Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier: gduRXJ8f0+T8Rm/Jp7DhBUPWEh2GKLphJJWFwcbOWjU=
Subject key identifier: E9:A8:13:A2:EC:8C:99:55:C3:CE:D7:1D:39:23:31:F8:63:D5:9F:64
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial: 019D277262DB5A73A10AC999B7ED3FDC463F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number: 16D5
Signing time: Thu 26 Mar 2026 00:01:40 +0000
Manifest this update: Thu 26 Mar 2026 00:01:40 +0000
Manifest next update: Fri 27 Mar 2026 00:01:40 +0000
Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: RxjRrwZEBWc1fp1BrgnQQu+64QYLexCFCY13Ux/bGzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:62:db:5a:73:a1:0a:c9:99:b7:ed:3f:dc:46:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Validity
Not Before: Mar 26 00:01:40 2026 GMT
Not After : Mar 27 00:01:40 2026 GMT
Subject: CN=e9a813a2ec8c9955c3ced71d392331f863d59f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:95:00:1f:35:16:09:b4:2f:0d:96:e5:00:
fb:7b:5d:6a:b6:da:71:df:72:02:c1:b8:c2:bc:96:
db:ff:d3:ee:ad:f7:73:f4:31:ad:72:41:3d:f5:0f:
16:11:dd:66:17:86:86:5c:54:98:7e:ef:9a:78:45:
45:35:2a:a0:0a:13:5f:09:cb:f5:d0:dc:2b:82:16:
9f:b1:c8:70:4f:90:7e:fd:7d:22:12:40:23:ef:4e:
58:00:dd:cc:aa:65:0c:55:30:10:94:12:97:06:87:
39:af:2b:4d:63:82:a6:1a:4d:56:b4:70:60:62:a6:
88:45:bf:aa:d1:77:97:9f:54:1c:ae:6c:a1:90:f1:
ad:5d:74:ba:62:79:4c:e2:6d:07:ea:7d:10:a1:3d:
d2:9c:19:a4:31:21:44:f3:ac:4d:82:38:a3:ee:3e:
93:9a:31:c9:19:40:48:30:04:02:9a:52:72:e9:a8:
54:de:f2:18:78:5d:96:70:74:b5:77:fe:31:55:48:
12:d8:75:59:e9:2a:e8:45:ee:15:f4:19:a4:fb:36:
09:96:9c:00:94:19:05:cc:cd:dd:b8:91:38:10:c4:
99:02:c2:02:f9:ce:f4:1b:0a:12:2d:28:81:81:54:
ac:43:5c:bb:d4:0b:8b:5a:05:b2:d2:ce:d0:ff:93:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:13:A2:EC:8C:99:55:C3:CE:D7:1D:39:23:31:F8:63:D5:9F:64
X509v3 Authority Key Identifier:
keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8f:41:ef:51:c8:76:d9:f5:fd:ba:84:69:9f:c6:c8:ca:c2:
be:8c:ca:ac:9a:47:14:45:2e:7f:ac:d2:4b:38:fd:e5:da:a6:
8b:52:ff:4f:d7:60:11:4c:e9:a7:0f:1d:58:e1:62:6c:49:0b:
09:a6:88:3a:7e:51:47:eb:52:8c:ad:d8:09:d7:22:42:2c:98:
28:b5:49:39:d1:fc:4b:e6:b6:47:d3:db:cb:2d:9a:25:27:f3:
19:a3:cb:c0:89:17:83:a3:9f:9b:62:9f:64:c9:0e:9c:0a:d5:
20:bf:ea:e4:dd:c1:e8:f7:bf:48:13:1c:3a:f8:8f:d3:bd:8a:
09:f4:ec:27:02:f7:26:2e:7a:6f:6d:df:06:61:be:4a:68:38:
50:6f:62:b7:76:cb:e9:db:e7:81:74:5e:c2:2e:8b:e1:7b:fc:
66:9e:bc:66:9b:84:83:97:72:01:f2:9b:6b:6b:99:87:de:d6:
ca:18:a1:cc:3a:e3:f2:42:e9:22:a2:c8:69:fc:fd:0c:e9:c1:
14:90:19:02:78:d9:34:be:bc:1b:8f:3a:ef:09:8c:5a:d2:5e:
bb:77:2d:f2:e4:e4:c7:fb:25:1c:2c:d9:87:16:4a:31:72:b0:
6c:d8:d6:ce:1f:fd:43:4b:ec:e5:cf:ca:48:b5:4b:74:19:a0:
0b:0d:7d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncmLbWnOhCsmZt+0/3EY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzY3YjEzZDk5MDc5Y2E3MGZjMjk3OTg4ZGQ3OWVhYzQz
YTlmYTkwHhcNMjYwMzI2MDAwMTQwWhcNMjYwMzI3MDAwMTQwWjAzMTEwLwYDVQQD
EyhlOWE4MTNhMmVjOGM5OTU1YzNjZWQ3MWQzOTIzMzFmODYzZDU5ZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32CVAB81Fgm0Lw2W5QD7e11qttpx
33ICwbjCvJbb/9Purfdz9DGtckE99Q8WEd1mF4aGXFSYfu+aeEVFNSqgChNfCcv1
0NwrghafschwT5B+/X0iEkAj705YAN3MqmUMVTAQlBKXBoc5rytNY4KmGk1WtHBg
YqaIRb+q0XeXn1QcrmyhkPGtXXS6YnlM4m0H6n0QoT3SnBmkMSFE86xNgjij7j6T
mjHJGUBIMAQCmlJy6ahU3vIYeF2WcHS1d/4xVUgS2HVZ6SroRe4V9Bmk+zYJlpwA
lBkFzM3duJE4EMSZAsIC+c70GwoSLSiBgVSsQ1y71AuLWgWy0s7Q/5NYAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmoE6LsjJlVw87XHTkjMfhj1Z9kMB8GA1UdIwQY
MBaAFOR2exPZkHnKcPwpeYjdeerEOp+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgt
NGIxZDk3ZGZlY2NmLzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgtNGIxZDk3ZGZlY2Nm
LzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjI9B71HI
dtn1/bqEaZ/GyMrCvozKrJpHFEUuf6zSSzj95dqmi1L/T9dgEUzppw8dWOFibEkL
CaaIOn5RR+tSjK3YCdciQiyYKLVJOdH8S+a2R9Pbyy2aJSfzGaPLwIkXg6Ofm2Kf
ZMkOnArVIL/q5N3B6Pe/SBMcOviP072KCfTsJwL3Ji56b23fBmG+Smg4UG9it3bL
6dvngXRewi6L4Xv8Zp68ZpuEg5dyAfKba2uZh97WyhihzDrj8kLpIqLIafz9DOnB
FJAZAnjZNL68G4867wmMWtJeu3ct8uTkx/slHCzZhxZKMXKwbNjWzh/9Q0vs5c/K
SLVLdBmgCw19oQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:35 2026 by rpki-client