Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File: t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier: 2sFEGD3FWM/vvcBLxib/HZFIe0sj9s3s2sG2RA6rkNQ=
Subject key identifier: 26:99:58:7C:AA:F3:07:68:1E:E2:C9:E3:AE:DA:78:26:73:D7:D0:3F
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial: 019D29296A8F33E19600FF472C15DD2FEC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number: 0C2A
Signing time: Thu 26 Mar 2026 08:01:13 +0000
Manifest this update: Thu 26 Mar 2026 08:01:13 +0000
Manifest next update: Fri 27 Mar 2026 08:01:13 +0000
Files and hashes: 1: 05V7aSJJ1574Uj3BMJbyX1CU_Ks.roa (hash: W1ncaFZ2XrRWuQQ6O9v0I+g6Zq1amGJBP+gX3AlUnTA=)
2: qBJbZnYV1KV7wH9ev9pGNSEQh6E.roa (hash: VGKLyWCJAQaeOmHD9SkgJRFIt3cHdxbsxgp1SXLcvmY=)
3: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: NxpJbogstAvhdhXG9J4jWFdEeLuGO0KKvCf0nAFHuVc=)
4: wr64Qkyhhg94kKtHi11AmFA9j-0.roa (hash: Mf2dT8r50MOCzgq5UCOMg4z4yEZJfDirWvZn2rKZ9bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6a:8f:33:e1:96:00:ff:47:2c:15:dd:2f:ec:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Validity
Not Before: Mar 26 08:01:13 2026 GMT
Not After : Mar 27 08:01:13 2026 GMT
Subject: CN=2699587caaf307681ee2c9e3aeda782673d7d03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:d0:7e:3d:41:e0:28:ad:fd:25:e8:f9:6c:
55:06:a8:b4:c8:9b:3d:6a:5f:31:e0:3c:ab:fc:07:
6c:1c:5e:37:22:ca:4f:30:65:68:a1:2e:f9:e4:09:
14:18:95:db:cd:b3:49:38:ad:f7:cb:26:c7:4b:e7:
15:85:b6:24:d4:8c:00:62:81:3c:b0:a1:56:09:c4:
6a:1b:7a:a9:ab:4c:77:66:fc:ef:00:a0:4d:39:b0:
17:a1:a5:66:76:47:6d:a0:b4:ff:09:0f:5f:96:66:
f6:0d:7c:e5:bd:6a:e1:cf:0f:0e:fd:9f:e1:d3:d1:
a5:6d:f4:1a:3e:35:b6:ca:f6:1e:8a:41:10:ec:c5:
7a:33:63:ed:7c:09:e9:c5:fd:a1:8d:f7:aa:3c:f5:
92:13:1c:95:40:c3:fa:7b:6b:8d:2a:4a:5d:a0:ec:
6a:c5:c0:92:ef:db:54:00:34:17:27:3f:10:63:43:
5f:76:0c:3d:7c:95:de:57:4c:73:ce:e7:38:ca:ff:
32:ce:cf:a9:92:4d:21:97:09:d7:17:49:eb:17:e1:
ac:6e:85:6a:f6:6a:40:2d:13:88:3d:60:9e:2f:30:
07:00:4f:99:ce:8c:f2:a3:3e:50:18:aa:e7:47:09:
cd:c3:1a:a7:44:be:26:92:58:37:2d:d7:71:32:63:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:58:7C:AA:F3:07:68:1E:E2:C9:E3:AE:DA:78:26:73:D7:D0:3F
X509v3 Authority Key Identifier:
keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1f:05:35:02:87:53:61:17:76:90:72:c2:90:3d:b6:5a:26:
66:de:9c:c0:66:aa:1b:8f:aa:c8:22:8c:e3:fa:7a:e2:ec:f2:
6d:83:1f:16:1d:ef:58:76:3a:34:80:03:77:95:a6:d9:20:8d:
b1:6e:c2:9d:e0:73:d2:53:25:59:da:c1:fc:3d:d7:2c:26:b2:
cb:ff:1e:8e:69:e8:5a:9c:8f:d3:f7:80:08:13:da:f1:f9:f9:
73:39:fa:b5:74:d4:3e:79:bb:d8:6a:6b:00:7c:49:3a:46:28:
3d:8a:c1:e1:af:54:04:2b:dc:68:3d:84:5b:8c:fc:60:26:2d:
e5:f5:09:15:5e:57:d9:d0:45:48:12:7c:d4:42:2c:89:b1:8f:
a1:33:8f:ca:ec:32:bd:4f:36:37:dc:93:76:1d:6f:57:e5:5e:
d4:18:6a:df:62:83:75:35:83:13:52:ca:eb:bf:89:9d:d3:d3:
d9:00:a2:d1:62:98:a1:1f:fd:f3:8a:16:9c:1e:78:55:f4:19:
95:c7:02:58:2d:e4:e8:53:8d:2c:d3:be:45:12:ee:fd:36:60:
27:1a:c9:41:72:dd:de:04:71:2e:b5:19:ad:0c:22:9a:77:a3:
fa:74:13:a9:6e:4d:34:ca:9b:1d:0e:68:e6:9b:1e:17:5c:6a:
99:59:0e:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKWqPM+GWAP9HLBXdL+wRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTlhYzk4OWM0NGIyZTFjZGFiYzI1OGU5NmNhOTNjYWFk
NGJkNjQwHhcNMjYwMzI2MDgwMTEzWhcNMjYwMzI3MDgwMTEzWjAzMTEwLwYDVQQD
EygyNjk5NTg3Y2FhZjMwNzY4MWVlMmM5ZTNhZWRhNzgyNjczZDdkMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxPQfj1B4Cit/SXo+WxVBqi0yJs9
al8x4Dyr/AdsHF43IspPMGVooS755AkUGJXbzbNJOK33yybHS+cVhbYk1IwAYoE8
sKFWCcRqG3qpq0x3ZvzvAKBNObAXoaVmdkdtoLT/CQ9flmb2DXzlvWrhzw8O/Z/h
09GlbfQaPjW2yvYeikEQ7MV6M2PtfAnpxf2hjfeqPPWSExyVQMP6e2uNKkpdoOxq
xcCS79tUADQXJz8QY0Nfdgw9fJXeV0xzzuc4yv8yzs+pkk0hlwnXF0nrF+GsboVq
9mpALROIPWCeLzAHAE+Zzozyoz5QGKrnRwnNwxqnRL4mklg3LddxMmOsWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaZWHyq8wdoHuLJ467aeCZz19A/MB8GA1UdIwQY
MBaAFLeZrJicRLLhzavCWOlsqTyq1L1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMt
OTE3NGRmNGRkYjlhLzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMtOTE3NGRmNGRkYjlh
LzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaB8FNQKH
U2EXdpBywpA9tlomZt6cwGaqG4+qyCKM4/p64uzybYMfFh3vWHY6NIADd5Wm2SCN
sW7CneBz0lMlWdrB/D3XLCayy/8ejmnoWpyP0/eACBPa8fn5czn6tXTUPnm72Gpr
AHxJOkYoPYrB4a9UBCvcaD2EW4z8YCYt5fUJFV5X2dBFSBJ81EIsibGPoTOPyuwy
vU82N9yTdh1vV+Ve1Bhq32KDdTWDE1LK67+JndPT2QCi0WKYoR/984oWnB54VfQZ
lccCWC3k6FONLNO+RRLu/TZgJxrJQXLd3gRxLrUZrQwimnej+nQTqW5NNMqbHQ5o
5pseF1xqmVkOLQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:45 2026 by rpki-client