f:c4:ba:e5:3e:a4:38:
32:9b:c0:6d:32:e0:f0:e9:a1:af:28:bb:21:1f:85:
db:03:ae:06:38:aa:87:43:62:52:2f:dc:22:ee:f0:
eb:69:1e:31:6b:9f:a0:84:aa:27:d0:ac:04:02:5d:
27:75:9e:a5:b8:b1:f7:30:73:00:b8:dd:76:a4:82:
3d:66:e6:c8:4f:19:10:06:b9:16:c4:c2:ae:3c:45:
b7:ae:ef:8d:7f:61:40:f1:82:d7:5a:e3:fe:1b:09:
dc:2a:5f:32:aa:7b:72:a2:15:6e:48:16:53:c8:94:
a8:2d:c2:92:f7:99:7d:20:ba:70:01:e4:d0:42:5c:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:E8:8D:18:EC:BA:D9:C8:FB:05:60:33:43:78:6D:E6:EA:C6:65
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:0e:82:5a:4a:81:a6:76:4b:27:66:bb:c8:34:13:16:e2:
3c:a2:22:bc:03:19:f9:af:c9:dc:a9:ec:60:a1:22:10:69:0d:
7b:ed:e1:5e:ee:f9:6c:db:68:c8:44:b2:7e:a7:48:48:aa:e3:
3d:4a:60:7d:13:29:08:e4:92:2e:49:9d:3f:a8:e7:85:05:20:
82:48:28:fd:02:21:45:ca:74:c2:2b:69:b7:83:c8:b4:ef:c4:
1d:91:92:19:43:f3:8b:40:7d:fb:d0:cd:13:bc:22:22:36:03:
ff:69:bb:14:ee:23:0d:e6:f8:09:7d:7a:82:55:f5:4d:f4:af:
f4:a3:05:37:76:0d:80:ad:9a:9e:39:13:8b:c3:32:44:c5:3d:
ed:04:fd:bc:a9:47:2a:41:36:be:fb:55:30:d9:bc:a7:81:ca:
98:69:f7:e2:06:74:da:e3:08:74:ba:45:a6:78:4f:9a:cb:03:
4e:aa:a8:70:29:0d:02:29:5d:ff:5b:46:6e:7e:04:b7:9c:14:
b0:74:ef:4c:71:c8:14:95:be:c2:b7:1c:b8:bd:b2:a6:8d:e9:
ba:1f:48:f9:ef:e2:e0:62:8c:dc:fe:7d:d6:47:3a:63:3a:f8:
f5:0c:96:38:4b:3d:24:05:b4:ee:cd:66:82:00:37:53:6e:4a:
d8:ef:30:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8iBHprzbi/vNLXlJe2RDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm
YmNmOTcwHhcNMjYwMzI1MTcwMTU4WhcNMjYwMzI2MTcwMTU4WjAzMTEwLwYDVQQD
Eyg1YzFjZTg4ZDE4ZWNiYWQ5YzhmYjA1NjAzMzQzNzg2ZGU2ZWFjNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU727CfjSPltPCtof4mKW1/eyrr4
anAvtv/zN3uhursMHdS6zbLNxTxUn6IOiCu/8PUNnjWxczBOX+IFFIeVKRX4PeAz
8eUWWZFvgUdpOOOhLYaZj+ugHKOghmEW0YZQaBgkCfVuTAJo/4JAVIT5UmwDPXMY
/rjIoQr3wsdxc5/EuuU+pDgym8BtMuDw6aGvKLshH4XbA64GOKqHQ2JSL9wi7vDr
aR4xa5+ghKon0KwEAl0ndZ6luLH3MHMAuN12pII9ZubITxkQBrkWxMKuPEW3ru+N
f2FA8YLXWuP+GwncKl8yqntyohVuSBZTyJSoLcKS95l9ILpwAeTQQly6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwc6I0Y7LrZyPsFYDNDeG3m6sZlMB8GA1UdIwQY
MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt
N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh
LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxsOglpK
gaZ2Sydmu8g0ExbiPKIivAMZ+a/J3KnsYKEiEGkNe+3hXu75bNtoyESyfqdISKrj
PUpgfRMpCOSSLkmdP6jnhQUggkgo/QIhRcp0witpt4PItO/EHZGSGUPzi0B9+9DN
E7wiIjYD/2m7FO4jDeb4CX16glX1TfSv9KMFN3YNgK2anjkTi8MyRMU97QT9vKlH
KkE2vvtVMNm8p4HKmGn34gZ02uMIdLpFpnhPmssDTqqocCkNAild/1tGbn4Et5wU
sHTvTHHIFJW+wrccuL2ypo3puh9I+e/i4GKM3P591kc6Yzr49QyWOEs9JAW07s1m
ggA3U25K2O8wSw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:42 2026 by rpki-client