Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: +e6GRoks3Bn/gPs4Dh+zz0/yOCzIOWLuTcmFjZZjZTA=
Subject key identifier: D7:7F:5A:0E:06:46:1C:09:AA:2A:CE:CD:77:CB:C3:F5:96:E3:D8:00
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 019D26963B4FF35503C5A9481A26B0D9EE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: QHZJkcNNGasJ6ZTJXRdJue8UBE9y1L7MDKBNf2bFr9Y=)
3: Oa_sii1Clbbek1SF0NauE94faXI.asa (hash: YEmLQlVRuHxGBIqwaUaToyDICFpczhTHLQZcRXVFos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3b:4f:f3:55:03:c5:a9:48:1a:26:b0:d9:ee:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=d77f5a0e06461c09aa2acecd77cbc3f596e3d800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:ca:aa:ba:6e:01:76:78:08:6c:43:6a:02:
7d:33:c3:fc:c8:dd:ea:7c:69:d2:f7:63:0f:86:8f:
7e:29:00:16:84:08:17:c5:9f:6e:88:d1:45:db:68:
c6:b7:06:8c:d5:47:68:15:aa:c7:c5:4d:57:a3:c5:
32:3a:ca:21:78:e9:bc:11:1e:b6:26:c6:b8:25:f2:
06:7e:e7:73:26:a8:e5:c2:c7:57:48:85:25:22:ec:
be:53:cb:37:c4:89:67:bb:43:59:3c:dd:13:7b:6f:
80:86:14:34:ac:6d:b4:bd:b5:41:79:3a:99:b7:43:
0e:5d:5d:86:ff:5f:6f:b6:9f:19:d3:ed:5c:b0:10:
92:2c:9b:d5:3d:ef:13:a2:dc:9b:ab:9d:18:a0:13:
b1:95:4a:db:26:ab:25:e2:5d:1d:2c:e0:d3:d1:bf:
4f:09:b7:f1:c8:bd:91:f2:9b:4c:e6:64:d9:a2:04:
eb:a6:c4:d6:8c:57:d0:c3:ad:dd:7b:4e:82:b4:16:
d4:f1:79:05:6a:34:c6:ba:ab:d5:3e:ec:b0:d9:e8:
f3:62:b3:2b:0c:4b:a8:16:2e:53:03:10:5b:a5:4f:
7b:cc:5d:94:fc:ab:93:be:f1:18:a6:c3:fb:8a:4f:
45:87:6f:ef:6c:cf:ed:ad:ff:f3:0e:f5:b5:44:2e:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7F:5A:0E:06:46:1C:09:AA:2A:CE:CD:77:CB:C3:F5:96:E3:D8:00
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7e:4b:17:ae:5f:b5:6c:68:dd:6b:82:e6:f9:b4:fa:4c:dd:
92:25:6d:ef:27:55:79:3f:29:74:13:85:e9:ba:70:ea:77:96:
69:bf:cc:fb:e9:8c:22:73:28:75:d0:a8:15:06:08:e6:4d:8f:
0b:ee:4e:e2:94:82:35:d4:f1:7a:03:09:5d:25:1c:77:78:89:
7c:b8:67:39:01:a5:88:ab:f4:bd:b3:98:e5:20:e6:98:80:8b:
f6:93:a5:71:7a:17:7f:18:56:e2:2a:da:f8:5d:12:ae:1d:50:
d3:45:92:c8:82:27:54:fc:0b:70:05:17:11:27:27:1b:b7:e0:
1e:d2:a1:f8:48:09:dc:07:d3:1e:46:e8:72:b7:f4:19:af:cd:
58:c3:ec:7f:19:13:fa:0e:2f:38:7a:ae:83:f6:19:7f:5a:79:
c0:c1:a3:38:01:77:21:90:d0:47:71:d6:bd:b5:15:fb:a3:2c:
a3:46:f4:57:e3:c2:f1:15:f5:59:00:67:d2:16:f4:37:b3:30:
45:fe:e4:11:f0:aa:ff:e3:2a:e5:2d:d0:c1:48:72:9a:49:c8:
86:1f:38:94:30:f1:e7:70:6f:ef:0d:cf:99:6d:29:17:1e:fc:
56:42:a6:e5:b5:28:ef:b2:74:15:91:2e:36:9c:bd:62:cd:27:
c0:67:06:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljtP81UDxalIGiaw2e6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NGQwOTIwNDdkYmU5YTk2OGExNjBmMzE1ZmFiOWJiOWM4
MzU2ZDcwHhcNMjYwMzI1MjAwMTEyWhcNMjYwMzI2MjAwMTEyWjAzMTEwLwYDVQQD
EyhkNzdmNWEwZTA2NDYxYzA5YWEyYWNlY2Q3N2NiYzNmNTk2ZTNkODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB3KqrpuAXZ4CGxDagJ9M8P8yN3q
fGnS92MPho9+KQAWhAgXxZ9uiNFF22jGtwaM1UdoFarHxU1Xo8UyOsoheOm8ER62
Jsa4JfIGfudzJqjlwsdXSIUlIuy+U8s3xIlnu0NZPN0Te2+AhhQ0rG20vbVBeTqZ
t0MOXV2G/19vtp8Z0+1csBCSLJvVPe8Totybq50YoBOxlUrbJqsl4l0dLODT0b9P
CbfxyL2R8ptM5mTZogTrpsTWjFfQw63de06CtBbU8XkFajTGuqvVPuyw2ejzYrMr
DEuoFi5TAxBbpU97zF2U/KuTvvEYpsP7ik9Fh2/vbM/trf/zDvW1RC5pJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd/Wg4GRhwJqirOzXfLw/WW49gAMB8GA1UdIwQY
MBaAFOVNCSBH2+mpaKFg8xX6ubucg1bXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQt
YTdmZDJmOWU3NGNmLzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQtYTdmZDJmOWU3NGNm
LzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoX5LF65f
tWxo3WuC5vm0+kzdkiVt7ydVeT8pdBOF6bpw6neWab/M++mMInModdCoFQYI5k2P
C+5O4pSCNdTxegMJXSUcd3iJfLhnOQGliKv0vbOY5SDmmICL9pOlcXoXfxhW4ira
+F0Srh1Q00WSyIInVPwLcAUXEScnG7fgHtKh+EgJ3AfTHkbocrf0Ga/NWMPsfxkT
+g4vOHqug/YZf1p5wMGjOAF3IZDQR3HWvbUV+6Mso0b0V+PC8RX1WQBn0hb0N7Mw
Rf7kEfCq/+Mq5S3QwUhymknIhh84lDDx53Bv7w3PmW0pFx78VkKm5bUo77J0FZEu
Npy9Ys0nwGcGHw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:15 2026 by rpki-client