Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File: 5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier: rI6e7V+fN88iAIiod0JEtwdkkTKVR1uJLA2U3rEySpw=
Subject key identifier: 0E:81:96:AF:52:33:A4:28:49:8A:14:87:09:D8:FE:45:29:65:45:17
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 019D27DF87E3B463D8589D7D65B8A44BABE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: J/SFIjQNKMnAn/np0mfNjDp4WbslTR5DIbHxoHrpce0=)
2: Pfs9aP8BKKXCO6_jhGet2wnBznM.roa (hash: 3+xHpUwJc+iFtnuQ4GBtBBwdLd9ZKYaSTFL998yDg3c=)
3: gccDZBzyAE57KvQSnz4VReEpau8.roa (hash: rOGPCZvHDUH1FlJ+XLChkUVFhzFhVRL07Fjk4zd+Bho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:87:e3:b4:63:d8:58:9d:7d:65:b8:a4:4b:ab:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=0e8196af5233a428498a148709d8fe4529654517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fa:b5:1e:6a:8e:f8:8d:f0:9e:06:3c:19:ad:
1e:c8:d2:48:b2:c2:22:d6:9e:83:0d:57:ac:8e:92:
cc:9d:50:94:0b:19:a2:64:51:16:55:2d:66:42:d5:
75:55:b1:35:5b:26:d0:4b:bf:b5:e2:72:48:d4:0f:
01:5e:55:d4:19:5c:99:1c:65:cf:dc:7c:5a:e7:c3:
8b:23:08:3a:d6:ce:5d:71:d7:f1:6a:82:40:3c:81:
47:05:6e:fd:a3:9a:dc:de:24:49:e4:8e:fd:04:eb:
3e:c5:3e:10:e9:55:e9:1e:0b:b1:35:1d:eb:e5:34:
8b:29:2f:68:48:f5:df:32:ce:26:27:ec:82:87:bf:
53:4c:7d:99:93:ec:2a:60:b8:0d:c4:7d:9a:6f:0f:
ba:a8:9f:c4:d5:24:5a:75:fe:24:74:72:33:10:4c:
80:a6:70:53:82:68:79:7b:95:a1:59:3e:3f:71:f8:
50:85:e0:45:b3:48:ba:2a:70:58:a7:fb:4d:f0:a1:
96:03:a6:ab:84:77:fe:c6:26:1c:fa:53:66:bc:61:
0c:7d:5d:e8:02:7d:06:52:69:b3:21:98:3d:72:7b:
2c:ff:15:db:b9:2c:eb:ee:07:f5:81:d7:22:88:55:
08:94:ed:3b:f2:0d:81:0f:ac:dd:6a:84:4e:44:99:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:96:AF:52:33:A4:28:49:8A:14:87:09:D8:FE:45:29:65:45:17
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2a:64:95:66:af:84:16:24:e4:cb:0d:2f:4e:4d:40:c8:c2:
09:33:98:8e:a0:15:38:1a:d1:a9:26:bb:3d:c1:0e:00:91:c8:
5a:ba:f4:ae:a5:38:12:33:49:31:0c:c6:c5:37:04:51:ed:99:
3e:df:b3:da:52:ac:c7:9e:80:97:55:a9:be:82:d1:da:d4:bc:
c1:b9:53:ef:bd:95:12:56:4b:9c:58:7f:98:02:83:d7:a4:7a:
30:42:e8:a1:c9:e8:3c:77:20:56:a8:7c:e8:77:de:ad:8f:ff:
8c:01:aa:d1:58:25:e8:de:83:f1:1e:38:a2:3c:2b:49:0d:f2:
74:43:fe:b8:72:b2:39:d2:f6:17:e4:a5:fe:42:27:a2:f7:4e:
0e:49:ca:bf:e4:e6:9b:9c:4e:c2:9c:2c:02:23:ad:b2:10:c8:
cd:25:f8:d7:b6:43:1a:a7:e1:21:03:ba:44:dc:14:4c:ef:7a:
d3:75:c0:2d:cc:dd:24:7e:37:30:18:18:ae:d7:1f:d2:38:df:
c4:4b:b0:be:b0:c3:b9:2f:37:49:50:cf:2e:2c:97:2e:7d:99:
a2:4b:90:b1:2b:c8:44:93:cb:5b:30:b9:f5:5c:70:75:72:95:
60:ac:b4:e0:04:8f:cf:7b:77:a7:0a:2b:6b:00:5b:1a:1b:c6:
9c:f8:37:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n34fjtGPYWJ19ZbikS6vkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2Njg4YWU5NjMyM2MxZmNmYWI1NGIyOTQ1NTczOTdiNDli
MDNiYzcwHhcNMjYwMzI2MDIwMDUzWhcNMjYwMzI3MDIwMDUzWjAzMTEwLwYDVQQD
EygwZTgxOTZhZjUyMzNhNDI4NDk4YTE0ODcwOWQ4ZmU0NTI5NjU0NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/q1HmqO+I3wngY8Ga0eyNJIssIi
1p6DDVesjpLMnVCUCxmiZFEWVS1mQtV1VbE1WybQS7+14nJI1A8BXlXUGVyZHGXP
3Hxa58OLIwg61s5dcdfxaoJAPIFHBW79o5rc3iRJ5I79BOs+xT4Q6VXpHguxNR3r
5TSLKS9oSPXfMs4mJ+yCh79TTH2Zk+wqYLgNxH2abw+6qJ/E1SRadf4kdHIzEEyA
pnBTgmh5e5WhWT4/cfhQheBFs0i6KnBYp/tN8KGWA6arhHf+xiYc+lNmvGEMfV3o
An0GUmmzIZg9cnss/xXbuSzr7gf1gdciiFUIlO078g2BD6zdaoRORJlRaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6Blq9SM6QoSYoUhwnY/kUpZUUXMB8GA1UdIwQY
MBaAFOZoiuljI8H8+rVLKUVXOXtJsDvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5Zjgt
MGExZWYwZWMwNTc4LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5ZjgtMGExZWYwZWMwNTc4
LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABipklWav
hBYk5MsNL05NQMjCCTOYjqAVOBrRqSa7PcEOAJHIWrr0rqU4EjNJMQzGxTcEUe2Z
Pt+z2lKsx56Al1WpvoLR2tS8wblT772VElZLnFh/mAKD16R6MELoocnoPHcgVqh8
6HferY//jAGq0Vgl6N6D8R44ojwrSQ3ydEP+uHKyOdL2F+Sl/kInovdODknKv+Tm
m5xOwpwsAiOtshDIzSX417ZDGqfhIQO6RNwUTO9603XALczdJH43MBgYrtcf0jjf
xEuwvrDDuS83SVDPLiyXLn2ZokuQsSvIRJPLWzC59VxwdXKVYKy04ASPz3t3pwor
awBbGhvGnPg3xA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:12 2026 by rpki-client