Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File: 5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier: 6S3tV+dnRGZUVcQAkPggBiK1ZOG2VuYzHiGRXEvon5w=
Subject key identifier: E1:F6:9A:49:F9:8B:9C:C9:44:48:68:E8:9D:8A:BF:F6:C3:5B:21:88
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer: /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial: 019D281640C6F816C16E8F935B9E89678D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number: 07E7
Signing time: Thu 26 Mar 2026 03:00:40 +0000
Manifest this update: Thu 26 Mar 2026 03:00:40 +0000
Manifest next update: Fri 27 Mar 2026 03:00:40 +0000
Files and hashes: 1: 1bqNsOJJ8fekiGjNmHIxOifScpk.roa (hash: awuwmLZI74s+JrAhvYcfSETsMAtPOVKMZXnh9sFIapk=)
2: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: 3KylRHaGFSUws8WQ96PuEvYEOfVb6VP9drSc2kwmR0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:40:c6:f8:16:c1:6e:8f:93:5b:9e:89:67:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
Validity
Not Before: Mar 26 03:00:40 2026 GMT
Not After : Mar 27 03:00:40 2026 GMT
Subject: CN=e1f69a49f98b9cc9444868e89d8abff6c35b2188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:be:33:08:3b:2b:fb:54:4a:57:b8:1d:21:
35:7e:af:3f:47:12:f2:6b:fc:8e:2f:64:9d:53:5b:
bc:e0:f9:90:00:61:b1:c1:a7:eb:2d:f8:b1:53:8a:
f3:a5:91:5b:ca:2d:4e:9b:97:7f:aa:44:85:b6:2d:
ef:80:80:87:10:d0:7c:94:80:c6:16:aa:a8:85:da:
fc:42:51:ab:d8:29:5e:f2:5c:ad:70:05:61:ee:22:
b4:ed:72:37:59:25:46:7c:0a:0a:e3:b0:d7:d7:af:
5d:c3:af:59:85:e3:4b:d5:a2:45:c0:ad:88:7a:9c:
a3:9a:c4:f9:a7:9e:7e:ca:29:d9:31:73:96:21:19:
03:0f:21:00:a9:d5:69:c5:9a:81:c3:2a:ec:c0:e5:
84:05:bd:90:f2:6f:52:46:11:99:71:55:f9:2b:56:
5d:9d:52:71:31:b3:eb:ec:02:bb:4c:5a:6d:6f:f0:
33:17:4a:69:38:a6:28:9d:2b:7e:9f:5e:0e:96:c1:
83:b9:97:f6:0f:24:cb:70:ff:e3:44:31:c7:7e:d4:
9a:5b:50:eb:3f:98:ee:64:8a:35:e0:51:1f:c9:9f:
a9:ec:c4:b3:eb:0a:b0:15:10:ec:2e:ce:39:0e:68:
f2:9e:89:68:07:89:4d:d1:61:b2:0a:e0:ab:39:0e:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F6:9A:49:F9:8B:9C:C9:44:48:68:E8:9D:8A:BF:F6:C3:5B:21:88
X509v3 Authority Key Identifier:
keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6f:62:6b:85:e2:d9:fe:15:23:9f:67:42:87:5c:3a:24:95:
e1:81:a0:e5:6b:8e:ae:de:c7:0e:d1:01:45:26:47:ab:3f:2b:
bc:54:67:f7:6b:0b:56:7b:6f:8e:08:19:75:18:af:75:a8:b3:
c9:e9:28:21:74:0e:fc:19:89:18:f3:04:d1:ba:44:58:9f:00:
f7:d9:86:5e:aa:67:6c:20:6f:7f:b0:45:20:8c:f8:f9:87:4c:
b1:15:04:ac:7b:71:c1:de:01:86:38:d0:e1:5c:b4:69:4e:52:
fb:9f:17:0f:0c:d1:a5:cd:c2:20:17:6a:81:58:1a:47:56:de:
37:f1:6f:fd:f8:ab:4a:02:b2:99:ed:d1:ca:c1:d3:ed:f5:a6:
a6:23:d4:4e:79:40:72:21:26:9e:c2:09:15:ea:78:b2:cd:ba:
8c:3b:01:45:32:b4:3f:55:07:28:6e:45:35:0a:8f:ad:d4:5c:
f5:19:cc:9f:f3:b8:35:bf:1f:ec:79:c1:ad:d8:3f:37:1e:01:
3c:c4:bd:ba:b6:84:cb:c7:36:c3:88:9e:12:9e:c5:bf:f3:a3:
69:8f:3f:12:84:ed:c7:ef:08:39:66:dc:23:f8:20:bd:7e:25:
de:45:52:bb:1a:02:9d:4e:d4:ab:63:c4:62:57:33:73:38:01:
4b:77:49:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFkDG+BbBbo+TW56JZ42CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZTE1NTJmYzBhNTg4NGE4ODFiMzUyODE3ZDBiNzMw
MDkwODMwHhcNMjYwMzI2MDMwMDQwWhcNMjYwMzI3MDMwMDQwWjAzMTEwLwYDVQQD
EyhlMWY2OWE0OWY5OGI5Y2M5NDQ0ODY4ZTg5ZDhhYmZmNmMzNWIyMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPK+Mwg7K/tUSle4HSE1fq8/RxLy
a/yOL2SdU1u84PmQAGGxwafrLfixU4rzpZFbyi1Om5d/qkSFti3vgICHENB8lIDG
Fqqohdr8QlGr2Cle8lytcAVh7iK07XI3WSVGfAoK47DX169dw69ZheNL1aJFwK2I
epyjmsT5p55+yinZMXOWIRkDDyEAqdVpxZqBwyrswOWEBb2Q8m9SRhGZcVX5K1Zd
nVJxMbPr7AK7TFptb/AzF0ppOKYonSt+n14OlsGDuZf2DyTLcP/jRDHHftSaW1Dr
P5juZIo14FEfyZ+p7MSz6wqwFRDsLs45DmjynoloB4lN0WGyCuCrOQ5+DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH2mkn5i5zJREho6J2Kv/bDWyGIMB8GA1UdIwQY
MBaAFOZZbhVS/ApYhKiBs1KBfQtzAJCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wY2EyODctM2VlZi00MTRjLTg4M2Et
MDgxNjkxMjU3YTI2LzEvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wY2EyODctM2VlZi00MTRjLTg4M2EtMDgxNjkxMjU3YTI2
LzEvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH29ia4Xi
2f4VI59nQodcOiSV4YGg5WuOrt7HDtEBRSZHqz8rvFRn92sLVntvjggZdRivdaiz
yekoIXQO/BmJGPME0bpEWJ8A99mGXqpnbCBvf7BFIIz4+YdMsRUErHtxwd4BhjjQ
4Vy0aU5S+58XDwzRpc3CIBdqgVgaR1beN/Fv/firSgKyme3RysHT7fWmpiPUTnlA
ciEmnsIJFep4ss26jDsBRTK0P1UHKG5FNQqPrdRc9RnMn/O4Nb8f7HnBrdg/Nx4B
PMS9uraEy8c2w4ieEp7Fv/OjaY8/EoTtx+8IOWbcI/ggvX4l3kVSuxoCnU7Uq2PE
YlczczgBS3dJXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:52 2026 by rpki-client