Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier: tMQ+G6JNUWr06MgmeSuZhPMq6aCMimwANPLbXa972is=
Subject key identifier: 12:15:59:8B:CE:81:CA:85:D1:4D:DD:9E:B6:8A:B5:77:B8:68:E1:79
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 019D299760A631FC2983DF430B45FE7E3625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number: 1596
Signing time: Thu 26 Mar 2026 10:01:19 +0000
Manifest this update: Thu 26 Mar 2026 10:01:19 +0000
Manifest next update: Fri 27 Mar 2026 10:01:19 +0000
Files and hashes: 1: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: wEhnH2HBdZWQTlpebZlh6/7FW9gRBw+L7PVT0wo33g8=)
2: XSiU7-0SbDMQ_IdA4IB6KriuE3I.roa (hash: yT0rAcntGSaWEZ0ss06gXt5M4fgq/qjh8GeO0S2AMtY=)
3: _pR80NWgxj4Gx0LuVsPkMkTDYZg.roa (hash: 1gS4zptz0LFHVLhrqKXAHRNkXnwAvD1HMmz81y59cx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:60:a6:31:fc:29:83:df:43:0b:45:fe:7e:36:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Mar 26 10:01:19 2026 GMT
Not After : Mar 27 10:01:19 2026 GMT
Subject: CN=1215598bce81ca85d14ddd9eb68ab577b868e179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:b5:2b:b1:59:da:83:a2:88:e7:77:69:d2:
d5:72:b6:82:ac:45:8c:99:5a:30:05:3c:5f:83:15:
df:e3:a6:e4:60:68:0d:db:c7:1e:09:b3:60:60:2f:
3a:83:11:36:7c:c5:d5:14:01:41:e0:38:79:f5:61:
39:21:ee:59:7f:2b:ef:35:5b:61:16:80:65:81:a0:
a5:94:0c:04:45:a0:5c:75:2f:6b:65:e2:18:51:33:
f1:cb:56:ec:f5:e1:5c:07:e8:49:68:36:d6:4b:43:
86:ed:ec:d3:b7:b1:59:c6:c5:6c:25:65:2c:f6:8f:
6a:62:b4:b0:0d:d3:6e:36:88:89:80:35:ea:f7:25:
f1:62:56:cd:86:ab:7d:57:ef:e5:38:a1:09:bb:34:
5a:bd:f7:04:4f:ff:23:25:b0:0f:ef:58:de:fb:fa:
3b:a7:78:1d:f9:65:11:58:80:eb:d4:d2:b8:69:b1:
6f:7e:91:60:c8:01:8f:61:ea:ff:47:62:89:df:6e:
96:97:90:ef:2e:ed:8f:64:d8:f9:f2:ad:dc:73:18:
1f:9f:05:f2:68:0d:a4:5f:58:d6:fd:d8:45:e4:ae:
8d:7e:d8:51:78:32:79:2e:59:89:39:ab:0c:d6:90:
f0:26:a3:c4:c4:5a:a1:a2:8f:5c:bc:c9:2d:e0:b9:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:59:8B:CE:81:CA:85:D1:4D:DD:9E:B6:8A:B5:77:B8:68:E1:79
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:88:cb:ee:c2:f2:d3:df:43:af:b8:ad:99:22:28:e6:6a:22:
0b:0f:52:c1:f4:ec:16:ef:af:62:c0:c9:9d:b6:57:02:8d:e0:
58:6c:fd:2c:81:75:8c:a7:2f:0f:96:a5:cd:78:02:66:7e:4b:
49:ea:c2:bf:26:3b:49:c2:f9:70:fd:1e:e1:f7:48:da:59:ca:
c1:5a:15:b5:81:ab:ce:1b:16:88:78:e4:32:02:83:89:82:40:
e5:ee:8e:50:49:25:c8:bd:8e:b1:c0:82:16:fc:87:0c:7c:c4:
21:f9:72:34:a6:08:a0:9a:90:98:a2:8a:16:ea:37:82:3f:4c:
1d:a5:db:db:84:a4:fa:92:35:64:04:d4:ba:42:5d:8c:20:90:
0d:ad:bc:48:35:2c:ec:44:a6:a9:14:89:3b:a7:35:f7:59:b7:
f0:05:dc:0a:e5:79:b9:37:e7:fe:a0:96:33:33:2a:d2:38:19:
53:8b:e6:c3:91:39:05:c1:90:19:24:a6:6b:11:49:72:2f:7d:
1e:ce:f2:d8:49:2d:64:1d:40:71:f1:83:32:07:a4:ed:9a:1e:
d0:97:82:b1:3b:ea:9a:a0:ea:66:a6:b0:0b:f8:f5:8d:3a:be:
a1:6b:f5:0b:b6:4e:f8:bd:99:6a:fe:4e:59:0a:62:ba:44:a3:
39:66:c2:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl2CmMfwpg99DC0X+fjYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmEzZjgzODY4ODg0Mzc1OGQyODA1NzAwN2RjNmNkMjg5
OGVjY2EwHhcNMjYwMzI2MTAwMTE5WhcNMjYwMzI3MTAwMTE5WjAzMTEwLwYDVQQD
EygxMjE1NTk4YmNlODFjYTg1ZDE0ZGRkOWViNjhhYjU3N2I4NjhlMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MW1K7FZ2oOiiOd3adLVcraCrEWM
mVowBTxfgxXf46bkYGgN28ceCbNgYC86gxE2fMXVFAFB4Dh59WE5Ie5ZfyvvNVth
FoBlgaCllAwERaBcdS9rZeIYUTPxy1bs9eFcB+hJaDbWS0OG7ezTt7FZxsVsJWUs
9o9qYrSwDdNuNoiJgDXq9yXxYlbNhqt9V+/lOKEJuzRavfcET/8jJbAP71je+/o7
p3gd+WURWIDr1NK4abFvfpFgyAGPYer/R2KJ326Wl5DvLu2PZNj58q3ccxgfnwXy
aA2kX1jW/dhF5K6NfthReDJ5LlmJOasM1pDwJqPExFqhoo9cvMkt4LlKuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIVWYvOgcqF0U3dnraKtXe4aOF5MB8GA1UdIwQY
MBaAFORqP4OGiIQ3WNKAVwB9xs0omOzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMt
YTNiMDZkNGU0Nzc1LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMtYTNiMDZkNGU0Nzc1
LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIjL7sLy
099Dr7itmSIo5moiCw9SwfTsFu+vYsDJnbZXAo3gWGz9LIF1jKcvD5alzXgCZn5L
SerCvyY7ScL5cP0e4fdI2lnKwVoVtYGrzhsWiHjkMgKDiYJA5e6OUEklyL2OscCC
FvyHDHzEIflyNKYIoJqQmKKKFuo3gj9MHaXb24Sk+pI1ZATUukJdjCCQDa28SDUs
7ESmqRSJO6c191m38AXcCuV5uTfn/qCWMzMq0jgZU4vmw5E5BcGQGSSmaxFJci99
Hs7y2EktZB1AcfGDMgek7Zoe0JeCsTvqmqDqZqawC/j1jTq+oWv1C7ZO+L2Zav5O
WQpiukSjOWbCbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:41 2026 by rpki-client