Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier: /WFNmCpIMtKAYVKfuJUQRl8Mmek/UYK4Smo+h++RSmY=
Subject key identifier: 3C:67:CD:32:49:1D:F5:E8:13:4A:9E:1E:F9:AA:81:F6:50:4A:48:CF
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial: 019D29CE9D2EDA243D801440BB99E544DE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number: 0B91
Signing time: Thu 26 Mar 2026 11:01:39 +0000
Manifest this update: Thu 26 Mar 2026 11:01:39 +0000
Manifest next update: Fri 27 Mar 2026 11:01:39 +0000
Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: EK1DtRjWfVOrxuQdCr/TTYkxhclFFXpSBmbv0ewo4AM=)
2: pG1q5nAL-cGnJU_6__TqJaRLon0.roa (hash: brTouy8lyh5LkULXwzYt5uqnpGWf2jgORTWC0J3Zrr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:9d:2e:da:24:3d:80:14:40:bb:99:e5:44:de:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
Validity
Not Before: Mar 26 11:01:39 2026 GMT
Not After : Mar 27 11:01:39 2026 GMT
Subject: CN=3c67cd32491df5e8134a9e1ef9aa81f6504a48cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:34:ab:27:13:fd:d6:5f:16:d7:9b:a3:c1:
7d:5c:fa:d2:9f:24:3c:41:72:2d:20:f6:b5:d1:f9:
78:42:c1:f8:bf:22:41:a3:0f:c0:b1:c3:cd:3a:13:
64:46:d9:1e:c7:b1:ad:46:44:a8:cb:41:43:3a:81:
54:a3:ab:07:7b:39:00:45:f0:cf:b8:6c:31:25:7c:
3d:8f:e1:53:88:67:48:50:24:64:f9:ca:08:fb:ab:
37:d3:07:0e:1e:b2:f9:77:1c:56:e6:1e:3b:2c:60:
67:33:0f:c5:b1:a9:c4:d2:3a:c4:d4:a9:8c:61:74:
fb:15:2d:92:f9:da:c9:b1:44:91:ef:14:63:da:56:
0f:17:dc:35:97:44:cd:e8:2e:e5:3c:d8:28:e1:d9:
1a:77:e7:0f:e9:f3:f1:b3:32:4b:96:73:a8:33:a5:
08:d0:18:86:45:bb:6f:7e:c5:52:55:6f:38:f7:59:
8e:5a:40:3b:01:e7:32:31:37:b8:94:53:d7:b9:f5:
9c:04:1f:a9:0a:f9:8e:9e:0b:dc:fe:94:54:38:79:
8e:24:a7:9a:d9:71:ad:8c:76:e4:ec:82:e7:01:f8:
9e:84:7b:f2:09:86:e3:b3:2c:f4:21:78:8f:01:68:
dd:81:65:af:3f:fc:5c:95:75:e3:79:62:2c:b7:0b:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:CD:32:49:1D:F5:E8:13:4A:9E:1E:F9:AA:81:F6:50:4A:48:CF
X509v3 Authority Key Identifier:
keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:5d:3c:cd:b6:ea:6e:a6:0e:8d:b3:f2:98:af:e3:2a:54:
3f:73:f3:51:cd:c9:01:c8:ae:fd:c1:fb:22:22:43:a5:1b:e1:
76:24:3a:c7:cb:50:41:31:cf:43:67:6e:25:98:8d:81:42:ac:
f0:b3:49:e2:e6:5b:78:aa:3c:a7:d8:f0:58:2d:aa:56:b9:80:
5d:3d:af:f6:82:a1:44:74:9a:04:00:1b:cb:c6:76:70:e3:65:
4b:28:c3:41:0c:8d:ee:67:54:03:a7:54:87:ef:de:10:e9:8c:
c3:bb:3e:81:fd:58:bf:c6:ae:2d:01:ac:5c:de:08:91:93:4d:
42:43:aa:38:2e:79:c8:a0:fe:0b:3c:41:5d:0e:31:01:23:9a:
7d:c4:7f:41:09:a6:b7:5f:2e:18:f5:5e:e9:f2:a7:d3:19:68:
9c:79:4d:d0:b0:2c:3e:d0:5e:e8:62:1c:71:fe:bc:d2:3d:5c:
ed:63:48:62:19:c6:43:d0:b7:a9:be:a5:52:45:07:0c:af:e8:
04:ed:e7:e6:65:70:2a:ab:af:88:05:4d:86:29:77:03:fd:f8:
68:8f:32:0d:30:89:9f:ca:e5:4d:24:f9:b8:da:11:d2:92:fc:
ed:d8:75:4e:b6:0d:17:34:3b:85:3e:fd:68:c8:b9:f3:f2:f4:
32:69:a8:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzp0u2iQ9gBRAu5nlRN5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzVkZWYxOGE3NWViNDVjNDQwNzcxYWNlMjQ2YzUwZThh
OWQzMTYwHhcNMjYwMzI2MTEwMTM5WhcNMjYwMzI3MTEwMTM5WjAzMTEwLwYDVQQD
EygzYzY3Y2QzMjQ5MWRmNWU4MTM0YTllMWVmOWFhODFmNjUwNGE0OGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmds0qycT/dZfFtebo8F9XPrSnyQ8
QXItIPa10fl4QsH4vyJBow/AscPNOhNkRtkex7GtRkSoy0FDOoFUo6sHezkARfDP
uGwxJXw9j+FTiGdIUCRk+coI+6s30wcOHrL5dxxW5h47LGBnMw/FsanE0jrE1KmM
YXT7FS2S+drJsUSR7xRj2lYPF9w1l0TN6C7lPNgo4dkad+cP6fPxszJLlnOoM6UI
0BiGRbtvfsVSVW8491mOWkA7AecyMTe4lFPXufWcBB+pCvmOngvc/pRUOHmOJKea
2XGtjHbk7ILnAfiehHvyCYbjsyz0IXiPAWjdgWWvP/xclXXjeWIstwtrgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxnzTJJHfXoE0qeHvmqgfZQSkjPMB8GA1UdIwQY
MBaAFOV13vGKdetFxEB3Gs4kbFDoqdMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODkt
ZmI5NzQxMzU5NzI3LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODktZmI5NzQxMzU5NzI3
LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADm1dPM22
6m6mDo2z8piv4ypUP3PzUc3JAciu/cH7IiJDpRvhdiQ6x8tQQTHPQ2duJZiNgUKs
8LNJ4uZbeKo8p9jwWC2qVrmAXT2v9oKhRHSaBAAby8Z2cONlSyjDQQyN7mdUA6dU
h+/eEOmMw7s+gf1Yv8auLQGsXN4IkZNNQkOqOC55yKD+CzxBXQ4xASOafcR/QQmm
t18uGPVe6fKn0xlonHlN0LAsPtBe6GIccf680j1c7WNIYhnGQ9C3qb6lUkUHDK/o
BO3n5mVwKquviAVNhil3A/34aI8yDTCJn8rlTST5uNoR0pL87dh1TrYNFzQ7hT79
aMi58/L0Mmmofg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:06 2026 by rpki-client