Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier: kNVNIXyUYKAX6LmXg2UVjuCK/bWxQuipH+nBYsCjZuc=
Subject key identifier: E2:EC:77:A6:A7:DF:3D:0C:1B:BD:BF:48:D1:69:2C:76:71:28:36:4B
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer: /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial: 019D27045A99BF5A6CB0CC8517B7A76CC124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number: 03D0
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: M6xvO841S3w2fG4a2qQIJ2i8B7A9U7r4wke/Ig3uLUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5a:99:bf:5a:6c:b0:cc:85:17:b7:a7:6c:c1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=e2ec77a6a7df3d0c1bbdbf48d1692c767128364b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:5c:58:43:1c:a9:b6:8d:5b:66:50:7b:be:
bc:6d:4d:5f:d1:93:e0:f5:c7:ee:a2:d8:61:fc:fd:
f9:37:9e:aa:07:c6:8e:c3:5d:89:96:57:49:54:a0:
d5:6c:db:6e:cc:54:79:8c:88:f2:9b:ab:c6:bb:2c:
b4:59:d3:5c:58:30:f3:69:72:8c:cf:d1:bc:b9:77:
51:ed:18:1d:49:f9:fd:86:57:f6:15:a6:60:50:81:
06:d8:95:43:eb:1f:44:de:88:2c:42:57:79:c8:c5:
87:d6:c7:27:6b:c2:cf:10:cf:77:be:a9:d2:28:3d:
f3:38:fc:13:dd:7a:eb:3f:57:1a:ab:28:36:26:65:
ef:59:d6:43:73:ac:7a:ea:c8:12:fe:4a:33:55:2b:
90:30:4b:2d:18:e7:4f:3f:64:2b:b3:fb:df:0f:97:
98:02:45:99:8c:e9:22:ab:4d:86:ae:93:d5:86:86:
59:b8:7f:b3:2f:88:34:51:67:c4:83:4a:ab:12:d7:
22:fc:f3:ff:bc:12:1b:9c:11:cf:63:ac:b8:5d:ff:
99:56:16:c7:fa:03:f4:e6:db:8d:eb:a3:25:08:80:
f5:38:52:64:7a:79:d6:77:6d:ff:e9:a6:cf:ae:4a:
38:1c:cf:9b:d0:ce:33:7f:53:61:1a:25:2e:24:d6:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:77:A6:A7:DF:3D:0C:1B:BD:BF:48:D1:69:2C:76:71:28:36:4B
X509v3 Authority Key Identifier:
keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:71:eb:6f:2b:5b:88:28:82:85:f9:bf:c6:bf:e5:d6:4b:c7:
3d:47:df:b1:68:9e:05:c1:20:3e:da:33:23:07:2a:e2:36:01:
12:17:56:b7:5a:eb:01:3e:0d:8f:4e:ce:45:26:ee:ad:00:f1:
86:89:0d:bb:70:37:02:0e:2e:dc:ad:0f:6a:9e:93:54:e2:04:
aa:ef:95:79:dd:e3:1e:12:ae:d7:e6:68:3d:3e:c4:c8:89:1f:
f1:33:a3:b1:c3:89:08:03:74:ff:5d:37:cb:0b:e4:0e:38:e6:
d5:22:74:58:88:da:a0:76:7c:a2:3b:fe:7d:ac:52:21:fc:fa:
6a:48:d1:0e:81:ec:fb:17:5a:5f:92:5d:b5:c2:a9:d5:6e:b1:
2e:c6:dd:b3:5a:36:42:d0:02:9b:3f:c1:ff:7c:f8:d1:e9:f8:
55:12:60:6c:8f:20:43:d6:e3:a0:0b:af:81:3e:3b:59:ff:8c:
bc:4c:27:34:44:3f:93:60:58:b4:95:81:1e:15:cb:ad:d1:fe:
11:08:d7:a9:cc:f4:d8:53:85:51:63:b1:85:04:74:ee:47:a5:
a5:11:52:52:a0:19:9d:a1:39:86:ec:eb:c2:a4:b8:71:1f:d8:
42:64:76:b5:26:7b:f9:51:2a:aa:e4:44:27:6a:29:8c:e7:25:
46:dc:37:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBFqZv1pssMyFF7enbMEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OTAxYzk2Yzc0N2U5MTYyY2FlZmU1MDE0MGFlNTMyMWIy
M2M1N2MwHhcNMjYwMzI1MjIwMTI5WhcNMjYwMzI2MjIwMTI5WjAzMTEwLwYDVQQD
EyhlMmVjNzdhNmE3ZGYzZDBjMWJiZGJmNDhkMTY5MmM3NjcxMjgzNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JlcWEMcqbaNW2ZQe768bU1f0ZPg
9cfuothh/P35N56qB8aOw12JlldJVKDVbNtuzFR5jIjym6vGuyy0WdNcWDDzaXKM
z9G8uXdR7RgdSfn9hlf2FaZgUIEG2JVD6x9E3ogsQld5yMWH1scna8LPEM93vqnS
KD3zOPwT3XrrP1caqyg2JmXvWdZDc6x66sgS/kozVSuQMEstGOdPP2Qrs/vfD5eY
AkWZjOkiq02GrpPVhoZZuH+zL4g0UWfEg0qrEtci/PP/vBIbnBHPY6y4Xf+ZVhbH
+gP05tuN66MlCID1OFJkennWd23/6abPrko4HM+b0M4zf1NhGiUuJNZszQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLsd6an3z0MG72/SNFpLHZxKDZLMB8GA1UdIwQY
MBaAFOWQHJbHR+kWLK7+UBQK5TIbI8V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVpBY2xzZEg2UllzcnY1UUZBcmxNaHNqeFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNDAwNzAtNjRiMC00NmY4LWEzNjAt
MDIyMDYzMDNkNzEzLzEvNVpBY2xzZEg2UllzcnY1UUZBcmxNaHNqeFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wNDAwNzAtNjRiMC00NmY4LWEzNjAtMDIyMDYzMDNkNzEz
LzEvNVpBY2xzZEg2UllzcnY1UUZBcmxNaHNqeFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXHrbytb
iCiChfm/xr/l1kvHPUffsWieBcEgPtozIwcq4jYBEhdWt1rrAT4Nj07ORSburQDx
hokNu3A3Ag4u3K0Pap6TVOIEqu+Ved3jHhKu1+ZoPT7EyIkf8TOjscOJCAN0/103
ywvkDjjm1SJ0WIjaoHZ8ojv+faxSIfz6akjRDoHs+xdaX5JdtcKp1W6xLsbds1o2
QtACmz/B/3z40en4VRJgbI8gQ9bjoAuvgT47Wf+MvEwnNEQ/k2BYtJWBHhXLrdH+
EQjXqcz02FOFUWOxhQR07kelpRFSUqAZnaE5huzrwqS4cR/YQmR2tSZ7+VEqquRE
J2opjOclRtw3wQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:29 2026 by rpki-client