Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: pa6SDCNKJv+XeYjrNasteyaErIazz8VRMfWBlETEp3o=
Subject key identifier: 53:B7:15:7A:5E:80:72:8B:1C:B9:DB:44:B3:20:0C:F4:D2:56:44:DF
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 01A0EBF8E312B619556BDE24D81B0AC8C668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 14B1
Signing time: Tue 29 Sep 2026 07:02:31 +0000
Manifest this update: Tue 29 Sep 2026 07:02:31 +0000
Manifest next update: Wed 30 Sep 2026 07:02:31 +0000
Files and hashes: 1: N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa (hash: u/ttBIhtxAmlNbTBEOD7s6FeOeykOPEDDbaJasWKOp8=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: Ycm28S08GA04qQdCIINxqst8rZiIqKP1WP0D8o7t65I=)
3: P7s6SkBNrB3yuV7739uVskU8ZG8.roa (hash: ZmJidlTbaMdMKLRXvEzc/VS03klVrtlteUmPhSejjJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f8:e3:12:b6:19:55:6b:de:24:d8:1b:0a:c8:c6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Sep 29 07:02:31 2026 GMT
Not After : Sep 30 07:02:31 2026 GMT
Subject: CN=53b7157a5e80728b1cb9db44b3200cf4d25644df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:77:47:0c:9f:2d:a2:bc:75:5b:04:57:f2:
de:c5:e6:7a:bc:36:f7:1c:83:16:fc:a9:28:f5:0b:
c7:79:12:29:c7:67:d3:8d:32:81:6e:20:b9:03:fa:
b7:4b:5b:5b:98:d0:3e:06:c1:47:58:86:d3:02:a4:
97:62:d2:e9:74:ca:4a:0d:c2:89:b2:7b:83:f9:13:
16:65:d8:0e:f9:26:98:2a:2f:65:ab:ff:cd:9b:83:
f3:f6:b3:78:b2:29:b0:b8:4d:95:c0:6b:86:58:2e:
2d:73:28:b5:40:d0:84:35:ee:c3:cd:69:bc:fa:33:
24:da:11:1b:70:f5:2c:77:44:78:9b:11:ea:57:9e:
ed:1b:98:29:16:c1:6d:80:85:27:e1:65:85:df:68:
44:60:ec:eb:c6:72:af:ed:2e:db:cb:29:53:bf:e0:
8f:b9:bf:4b:f6:c4:20:1b:25:98:26:64:31:31:02:
e2:16:a9:13:ef:32:3a:a4:90:d6:0c:c4:cb:86:34:
b1:4e:ee:15:5f:64:ac:fd:df:a5:bb:9f:39:44:73:
51:4d:63:11:64:d8:f0:0d:93:d8:1e:4f:58:df:cb:
c6:06:e9:ca:0b:f0:c0:ae:a8:9b:4f:dd:ac:05:e1:
bb:24:c2:41:5e:33:8e:44:8f:aa:33:3b:8c:6c:5a:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:15:7A:5E:80:72:8B:1C:B9:DB:44:B3:20:0C:F4:D2:56:44:DF
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2d:5d:c9:4d:97:a7:b7:db:71:56:62:52:5e:31:95:43:d8:
77:64:5b:63:80:fa:e6:8e:57:ef:ea:76:24:c8:03:62:fa:39:
d1:a0:fe:67:ef:29:17:cd:1c:2c:5c:38:f6:59:df:de:1a:1e:
bb:62:6d:6c:1c:4b:38:41:b3:ff:5c:f2:5d:72:d2:01:13:90:
88:17:e2:b3:f1:9f:26:96:fb:6d:93:a8:a5:ac:b5:c2:4a:6d:
dd:57:6e:ef:f2:10:62:98:d0:8d:4a:5f:88:7a:2e:ff:03:e0:
e1:c2:4b:9d:f9:97:c5:06:c5:e7:6f:cb:de:15:df:83:7b:d6:
c9:bc:1c:74:22:0c:64:77:5a:ae:5f:16:e8:b5:21:8a:6c:77:
66:bc:cd:3b:1c:c5:6b:27:1d:8f:fb:1d:f3:43:76:cd:82:0a:
9d:a9:4f:f9:79:e6:ac:3f:12:48:85:83:dc:2d:3b:38:ab:4c:
e6:6b:27:28:5c:e7:b9:9c:1e:ea:cb:db:6e:2b:d2:79:98:8d:
a7:6e:0c:85:73:18:78:6a:b0:76:c5:ca:1f:97:2f:cb:06:fc:
9a:b7:c0:43:35:2b:12:75:f1:6e:e7:b7:7b:43:84:c7:cc:ac:
1d:19:48:57:bd:ad:1b:f2:e2:1c:3b:3f:75:c1:38:4b:65:80:
0e:b1:2c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDr+OMSthlVa94k2BsKyMZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2
YThkMmUwHhcNMjYwOTI5MDcwMjMxWhcNMjYwOTMwMDcwMjMxWjAzMTEwLwYDVQQD
Eyg1M2I3MTU3YTVlODA3MjhiMWNiOWRiNDRiMzIwMGNmNGQyNTY0NGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bB3RwyfLaK8dVsEV/LexeZ6vDb3
HIMW/Kko9QvHeRIpx2fTjTKBbiC5A/q3S1tbmNA+BsFHWIbTAqSXYtLpdMpKDcKJ
snuD+RMWZdgO+SaYKi9lq//Nm4Pz9rN4simwuE2VwGuGWC4tcyi1QNCENe7DzWm8
+jMk2hEbcPUsd0R4mxHqV57tG5gpFsFtgIUn4WWF32hEYOzrxnKv7S7byylTv+CP
ub9L9sQgGyWYJmQxMQLiFqkT7zI6pJDWDMTLhjSxTu4VX2Ss/d+lu585RHNRTWMR
ZNjwDZPYHk9Y38vGBunKC/DArqibT92sBeG7JMJBXjOORI+qMzuMbFqbFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO3FXpegHKLHLnbRLMgDPTSVkTfMB8GA1UdIwQY
MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt
OTMzN2YzNzQxNjhlLzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl
LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACS1dyU2X
p7fbcVZiUl4xlUPYd2RbY4D65o5X7+p2JMgDYvo50aD+Z+8pF80cLFw49lnf3hoe
u2JtbBxLOEGz/1zyXXLSAROQiBfis/GfJpb7bZOopay1wkpt3Vdu7/IQYpjQjUpf
iHou/wPg4cJLnfmXxQbF52/L3hXfg3vWybwcdCIMZHdarl8W6LUhimx3ZrzNOxzF
aycdj/sd80N2zYIKnalP+XnmrD8SSIWD3C07OKtM5msnKFznuZwe6svbbivSeZiN
p24MhXMYeGqwdsXKH5cvywb8mrfAQzUrEnXxbue3e0OEx8ysHRlIV72tG/LiHDs/
dcE4S2WADrEs4Q==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:02:34 2026 by rpki-client