Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: mJL3Q//rUXwsaxU7HpjiyT113tTurQtGi+yuunfTLkE=
Subject key identifier: E3:3A:3C:1A:B8:77:65:44:C8:F9:C4:22:9E:28:F3:D0:33:D3:26:FE
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019D284DF18C5DE58E406A80EC81543DAF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0E86
Signing time: Thu 26 Mar 2026 04:01:29 +0000
Manifest this update: Thu 26 Mar 2026 04:01:29 +0000
Manifest next update: Fri 27 Mar 2026 04:01:29 +0000
Files and hashes: 1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: tJJ1OL4uaOjp36//a+wuQPA7EKK6bVosvUEaBYMrmto=)
2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f1:8c:5d:e5:8e:40:6a:80:ec:81:54:3d:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Mar 26 04:01:29 2026 GMT
Not After : Mar 27 04:01:29 2026 GMT
Subject: CN=e33a3c1ab8776544c8f9c4229e28f3d033d326fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:6e:19:b8:b0:6d:13:01:aa:9f:ce:90:93:
c0:61:3d:11:1f:a8:b2:39:ee:61:cc:a8:6a:97:d9:
4e:ad:1a:10:02:7f:d2:12:b4:f7:55:0a:ba:ac:ea:
f6:41:a1:39:0a:05:d5:54:65:81:eb:4b:15:b7:f2:
99:e7:4f:07:da:86:a4:8f:a3:9b:c1:06:df:f6:50:
09:e3:13:fe:f0:9c:19:1e:fc:52:e8:a1:ba:bd:95:
ba:09:01:dc:fb:68:0d:3a:8c:12:5c:80:9d:f4:ff:
57:8e:7d:96:dd:0b:ea:d8:a9:1e:66:3b:7f:9d:30:
ab:c8:18:cd:b4:97:7a:49:6f:87:68:7c:f5:ba:49:
56:9c:3c:d0:4e:65:e7:ea:32:35:99:ff:b0:49:0e:
32:d1:8d:e7:08:e6:4b:4b:37:64:66:cb:52:55:7d:
48:30:b5:d0:0b:40:cd:ba:f5:0f:91:c7:8c:32:8b:
ef:4d:c4:00:6b:b9:33:bf:83:10:35:3e:a9:23:e4:
aa:19:89:15:a9:9e:32:96:8d:da:3a:dc:16:62:44:
81:09:33:7e:bd:c9:93:69:36:ed:37:53:c0:e4:8d:
7e:b5:77:f1:a0:e1:b9:b0:86:3f:62:90:dc:de:ba:
15:89:49:c2:98:53:aa:55:ca:78:d9:88:32:43:2b:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:3C:1A:B8:77:65:44:C8:F9:C4:22:9E:28:F3:D0:33:D3:26:FE
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c8:70:cd:81:2b:86:df:db:ea:28:c5:2d:cb:b7:8d:e9:f8:
ca:b0:0b:0e:5f:26:5b:bd:e6:90:38:1f:a9:b9:8b:af:43:7f:
74:6d:5e:32:16:72:71:80:25:e0:ad:4a:df:03:e0:e5:07:15:
0b:26:c8:fe:e1:ba:6e:dc:f8:b6:91:d2:1a:92:63:bc:d7:50:
b2:26:d4:6a:9b:68:4b:83:9f:91:68:e3:bb:3d:8e:3b:cc:b0:
30:35:f9:21:8c:cd:a6:d5:3a:c0:a6:54:ce:37:99:e4:3f:84:
98:a8:e4:05:51:e8:24:cb:98:e4:47:e2:e4:a4:9d:3b:be:91:
3b:6b:ce:a5:d4:ca:0a:ee:cf:97:e6:7c:f1:69:61:2d:f0:82:
27:fd:10:1a:65:f0:17:3d:1c:cf:2d:62:9b:34:cc:48:12:ad:
f6:96:06:65:07:56:58:c3:13:fa:b4:bf:c9:1e:05:a1:4f:d5:
61:8f:97:62:0d:c5:e5:f9:93:0d:12:51:2a:0e:93:ae:86:c8:
60:9a:34:41:d6:63:4d:63:b8:b6:d8:88:75:ed:58:48:91:d0:
4c:94:81:3a:ec:61:71:15:e9:52:9f:89:2d:a8:fe:43:90:29:
96:c7:96:ca:93:db:b1:43:94:4e:8c:77:f6:c7:a8:ac:4c:38:
3b:d1:bb:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTfGMXeWOQGqA7IFUPa9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5
M2FjM2EwHhcNMjYwMzI2MDQwMTI5WhcNMjYwMzI3MDQwMTI5WjAzMTEwLwYDVQQD
EyhlMzNhM2MxYWI4Nzc2NTQ0YzhmOWM0MjI5ZTI4ZjNkMDMzZDMyNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO5uGbiwbRMBqp/OkJPAYT0RH6iy
Oe5hzKhql9lOrRoQAn/SErT3VQq6rOr2QaE5CgXVVGWB60sVt/KZ508H2oakj6Ob
wQbf9lAJ4xP+8JwZHvxS6KG6vZW6CQHc+2gNOowSXICd9P9Xjn2W3Qvq2KkeZjt/
nTCryBjNtJd6SW+HaHz1uklWnDzQTmXn6jI1mf+wSQ4y0Y3nCOZLSzdkZstSVX1I
MLXQC0DNuvUPkceMMovvTcQAa7kzv4MQNT6pI+SqGYkVqZ4ylo3aOtwWYkSBCTN+
vcmTaTbtN1PA5I1+tXfxoOG5sIY/YpDc3roViUnCmFOqVcp42YgyQysYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOM6PBq4d2VEyPnEIp4o89Az0yb+MB8GA1UdIwQY
MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt
MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4
LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArchwzYEr
ht/b6ijFLcu3jen4yrALDl8mW73mkDgfqbmLr0N/dG1eMhZycYAl4K1K3wPg5QcV
CybI/uG6btz4tpHSGpJjvNdQsibUaptoS4OfkWjjuz2OO8ywMDX5IYzNptU6wKZU
zjeZ5D+EmKjkBVHoJMuY5Efi5KSdO76RO2vOpdTKCu7Pl+Z88WlhLfCCJ/0QGmXw
Fz0czy1imzTMSBKt9pYGZQdWWMMT+rS/yR4FoU/VYY+XYg3F5fmTDRJRKg6TrobI
YJo0QdZjTWO4ttiIde1YSJHQTJSBOuxhcRXpUp+JLaj+Q5AplseWypPbsUOUTox3
9seorEw4O9G79A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:57 2026 by rpki-client