Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
File: E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json)
Hash identifier: li1ttYJEyYMN/B/glrOM9blujDAs6+5Rqq1JLpNkLqs=
Subject key identifier: 0F:66:79:F6:C4:1F:44:1A:3F:5A:C4:83:C7:0C:D1:83:40:02:50:0F
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial: 019D2696518CB632F42BC976FC1DC1901E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:18 +0000
Manifest this update: Wed 25 Mar 2026 20:01:18 +0000
Manifest next update: Thu 26 Mar 2026 20:01:18 +0000
Files and hashes: 1: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: iwXmOpBorFL2ofiugLO9PtyN7TBC66M3FpkPbcgGXnw=)
2: XlhDxzIhUvinzN4Wshw_Pb0yfKo.roa (hash: lG2+m8ftby0SMpU+m+8zptGeDfMbsZpbhzdVyHzX6eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:51:8c:b6:32:f4:2b:c9:76:fc:1d:c1:90:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Validity
Not Before: Mar 25 20:01:18 2026 GMT
Not After : Mar 26 20:01:18 2026 GMT
Subject: CN=0f6679f6c41f441a3f5ac483c70cd1834002500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:17:d5:3e:f5:57:5e:88:13:2f:ed:24:7f:
e1:2f:eb:52:01:cb:32:c4:3f:c9:9e:4c:a6:74:aa:
0b:f5:a8:50:03:2f:6e:55:7e:5e:5f:66:ca:db:6b:
7d:71:cd:02:ee:06:e7:78:c2:8b:3f:8f:1f:4a:b7:
95:8a:45:95:84:d5:ea:db:ac:bb:f3:6f:1d:c8:1d:
6c:eb:cb:be:c7:da:1b:9d:0b:83:5b:b4:6f:8f:57:
bc:bd:96:a1:44:dd:35:2c:0f:9a:b5:64:b6:7b:e7:
3e:00:95:96:d9:c7:c9:0c:35:da:4a:c0:11:42:27:
1d:90:ff:9e:a5:7e:cb:2c:43:9b:38:fc:3d:3c:a8:
ef:93:21:ef:6d:fb:bb:74:2b:bc:fb:2f:1f:28:bd:
e0:8b:01:57:dd:47:6c:65:69:c5:f2:8c:64:c1:3d:
ad:f9:18:4c:65:7c:df:ac:3f:d6:58:af:f1:3a:f8:
ca:04:bb:91:5d:95:01:fd:a1:fa:45:20:d2:a6:ab:
78:38:b5:20:22:5e:3e:b2:af:41:2f:82:57:52:65:
0f:98:36:1a:e1:3e:ce:c4:12:3e:9a:2d:7e:01:c8:
39:1c:e3:09:20:48:67:14:87:a1:db:8b:68:4f:5b:
5c:cd:74:0e:9d:2f:d7:4f:e3:b2:91:c5:15:65:95:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:79:F6:C4:1F:44:1A:3F:5A:C4:83:C7:0C:D1:83:40:02:50:0F
X509v3 Authority Key Identifier:
keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:92:41:99:40:42:26:60:bf:75:2a:7d:49:17:6a:d3:17:
42:4c:da:ce:b5:f1:ff:9b:60:cf:c3:40:cf:55:d2:7e:32:52:
50:43:91:6c:57:b9:fb:c0:ec:6a:02:15:00:4e:66:29:e7:61:
07:f3:5b:e1:f6:18:b6:12:4b:76:87:36:b7:8a:20:8b:bd:89:
a1:11:64:87:68:ad:38:fb:12:a3:ca:6b:1e:62:36:56:84:90:
fe:60:c9:6c:eb:0e:7c:54:36:a8:03:26:e3:95:c7:96:a8:4b:
64:35:d8:c4:47:73:54:9b:33:7f:b8:bb:04:d6:be:3b:cb:9e:
9f:57:7d:d3:20:69:73:13:b5:cc:df:db:15:df:c2:ab:1d:78:
9c:0c:c6:75:39:1e:e5:2c:89:b3:39:3f:81:9a:56:46:16:15:
d3:aa:e1:59:3e:cb:1a:be:3b:c5:a5:3b:ca:e7:8a:64:e5:b3:
61:ba:cd:12:20:4c:cf:0c:54:a6:36:78:d7:19:5e:ee:f3:8c:
07:a9:9a:10:cf:5a:27:06:49:3e:bf:39:e1:e2:34:00:cb:46:
1f:e8:1c:cb:39:9c:c8:64:0a:fc:70:c9:07:e7:41:15:3a:26:
ed:7c:81:42:c8:f9:6a:eb:29:db:e5:d8:97:97:c0:05:c9:0a:
a3:d5:23:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllGMtjL0K8l2/B3BkB6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTVhM2E4ZmM4ZGQzNGRkNmYzYzk1MGM2NjFmNGIyMTI3
MTc1YTUwHhcNMjYwMzI1MjAwMTE4WhcNMjYwMzI2MjAwMTE4WjAzMTEwLwYDVQQD
EygwZjY2NzlmNmM0MWY0NDFhM2Y1YWM0ODNjNzBjZDE4MzQwMDI1MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyloX1T71V16IEy/tJH/hL+tSAcsy
xD/JnkymdKoL9ahQAy9uVX5eX2bK22t9cc0C7gbneMKLP48fSreVikWVhNXq26y7
828dyB1s68u+x9obnQuDW7Rvj1e8vZahRN01LA+atWS2e+c+AJWW2cfJDDXaSsAR
QicdkP+epX7LLEObOPw9PKjvkyHvbfu7dCu8+y8fKL3giwFX3UdsZWnF8oxkwT2t
+RhMZXzfrD/WWK/xOvjKBLuRXZUB/aH6RSDSpqt4OLUgIl4+sq9BL4JXUmUPmDYa
4T7OxBI+mi1+Acg5HOMJIEhnFIeh24toT1tczXQOnS/XT+OykcUVZZU9qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9mefbEH0QaP1rEg8cM0YNAAlAPMB8GA1UdIwQY
MBaAFBOVo6j8jdNN1vPJUMZh9LIScXWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzIt
ZjA0OGE5MjY2ZmNmLzEvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzItZjA0OGE5MjY2ZmNm
LzEvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk+SQZlA
QiZgv3UqfUkXatMXQkzazrXx/5tgz8NAz1XSfjJSUEORbFe5+8DsagIVAE5mKedh
B/Nb4fYYthJLdoc2t4ogi72JoRFkh2itOPsSo8prHmI2VoSQ/mDJbOsOfFQ2qAMm
45XHlqhLZDXYxEdzVJszf7i7BNa+O8uen1d90yBpcxO1zN/bFd/Cqx14nAzGdTke
5SyJszk/gZpWRhYV06rhWT7LGr47xaU7yueKZOWzYbrNEiBMzwxUpjZ41xle7vOM
B6maEM9aJwZJPr854eI0AMtGH+gcyzmcyGQK/HDJB+dBFTom7XyBQsj5ausp2+XY
l5fABckKo9Uj3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:45 2026 by rpki-client