Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier: tc00JMCSwDOEMLqoKV/gXe519KeZSeeqXeOl31GNpfw=
Subject key identifier: 29:80:9E:46:D4:16:E5:87:E3:49:D8:F6:F2:44:EB:8A:04:D5:4B:74
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 019D29CDBD86A6B833D8B1FD95116ED65217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:00:42 +0000
Manifest this update: Thu 26 Mar 2026 11:00:42 +0000
Manifest next update: Fri 27 Mar 2026 11:00:42 +0000
Files and hashes: 1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: Iu6H3T+X+QHMYJuWiDvp+FLq01PDvi6E5S+K7/R8Nbs=)
2: P39ugDcLvRSRgxyi-0KZpHQEqhs.roa (hash: hvw+iWajh4kVRMPbjAFg3SlmXwK5dhZKnwTAvA/Phbc=)
3: RutY2PEzNNQaSoLjnZ05mYIop5Q.roa (hash: XzQEjLEwEdF5fa58iJ8ASdj8lsvXpmYLt3uKDH2dqwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:bd:86:a6:b8:33:d8:b1:fd:95:11:6e:d6:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Mar 26 11:00:42 2026 GMT
Not After : Mar 27 11:00:42 2026 GMT
Subject: CN=29809e46d416e587e349d8f6f244eb8a04d54b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:bb:a6:b0:ca:f1:43:ce:91:fc:83:ed:2d:
cf:d7:72:ea:61:9a:2f:a3:86:25:ff:ea:9a:c8:73:
cc:d2:56:40:df:aa:cb:30:af:95:c0:e6:27:6d:54:
5d:f0:5e:d2:f5:8f:89:87:a9:d7:e0:73:4d:41:37:
75:15:0f:db:5b:f9:e6:aa:10:81:3a:37:14:d0:3a:
84:f7:38:60:ea:58:44:9b:31:a1:5d:fd:cb:f5:a8:
fa:d1:b4:6c:25:13:80:f4:1c:84:04:38:1e:a9:18:
fe:7d:97:7b:c3:93:24:d3:de:06:42:59:24:53:a8:
45:f0:aa:18:eb:04:e8:ca:0e:fa:36:53:7e:a4:02:
55:bc:bb:42:b9:d9:67:8f:42:72:df:5d:b1:ef:50:
44:19:4f:2e:74:9f:f7:f5:19:1c:81:e8:eb:26:9a:
08:c7:9d:45:5e:98:c0:57:d2:98:a2:aa:d4:f8:35:
f1:2c:a3:41:1f:69:fa:77:ac:46:89:06:a3:68:0c:
61:b8:0c:97:d9:34:c7:f5:2a:d7:b6:64:1f:f0:f5:
fe:31:77:eb:22:a9:42:30:90:14:02:9f:f9:eb:34:
a3:ce:70:fe:0b:76:0f:36:d5:db:09:27:19:38:47:
98:f2:3d:d1:0a:cc:b1:85:75:88:4f:c8:28:cc:dd:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:9E:46:D4:16:E5:87:E3:49:D8:F6:F2:44:EB:8A:04:D5:4B:74
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:b3:9f:a2:37:17:6d:bf:8c:12:fd:7c:74:46:1a:1f:ff:
90:66:51:42:c3:77:a8:c4:0d:c5:dd:4a:da:66:3f:8c:2a:41:
3e:dd:78:95:ba:ed:8c:ec:f2:61:78:2e:5b:83:b0:12:52:ca:
bc:a6:f4:a4:c5:55:2c:36:fd:54:6d:4b:bc:50:9e:7c:8e:d7:
71:ba:89:3b:ee:72:85:10:50:ce:6f:66:3c:47:bb:8e:e6:30:
5d:f3:33:5f:53:aa:89:db:3c:72:9e:b7:3a:8a:87:92:30:4e:
d9:44:4d:a6:6e:ef:52:a6:6f:e8:39:7b:d7:37:89:fb:d6:63:
00:ff:f6:f3:e8:27:b8:cd:bf:b2:af:29:ff:8c:96:8d:87:1b:
e0:42:c6:be:a4:50:6d:93:10:ae:43:64:93:ec:5a:93:5d:42:
5f:07:16:9b:e3:50:7d:59:43:70:12:dc:91:9f:e6:f5:f5:58:
dc:f3:f5:bc:ce:d0:23:f0:61:21:56:6d:1a:67:2c:4a:81:60:
d9:63:11:15:39:00:d5:f4:e3:57:0d:00:d1:88:d7:a5:35:24:
99:18:c9:a7:c2:ec:fd:74:c9:7b:cb:b9:f0:c7:64:05:b2:66:
dd:d6:f8:6c:70:e3:3f:c4:5d:41:2a:ef:fe:05:8c:da:f5:e9:
c6:53:31:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzb2Gprgz2LH9lRFu1lIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NWJjZTE2M2NiNTAyYTY1N2YyNzJmNzlmZDNlNDg3ZmJi
ZDRiODgwHhcNMjYwMzI2MTEwMDQyWhcNMjYwMzI3MTEwMDQyWjAzMTEwLwYDVQQD
EygyOTgwOWU0NmQ0MTZlNTg3ZTM0OWQ4ZjZmMjQ0ZWI4YTA0ZDU0Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/q7prDK8UPOkfyD7S3P13LqYZov
o4Yl/+qayHPM0lZA36rLMK+VwOYnbVRd8F7S9Y+Jh6nX4HNNQTd1FQ/bW/nmqhCB
OjcU0DqE9zhg6lhEmzGhXf3L9aj60bRsJROA9ByEBDgeqRj+fZd7w5Mk094GQlkk
U6hF8KoY6wToyg76NlN+pAJVvLtCudlnj0Jy312x71BEGU8udJ/39RkcgejrJpoI
x51FXpjAV9KYoqrU+DXxLKNBH2n6d6xGiQajaAxhuAyX2TTH9SrXtmQf8PX+MXfr
IqlCMJAUAp/56zSjznD+C3YPNtXbCScZOEeY8j3RCsyxhXWIT8gozN09zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmAnkbUFuWH40nY9vJE64oE1Ut0MB8GA1UdIwQY
MBaAFOdbzhY8tQKmV/Jy95/T5If7vUuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgt
NGI4NTc4NzE1MTU0LzEvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgtNGI4NTc4NzE1MTU0
LzEvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBizn6I3
F22/jBL9fHRGGh//kGZRQsN3qMQNxd1K2mY/jCpBPt14lbrtjOzyYXguW4OwElLK
vKb0pMVVLDb9VG1LvFCefI7XcbqJO+5yhRBQzm9mPEe7juYwXfMzX1Oqids8cp63
OoqHkjBO2URNpm7vUqZv6Dl71zeJ+9ZjAP/28+gnuM2/sq8p/4yWjYcb4ELGvqRQ
bZMQrkNkk+xak11CXwcWm+NQfVlDcBLckZ/m9fVY3PP1vM7QI/BhIVZtGmcsSoFg
2WMRFTkA1fTjVw0A0YjXpTUkmRjJp8Ls/XTJe8u58MdkBbJm3db4bHDjP8RdQSrv
/gWM2vXpxlMxSw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:44 2026 by rpki-client