Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: 2rkr84IkarvHyiNt8IDPl7l5K24cSe3TFc1dE/gvE2Y=
Subject key identifier: 75:17:FF:69:A7:4E:E7:CD:7F:C2:97:95:A2:7D:1D:C7:1D:FD:F2:27
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 019D265F0B53D37D854BEEBB2D07063D2CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 0B69
Signing time: Wed 25 Mar 2026 19:00:56 +0000
Manifest this update: Wed 25 Mar 2026 19:00:56 +0000
Manifest next update: Thu 26 Mar 2026 19:00:56 +0000
Files and hashes: 1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=)
2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=)
3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: iLkPHsfmJoTrlAjb028t3FyVaFTNZwi6enXgIqx8PEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:0b:53:d3:7d:85:4b:ee:bb:2d:07:06:3d:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Mar 25 19:00:56 2026 GMT
Not After : Mar 26 19:00:56 2026 GMT
Subject: CN=7517ff69a74ee7cd7fc29795a27d1dc71dfdf227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:a6:1f:07:d7:5e:58:95:42:d4:1e:c3:01:78:
d9:6e:d2:a4:2e:7c:6e:fa:1b:1a:df:0d:36:22:f3:
bc:19:73:19:d8:d9:a2:e5:23:2b:0d:98:30:02:cd:
4f:b6:59:0c:98:46:ed:a4:1e:7e:9b:0b:1c:3b:dc:
e2:f2:1e:23:7d:91:e7:cc:41:00:1c:35:00:dc:39:
47:62:1c:e0:5c:e4:e8:97:2b:17:46:66:27:54:25:
91:47:dd:f3:6a:57:ae:a4:f6:46:90:d8:66:cc:cc:
de:c4:ec:3e:fa:45:ad:43:71:86:7c:e0:58:dc:9f:
12:53:fd:87:75:b8:02:8c:c3:2f:b3:5e:9f:06:c7:
59:ff:96:c8:2c:24:6f:a9:80:a0:b9:e3:42:c8:ac:
5c:d4:f7:18:57:89:86:36:ae:f4:0c:48:21:4b:76:
f1:a1:96:ff:bf:37:df:80:33:06:96:8f:27:32:bc:
6d:c2:5b:a6:39:bc:95:bf:da:26:bd:8b:1f:e1:1d:
5a:f6:cb:21:ab:70:42:51:da:cc:88:59:98:e6:5c:
93:ca:5a:13:04:b9:29:2b:a5:23:53:78:f1:db:aa:
69:83:80:10:07:66:bd:f9:79:ed:19:19:81:d1:78:
ba:83:35:13:bd:3b:29:f2:27:b9:48:5f:0a:49:d8:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:17:FF:69:A7:4E:E7:CD:7F:C2:97:95:A2:7D:1D:C7:1D:FD:F2:27
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4d:80:08:8f:cb:31:c4:0c:42:69:f2:5a:bf:8c:24:28:ea:
5d:ee:09:d7:93:7e:fe:d6:9e:3d:2e:3e:19:aa:8a:fc:09:cf:
17:0c:dd:c7:58:76:58:2d:f4:e3:ef:bf:3e:54:aa:7d:d6:db:
2a:75:fb:f1:71:65:2b:5d:a1:be:5c:c0:fe:ef:d4:e2:b9:4a:
5d:12:bb:99:58:f1:14:5d:ea:88:13:d3:b2:0e:e7:20:fc:b2:
2c:af:dc:18:13:a3:c0:2a:88:2f:72:b5:55:c5:59:82:f9:39:
b7:fe:9a:52:ae:b1:0c:c5:7c:db:e7:3e:eb:08:9f:45:51:4e:
81:7a:7a:71:67:c7:fa:be:b5:61:a6:9a:9b:e0:9e:17:f4:89:
66:2b:58:10:e4:6b:d0:cd:c7:72:33:8a:9c:33:9b:61:22:71:
26:f1:56:75:b1:16:da:ea:b6:b6:e6:55:44:d5:c6:59:d5:cb:
6f:7f:0f:48:9d:91:c5:62:35:da:db:c9:aa:74:e9:61:03:d1:
33:f1:f4:0e:b8:98:2a:e9:4a:a5:98:59:b1:c4:a3:cc:ee:1e:
08:39:0f:f8:15:90:e1:f6:88:0e:b0:81:d1:d0:28:bd:71:a7:
84:29:f7:e7:cd:ab:8d:b5:ab:eb:ec:3e:c8:42:06:bd:fa:72:
99:7d:ec:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXwtT032FS+67LQcGPSzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz
YTVhNzcwHhcNMjYwMzI1MTkwMDU2WhcNMjYwMzI2MTkwMDU2WjAzMTEwLwYDVQQD
Eyg3NTE3ZmY2OWE3NGVlN2NkN2ZjMjk3OTVhMjdkMWRjNzFkZmRmMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/aYfB9deWJVC1B7DAXjZbtKkLnxu
+hsa3w02IvO8GXMZ2Nmi5SMrDZgwAs1PtlkMmEbtpB5+mwscO9zi8h4jfZHnzEEA
HDUA3DlHYhzgXOTolysXRmYnVCWRR93zaleupPZGkNhmzMzexOw++kWtQ3GGfOBY
3J8SU/2HdbgCjMMvs16fBsdZ/5bILCRvqYCgueNCyKxc1PcYV4mGNq70DEghS3bx
oZb/vzffgDMGlo8nMrxtwlumObyVv9omvYsf4R1a9sshq3BCUdrMiFmY5lyTyloT
BLkpK6UjU3jx26ppg4AQB2a9+XntGRmB0Xi6gzUTvTsp8ie5SF8KSdi8vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUX/2mnTufNf8KXlaJ9Hccd/fInMB8GA1UdIwQY
MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt
ZmUxMDNmZDM4NTdjLzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj
LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWU2ACI/L
McQMQmnyWr+MJCjqXe4J15N+/taePS4+GaqK/AnPFwzdx1h2WC304++/PlSqfdbb
KnX78XFlK12hvlzA/u/U4rlKXRK7mVjxFF3qiBPTsg7nIPyyLK/cGBOjwCqIL3K1
VcVZgvk5t/6aUq6xDMV82+c+6wifRVFOgXp6cWfH+r61Yaaam+CeF/SJZitYEORr
0M3HcjOKnDObYSJxJvFWdbEW2uq2tuZVRNXGWdXLb38PSJ2RxWI12tvJqnTpYQPR
M/H0DriYKulKpZhZscSjzO4eCDkP+BWQ4faIDrCB0dAovXGnhCn3582rjbWr6+w+
yEIGvfpymX3slA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:37 2026 by rpki-client