Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: PSWkR2RVeZBHDRG3sLbipurJn6UerrgiuHZnGCC+180=
Subject key identifier: 70:7F:84:00:38:B0:AB:2F:7F:F9:E2:DC:C3:0E:4D:A3:AE:84:98:6E
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 019D27DF94C3F3390178314BE6DE29C7FE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: xcTOTrsIeU4F79fPr6rIdAweZrg5ETnTd68pibKWlIk=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:94:c3:f3:39:01:78:31:4b:e6:de:29:c7:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=707f840038b0ab2f7ff9e2dcc30e4da3ae84986e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:76:76:98:66:6e:fe:ca:66:67:5a:e0:67:
b4:68:ed:d9:96:de:17:d5:b2:fa:38:91:a5:f4:5e:
a4:5a:ff:5f:b6:86:6e:c3:eb:2d:b9:d0:a2:45:a0:
01:b3:e7:88:97:70:2a:32:35:c4:70:4f:65:c5:ac:
a7:06:65:b0:45:a4:67:8c:23:1e:c1:04:8b:05:db:
e9:a8:12:5e:31:d8:09:e9:d3:e2:cf:aa:9c:4f:9b:
48:eb:73:02:b2:03:99:e9:19:cb:01:98:6e:bd:92:
bb:ff:52:c7:40:ea:70:2e:57:8f:e6:4f:83:31:e7:
b1:a1:45:67:f9:fb:60:7c:55:0b:5c:95:64:e9:bb:
ca:8e:29:38:d4:cd:fb:9c:f6:8d:89:7c:0a:2b:ab:
0e:8f:8e:11:4e:2c:42:f7:b0:ee:7e:5e:c8:81:cd:
c3:03:3f:9a:c0:2b:82:10:12:47:08:2f:59:05:f0:
41:52:9b:c5:b8:c7:52:ce:6f:67:7c:ac:8f:6f:e1:
64:e2:36:dd:66:98:41:f4:54:ba:40:16:09:63:b3:
46:67:32:9d:e6:c1:20:31:db:79:46:38:d5:01:fb:
aa:b6:ce:01:99:37:44:29:62:a4:f1:2e:7c:f5:d3:
dd:a7:29:1c:07:99:60:c9:68:42:02:42:f4:ce:57:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:84:00:38:B0:AB:2F:7F:F9:E2:DC:C3:0E:4D:A3:AE:84:98:6E
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2c:2d:74:57:78:13:ab:3d:fe:74:96:57:5d:61:60:eb:70:
eb:10:ea:f3:eb:96:75:fb:48:d6:7d:a2:f0:95:70:0e:40:eb:
79:4d:9d:05:65:04:a7:37:00:37:e8:e6:1a:07:78:80:79:4b:
8f:17:7e:49:3f:15:63:d7:84:ce:de:7a:ef:ec:16:0e:96:b5:
e7:28:0a:8a:e0:d7:47:1f:90:13:d5:4e:5c:df:cb:b9:89:b0:
66:5d:68:a4:f9:24:51:35:61:ef:1b:87:32:41:3e:80:67:1a:
27:13:01:9a:58:b9:9c:f1:c5:a3:79:90:50:0f:b1:85:5e:70:
8f:3c:23:a0:6d:ed:14:8b:3a:5b:a9:22:e0:64:83:d1:9a:f7:
78:99:d6:99:23:ee:61:3e:77:57:e4:32:f7:43:b5:25:8d:8f:
04:41:33:75:10:a0:57:99:f5:5f:b8:da:2b:ef:85:84:34:b0:
0c:f5:c8:0d:1a:c8:f2:ba:bc:13:bd:18:1d:6c:9f:65:46:31:
55:8f:06:9a:c3:cb:f1:8e:fa:84:85:1d:88:71:11:7a:2c:ec:
07:28:0c:33:df:7c:88:0b:e3:ca:7f:86:57:cc:0b:8f:c0:39:
2f:e3:7f:86:59:b3:ad:d6:5d:de:42:8d:1c:ed:13:05:fb:b9:
be:ef:8a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n35TD8zkBeDFL5t4px/6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5
MzViODgwHhcNMjYwMzI2MDIwMDU3WhcNMjYwMzI3MDIwMDU3WjAzMTEwLwYDVQQD
Eyg3MDdmODQwMDM4YjBhYjJmN2ZmOWUyZGNjMzBlNGRhM2FlODQ5ODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFV2dphmbv7KZmda4Ge0aO3Zlt4X
1bL6OJGl9F6kWv9ftoZuw+studCiRaABs+eIl3AqMjXEcE9lxaynBmWwRaRnjCMe
wQSLBdvpqBJeMdgJ6dPiz6qcT5tI63MCsgOZ6RnLAZhuvZK7/1LHQOpwLleP5k+D
MeexoUVn+ftgfFULXJVk6bvKjik41M37nPaNiXwKK6sOj44RTixC97Dufl7Igc3D
Az+awCuCEBJHCC9ZBfBBUpvFuMdSzm9nfKyPb+Fk4jbdZphB9FS6QBYJY7NGZzKd
5sEgMdt5RjjVAfuqts4BmTdEKWKk8S589dPdpykcB5lgyWhCAkL0zlcOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHB/hAA4sKsvf/ni3MMOTaOuhJhuMB8GA1UdIwQY
MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt
ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz
LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiwtdFd4
E6s9/nSWV11hYOtw6xDq8+uWdftI1n2i8JVwDkDreU2dBWUEpzcAN+jmGgd4gHlL
jxd+ST8VY9eEzt567+wWDpa15ygKiuDXRx+QE9VOXN/LuYmwZl1opPkkUTVh7xuH
MkE+gGcaJxMBmli5nPHFo3mQUA+xhV5wjzwjoG3tFIs6W6ki4GSD0Zr3eJnWmSPu
YT53V+Qy90O1JY2PBEEzdRCgV5n1X7jaK++FhDSwDPXIDRrI8rq8E70YHWyfZUYx
VY8GmsPL8Y76hIUdiHEReizsBygMM998iAvjyn+GV8wLj8A5L+N/hlmzrdZd3kKN
HO0TBfu5vu+KHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:09 2026 by rpki-client