Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier: XANLe8MpdWyjGP6c7efaipFBAmIaslswqjRQIX6+GlQ=
Subject key identifier: 3A:E8:C4:21:95:B4:60:26:5F:55:51:08:19:2B:D0:27:8C:52:B1:8E
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial: 019D262889C509B258CF536A4D4497FE6C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number: 16CC
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: yD8nW6BeCnMnflb6dYTaI5rc0KXU1Qsgt/bvXF1bKhg=)
2: 660vFFGpn8clSWO6FY_HjESqHac.roa (hash: PavhF4oz19TrgmDV4DTkSyfBE4qBlY8WfjSQlelqWBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:89:c5:09:b2:58:cf:53:6a:4d:44:97:fe:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=3ae8c42195b460265f555108192bd0278c52b18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:42:3c:5a:23:89:d7:12:68:21:c5:93:51:
06:c5:05:80:73:0d:bf:a3:53:00:5d:27:42:73:51:
b5:bc:ea:82:a0:47:4a:98:bc:24:7d:eb:e4:ac:aa:
14:ec:0a:2c:49:e8:d9:08:07:67:09:fb:6e:6d:de:
ec:3f:0b:ee:7a:ab:9e:71:2b:ef:83:72:1e:d8:84:
fe:56:96:b8:9b:77:a6:df:e5:73:8d:86:c2:f8:44:
06:c2:b6:9b:0e:c9:67:bc:9e:74:23:81:43:c7:2e:
7f:6f:cf:ba:75:63:d1:c1:f7:bc:ff:e5:1b:f2:78:
d5:e6:43:46:79:e0:9c:da:57:04:86:af:b0:e2:81:
c7:df:0d:dc:5d:b2:38:55:a1:55:86:21:5f:02:d2:
5c:fc:01:6b:1c:1d:55:43:3d:16:44:01:73:e8:94:
9a:c1:51:df:39:49:cb:ed:94:15:fc:0f:70:b3:54:
80:82:90:41:49:ff:7d:65:1c:41:3a:ca:a1:b9:0b:
f0:53:c0:ea:04:c8:a9:05:92:2e:37:fd:13:ec:04:
95:42:92:6c:2c:0e:51:0e:e3:26:75:d9:cb:1e:50:
24:6a:cb:4e:1a:ae:70:90:b9:34:90:5c:32:73:0b:
cb:c0:b2:59:94:bc:c2:78:1e:39:69:f6:be:9d:f8:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:C4:21:95:B4:60:26:5F:55:51:08:19:2B:D0:27:8C:52:B1:8E
X509v3 Authority Key Identifier:
keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3d:f1:3a:a3:41:79:05:e8:24:66:7e:9f:0e:81:1b:5d:55:
85:e0:a4:3b:e2:99:e6:0b:5d:91:21:33:67:e4:bc:cd:4d:9c:
ac:4a:7f:f4:32:75:ef:9e:2d:eb:56:28:68:80:1f:d8:af:a0:
ef:00:13:65:6c:30:ee:f0:18:e4:96:d5:44:81:cc:d3:3e:b1:
1b:45:f6:6d:9b:7d:03:94:06:be:49:fd:01:5f:18:a9:f6:f8:
50:37:72:e8:f8:07:c5:92:bb:a8:37:c6:50:0b:79:71:b9:49:
8f:2b:2e:ce:37:0d:68:96:39:1e:2d:7b:05:06:9b:c1:bc:ed:
e0:08:bc:e7:a4:5e:f1:2c:32:d0:aa:f5:e1:43:1f:fb:6d:c3:
9b:b0:ce:5c:29:49:88:2c:8e:5d:62:7c:a5:35:42:07:8f:ca:
39:d9:8d:81:c9:5c:72:a8:88:ed:ef:4d:07:59:af:0b:b9:73:
37:e2:c8:0c:4a:1a:4f:48:93:6f:1e:37:a8:f4:ce:d6:59:15:
1b:00:e6:dd:2e:9d:8d:b1:30:e8:22:b1:36:36:ea:84:41:92:
05:a9:ed:ec:3c:ef:2b:bd:6c:a6:bc:c5:e7:ed:92:42:0e:aa:
c6:50:b8:83:da:8d:84:4e:a8:3a:83:72:9d:b7:f8:fa:81:5d:
08:eb:04:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKInFCbJYz1NqTUSX/mxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzlmZmYyZjhlZDBkNjVhYWQwYjk0ZjgwMzZmMmVlMWFl
ZWVhMGEwHhcNMjYwMzI1MTgwMTIzWhcNMjYwMzI2MTgwMTIzWjAzMTEwLwYDVQQD
EygzYWU4YzQyMTk1YjQ2MDI2NWY1NTUxMDgxOTJiZDAyNzhjNTJiMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb5CPFojidcSaCHFk1EGxQWAcw2/
o1MAXSdCc1G1vOqCoEdKmLwkfevkrKoU7AosSejZCAdnCftubd7sPwvuequecSvv
g3Ie2IT+Vpa4m3em3+VzjYbC+EQGwrabDslnvJ50I4FDxy5/b8+6dWPRwfe8/+Ub
8njV5kNGeeCc2lcEhq+w4oHH3w3cXbI4VaFVhiFfAtJc/AFrHB1VQz0WRAFz6JSa
wVHfOUnL7ZQV/A9ws1SAgpBBSf99ZRxBOsqhuQvwU8DqBMipBZIuN/0T7ASVQpJs
LA5RDuMmddnLHlAkastOGq5wkLk0kFwycwvLwLJZlLzCeB45afa+nfgV5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDroxCGVtGAmX1VRCBkr0CeMUrGOMB8GA1UdIwQY
MBaAFOXJ//L47Q1lqtC5T4A28u4a7uoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hZjIzYzYtZWZlYy00OTFiLTg3Y2Qt
OWZhYTYyYTFmMTc4LzEvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hZjIzYzYtZWZlYy00OTFiLTg3Y2QtOWZhYTYyYTFmMTc4
LzEvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgT3xOqNB
eQXoJGZ+nw6BG11VheCkO+KZ5gtdkSEzZ+S8zU2crEp/9DJ1754t61YoaIAf2K+g
7wATZWww7vAY5JbVRIHM0z6xG0X2bZt9A5QGvkn9AV8Yqfb4UDdy6PgHxZK7qDfG
UAt5cblJjysuzjcNaJY5Hi17BQabwbzt4Ai856Re8Swy0Kr14UMf+23Dm7DOXClJ
iCyOXWJ8pTVCB4/KOdmNgclccqiI7e9NB1mvC7lzN+LIDEoaT0iTbx43qPTO1lkV
GwDm3S6djbEw6CKxNjbqhEGSBant7DzvK71sprzF5+2SQg6qxlC4g9qNhE6oOoNy
nbf4+oFdCOsEHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:52 2026 by rpki-client