
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: AWRhUHPU9/XTeT9Q+GT7wl7YH/PpqYTQaydHN6nNIEg=
Subject key identifier: B4:13:9A:46:A4:4F:AE:E4:DF:1F:07:AD:92:9E:F6:91:41:F4:43:F7
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 019D2BF310DD5719C373C60EF975D7AFD111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 13CB
Signing time: Thu 26 Mar 2026 21:00:42 +0000
Manifest this update: Thu 26 Mar 2026 21:00:42 +0000
Manifest next update: Fri 27 Mar 2026 21:00:42 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: WsmW8sPsl8vxqcXVJEjF+aCoZrLgh6LR+gFiE77MPyo=)
2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
4: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:10:dd:57:19:c3:73:c6:0e:f9:75:d7:af:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Mar 26 21:00:42 2026 GMT
Not After : Mar 27 21:00:42 2026 GMT
Subject: CN=b4139a46a44faee4df1f07ad929ef69141f443f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:87:5a:a3:c3:03:ed:07:41:84:d8:34:3e:
78:78:cf:77:e8:1c:85:8b:0b:58:33:a8:87:cf:31:
1c:de:68:26:7e:74:1e:30:fc:88:5f:43:c9:41:d4:
e5:60:d9:e0:c1:54:ea:d2:1f:25:3b:8e:fb:d0:c9:
cd:3a:85:c4:93:b9:11:f1:88:9d:52:44:f7:75:fc:
df:08:7a:f3:e6:7d:be:74:c7:8e:2d:69:03:c5:1d:
e9:9e:5d:c9:e1:3d:cc:08:1b:7c:d2:ca:20:4f:a4:
fa:a8:68:1f:33:96:8a:ff:06:1f:bd:aa:e6:1f:27:
3d:50:4f:92:ac:2a:ac:74:01:08:3f:b8:44:ab:8b:
6e:dd:6a:32:dd:d4:a1:3d:1d:e7:b7:4b:fb:61:8e:
fe:7f:d5:0d:62:0d:74:72:7f:ff:02:51:bb:93:04:
a7:d3:b1:29:ce:01:93:f1:83:15:95:fe:55:00:d8:
5f:81:62:97:b0:0d:4a:a8:79:ff:bb:33:71:b8:db:
03:80:a7:c4:86:57:8e:70:ec:c0:86:01:6a:28:b4:
6f:30:64:90:54:f7:4c:2a:6d:9e:74:81:8c:b0:dd:
c3:ec:fc:ca:04:a6:49:58:c0:ac:bf:35:60:85:a7:
cb:2c:49:cb:28:ea:e1:9f:2b:d6:31:fa:fa:d2:11:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:13:9A:46:A4:4F:AE:E4:DF:1F:07:AD:92:9E:F6:91:41:F4:43:F7
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2b:01:4c:45:20:33:40:0c:fa:59:c3:4b:33:0c:52:6d:7a:
26:40:ce:1f:35:00:99:d2:4f:00:93:41:34:80:5b:b5:92:0c:
c9:23:73:aa:7e:14:ed:a5:66:87:65:92:19:97:29:69:b8:29:
db:70:90:27:2c:c3:eb:24:15:a4:57:4a:8c:42:89:87:7c:ed:
7d:c7:0e:06:9c:66:bc:54:ac:d4:24:68:a4:5e:8b:e8:ff:36:
6a:02:33:b2:a7:c9:d5:ea:ec:fc:b5:9a:ec:3f:4f:31:bf:0e:
e4:ae:a9:c1:a4:90:f4:ab:66:57:68:63:c1:47:8a:31:66:47:
5a:d0:c5:96:bb:ea:2a:fd:67:aa:a3:e8:36:61:c3:18:1a:0c:
62:3e:5e:62:fd:b8:f7:d8:84:1b:6f:ba:02:a0:5a:74:4f:bc:
8a:fa:2a:4a:b2:4c:8f:e4:69:bb:a3:cb:c8:44:48:9d:09:2f:
29:44:72:4e:57:87:a5:8c:c2:ab:94:a1:ff:82:28:01:13:58:
86:ec:d4:cd:7a:57:38:ca:2a:28:0c:5c:0e:94:e3:f5:b8:1a:
d6:aa:a4:3d:8e:2d:9c:5a:0c:ec:7b:8a:a6:ed:19:e6:5f:68:
40:5a:1e:96:d6:e9:8b:e3:04:bb:84:3c:e3:cf:8a:4e:97:c8:
8b:09:47:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0r8xDdVxnDc8YO+XXXr9ERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjYwMzI2MjEwMDQyWhcNMjYwMzI3MjEwMDQyWjAzMTEwLwYDVQQD
EyhiNDEzOWE0NmE0NGZhZWU0ZGYxZjA3YWQ5MjllZjY5MTQxZjQ0M2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsReHWqPDA+0HQYTYND54eM936ByF
iwtYM6iHzzEc3mgmfnQeMPyIX0PJQdTlYNngwVTq0h8lO4770MnNOoXEk7kR8Yid
UkT3dfzfCHrz5n2+dMeOLWkDxR3pnl3J4T3MCBt80sogT6T6qGgfM5aK/wYfvarm
Hyc9UE+SrCqsdAEIP7hEq4tu3Woy3dShPR3nt0v7YY7+f9UNYg10cn//AlG7kwSn
07EpzgGT8YMVlf5VANhfgWKXsA1KqHn/uzNxuNsDgKfEhleOcOzAhgFqKLRvMGSQ
VPdMKm2edIGMsN3D7PzKBKZJWMCsvzVghafLLEnLKOrhnyvWMfr60hGPZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQTmkakT67k3x8HrZKe9pFB9EP3MB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSsBTEUg
M0AM+lnDSzMMUm16JkDOHzUAmdJPAJNBNIBbtZIMySNzqn4U7aVmh2WSGZcpabgp
23CQJyzD6yQVpFdKjEKJh3ztfccOBpxmvFSs1CRopF6L6P82agIzsqfJ1ers/LWa
7D9PMb8O5K6pwaSQ9KtmV2hjwUeKMWZHWtDFlrvqKv1nqqPoNmHDGBoMYj5eYv24
99iEG2+6AqBadE+8ivoqSrJMj+Rpu6PLyERInQkvKURyTleHpYzCq5Sh/4IoARNY
huzUzXpXOMoqKAxcDpTj9bga1qqkPY4tnFoM7HuKpu0Z5l9oQFoeltbpi+MEu4Q8
48+KTpfIiwlHJA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:54 2026 by rpki-client