Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: jkul8jFkf610iFRTP+7WGqtLH3ZgV7LFyXZmiuEGsRw=
Subject key identifier: 14:8D:0B:DC:3F:68:FE:67:02:E8:E7:8B:B3:41:CE:D2:5B:A2:25:73
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019E1DFEA05671E1A07EB06088C7E8E09E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0D77
Signing time: Tue 12 May 2026 21:01:26 +0000
Manifest this update: Tue 12 May 2026 21:01:26 +0000
Manifest next update: Wed 13 May 2026 21:01:26 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: yI8Gc474kPIUNuWYAGZ21LpQcfpM2YjA4wW3n+whS7k=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a0:56:71:e1:a0:7e:b0:60:88:c7:e8:e0:9e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: May 12 21:01:26 2026 GMT
Not After : May 13 21:01:26 2026 GMT
Subject: CN=148d0bdc3f68fe6702e8e78bb341ced25ba22573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:97:4a:77:b0:e7:ab:9a:1a:f5:6d:b3:40:
a3:d5:20:cd:4b:30:8b:3f:28:cf:47:ea:c5:c9:59:
79:e9:5c:82:e1:b1:e2:f9:07:2f:c4:e3:aa:29:14:
b5:68:88:2e:aa:ef:e0:85:07:1f:29:49:04:9f:a2:
c7:14:0f:6a:4c:64:da:d5:7d:8c:7a:46:0e:4f:b8:
a8:2f:d3:7a:93:a7:72:69:42:c6:c9:34:05:68:a1:
59:d4:c9:c5:ef:bd:1a:e2:98:5d:6a:c5:22:48:94:
07:34:67:88:1d:a9:8e:27:a2:5f:91:73:88:63:6e:
d2:95:1f:d3:d0:43:7c:cf:0b:00:14:b9:bd:2a:ed:
87:0e:51:31:cd:54:9a:ed:09:74:48:8d:3c:5b:54:
b2:22:5f:cb:a7:ec:08:37:0c:05:e4:7e:7c:d9:20:
fb:d8:39:84:ed:ee:f2:da:f3:a2:10:13:53:42:1f:
21:dc:d0:aa:11:e9:5b:b6:89:e8:fa:c0:ed:cb:4b:
8d:a1:2a:1f:39:47:4f:ea:7f:b1:61:8d:25:ec:16:
f0:4e:e2:99:b9:e7:3f:6a:d0:c5:b3:1b:8c:44:a7:
eb:8c:3b:18:f2:74:8f:9b:1b:9a:ac:c4:32:7f:e3:
d0:98:5b:f0:84:4d:d9:b8:58:38:bc:48:e8:f5:c0:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:0B:DC:3F:68:FE:67:02:E8:E7:8B:B3:41:CE:D2:5B:A2:25:73
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a1:0e:d8:90:5b:a9:ff:9b:a6:d2:03:df:3d:d9:79:03:df:
2b:ca:83:d3:0f:15:2d:90:21:e9:97:9e:22:37:cd:ce:3e:6c:
40:c3:43:9f:ae:44:6c:cb:d3:fe:a7:42:a3:85:0d:e3:5e:f7:
61:95:b2:a2:70:db:e8:c5:2e:67:c3:86:40:8f:d0:ed:d0:9a:
ae:40:f6:c9:15:26:9c:99:3b:c0:59:1b:e9:77:7d:d2:3c:70:
27:70:a0:2b:1c:94:ea:55:7a:87:4b:d6:d9:80:df:12:af:7e:
55:e5:d3:e7:49:d2:70:9d:c1:b9:b3:d6:fc:d1:25:d1:96:09:
74:c7:f7:6b:72:93:0a:be:66:61:bd:49:0c:c3:5f:2b:2a:9c:
7d:da:64:fd:f8:7f:dd:99:c8:58:f2:d6:d7:e7:ad:18:e1:14:
1e:35:40:0e:e9:1a:d5:fb:ee:9f:5f:fc:ef:41:3c:fd:c5:00:
d0:b0:e6:76:aa:29:f5:f3:07:72:3f:b3:da:03:32:2b:50:1b:
c1:30:86:fe:f4:6b:06:6f:60:46:df:66:6d:21:1b:9a:e2:47:
07:4d:61:2b:f1:ed:ee:b7:eb:7b:74:61:79:7d:d1:36:0d:7f:
39:22:3a:71:db:d2:81:1b:1a:7e:ca:b1:f2:7d:c1:d1:34:03:
31:b7:24:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/qBWceGgfrBgiMfo4J6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4
NmIxMGYwHhcNMjYwNTEyMjEwMTI2WhcNMjYwNTEzMjEwMTI2WjAzMTEwLwYDVQQD
EygxNDhkMGJkYzNmNjhmZTY3MDJlOGU3OGJiMzQxY2VkMjViYTIyNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqiXSnew56uaGvVts0Cj1SDNSzCL
PyjPR+rFyVl56VyC4bHi+QcvxOOqKRS1aIguqu/ghQcfKUkEn6LHFA9qTGTa1X2M
ekYOT7ioL9N6k6dyaULGyTQFaKFZ1MnF770a4phdasUiSJQHNGeIHamOJ6JfkXOI
Y27SlR/T0EN8zwsAFLm9Ku2HDlExzVSa7Ql0SI08W1SyIl/Lp+wINwwF5H582SD7
2DmE7e7y2vOiEBNTQh8h3NCqEelbtono+sDty0uNoSofOUdP6n+xYY0l7BbwTuKZ
uec/atDFsxuMRKfrjDsY8nSPmxuarMQyf+PQmFvwhE3ZuFg4vEjo9cAvGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSNC9w/aP5nAujni7NBztJboiVzMB8GA1UdIwQY
MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It
NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm
LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaEO2JBb
qf+bptID3z3ZeQPfK8qD0w8VLZAh6ZeeIjfNzj5sQMNDn65EbMvT/qdCo4UN4173
YZWyonDb6MUuZ8OGQI/Q7dCarkD2yRUmnJk7wFkb6Xd90jxwJ3CgKxyU6lV6h0vW
2YDfEq9+VeXT50nScJ3BubPW/NEl0ZYJdMf3a3KTCr5mYb1JDMNfKyqcfdpk/fh/
3ZnIWPLW1+etGOEUHjVADuka1fvun1/870E8/cUA0LDmdqop9fMHcj+z2gMyK1Ab
wTCG/vRrBm9gRt9mbSEbmuJHB01hK/Ht7rfre3RheX3RNg1/OSI6cdvSgRsafsqx
8n3B0TQDMbcktA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:36:47 2026 by rpki-client