Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
File: t5VYLHMwLrCpdEd2AwSYUIM70hA.mft (raw, json)
Hash identifier: EruvEBDwNla7KHkBj6JItGLyM+7P0maa79N7NmuAtRU=
Subject key identifier: 5D:38:8B:AC:EB:20:4F:AA:F2:E6:8F:5A:2B:8A:F3:9E:4D:11:B5:4B
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Certificate issuer: /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial: 019D2771CF1BD0379B9DCD5EF1FC6280AD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: 3E9T9RFa1PZkIhLi3ry8IootMJg.roa (hash: bckLvV/Gm52OLV1kFd90y/TjObd2VP8TIpXKSHLQWz4=)
2: t5VYLHMwLrCpdEd2AwSYUIM70hA.crl (hash: LasYNK2dMp8FHBcktofWgs+JgI2Yz0W2B5+X+6rRVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cf:1b:d0:37:9b:9d:cd:5e:f1:fc:62:80:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795582c73302eb0a974477603049850833bd210
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=5d388baceb204faaf2e68f5a2b8af39e4d11b54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:eb:26:51:ef:03:de:ac:dd:2b:4d:2e:be:
6e:cf:69:a9:55:bb:68:50:2f:dc:cb:d5:7e:69:90:
1a:d9:8a:0f:8e:d9:ea:4f:63:bf:f6:07:77:97:8c:
95:46:03:d9:a8:f2:6f:48:c3:f2:2b:13:52:75:ca:
7e:5a:7a:66:c1:56:ae:67:e5:82:c4:12:d4:9b:f4:
60:53:7b:92:28:0d:d9:f3:bf:07:e1:65:ae:24:6a:
f0:e9:d3:fa:43:c8:4b:26:39:59:2f:09:87:94:23:
ef:0b:8d:42:f1:1e:fc:0d:85:49:71:6e:9d:73:c4:
7d:69:11:10:9b:8a:af:48:c0:e3:f6:9e:cb:43:c7:
55:03:e2:dc:24:3f:5d:89:d8:26:2f:e2:41:35:62:
be:6e:4c:a0:63:d1:8d:27:78:8e:34:02:f9:89:f7:
52:5a:75:ce:14:b7:36:e3:4c:b4:ed:cf:b2:68:93:
dd:aa:3a:a5:7a:4a:51:b9:8c:35:e2:fd:46:56:6e:
93:ca:1b:ad:c3:22:e7:ca:3f:8c:bb:09:a5:85:58:
58:a1:4a:b4:7c:22:c8:be:28:73:43:52:5d:c6:43:
94:d3:02:5a:6b:37:12:21:8b:17:23:6c:63:f4:c6:
80:c9:90:56:32:01:a8:0d:7d:84:8c:1a:34:e4:b1:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:8B:AC:EB:20:4F:AA:F2:E6:8F:5A:2B:8A:F3:9E:4D:11:B5:4B
X509v3 Authority Key Identifier:
keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e4:98:7c:23:db:1e:c2:c9:dc:4c:8d:13:7b:72:45:0d:cb:
47:70:b8:28:ec:b2:64:09:c3:48:e6:1d:3b:70:79:77:78:18:
19:2b:2b:d0:8c:c9:5c:5e:bd:d2:f9:ca:a0:74:6d:f5:c5:4b:
d0:f5:e3:f7:b6:38:c8:ee:ec:80:59:44:ea:3a:c0:e7:5d:3c:
9c:e3:81:97:a1:c6:8c:7f:d7:37:39:1e:ef:08:03:d2:eb:38:
0b:18:f4:4e:c7:7f:e7:09:81:09:49:03:78:28:68:42:52:74:
4f:58:fc:70:ca:37:8c:51:32:cc:6b:01:a5:76:35:76:92:a3:
98:73:b7:f5:23:a5:3b:dc:84:77:c8:86:21:b3:5f:50:30:e7:
60:33:2f:5d:7d:9f:bf:12:2e:5c:29:b7:ca:53:b8:c9:c9:e1:
e6:42:05:c1:55:d9:da:f4:7d:cf:cd:65:18:6d:23:27:fe:9c:
66:6b:ab:41:fa:84:3b:c6:ed:31:3e:d6:68:a1:c8:57:6b:57:
24:cf:43:f3:13:34:a5:9c:04:d1:db:bc:a9:c3:1e:bb:d1:cd:
69:70:69:94:38:83:f6:6f:8b:27:e8:db:33:ff:1e:0f:8e:2d:
46:13:26:43:13:12:ac:fb:ea:8a:5c:89:75:25:4e:a0:35:2b:
e4:7e:38:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncc8b0Debnc1e8fxigK0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTU1ODJjNzMzMDJlYjBhOTc0NDc3NjAzMDQ5ODUwODMz
YmQyMTAwHhcNMjYwMzI2MDAwMTAzWhcNMjYwMzI3MDAwMTAzWjAzMTEwLwYDVQQD
Eyg1ZDM4OGJhY2ViMjA0ZmFhZjJlNjhmNWEyYjhhZjM5ZTRkMTFiNTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWPrJlHvA96s3StNLr5uz2mpVbto
UC/cy9V+aZAa2YoPjtnqT2O/9gd3l4yVRgPZqPJvSMPyKxNSdcp+WnpmwVauZ+WC
xBLUm/RgU3uSKA3Z878H4WWuJGrw6dP6Q8hLJjlZLwmHlCPvC41C8R78DYVJcW6d
c8R9aREQm4qvSMDj9p7LQ8dVA+LcJD9didgmL+JBNWK+bkygY9GNJ3iONAL5ifdS
WnXOFLc240y07c+yaJPdqjqlekpRuYw14v1GVm6TyhutwyLnyj+MuwmlhVhYoUq0
fCLIvihzQ1JdxkOU0wJaazcSIYsXI2xj9MaAyZBWMgGoDX2EjBo05LHkqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF04i6zrIE+q8uaPWiuK855NEbVLMB8GA1UdIwQY
MBaAFLeVWCxzMC6wqXRHdgMEmFCDO9IQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMt
YzJiZDVmYzA0NDI0LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMtYzJiZDVmYzA0NDI0
LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquSYfCPb
HsLJ3EyNE3tyRQ3LR3C4KOyyZAnDSOYdO3B5d3gYGSsr0IzJXF690vnKoHRt9cVL
0PXj97Y4yO7sgFlE6jrA5108nOOBl6HGjH/XNzke7wgD0us4Cxj0Tsd/5wmBCUkD
eChoQlJ0T1j8cMo3jFEyzGsBpXY1dpKjmHO39SOlO9yEd8iGIbNfUDDnYDMvXX2f
vxIuXCm3ylO4ycnh5kIFwVXZ2vR9z81lGG0jJ/6cZmurQfqEO8btMT7WaKHIV2tX
JM9D8xM0pZwE0du8qcMeu9HNaXBplDiD9m+LJ+jbM/8eD44tRhMmQxMSrPvqilyJ
dSVOoDUr5H44rQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:19 2026 by rpki-client