Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
File: 5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json)
Hash identifier: RcKE1Ta2B4/v9yd/xbPuxIGIC43DGOvLTVUQmDa62HM=
Subject key identifier: 18:03:F6:1A:88:CF:DB:36:35:DB:4C:78:EA:AE:48:AF:7F:1E:4E:BB
Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Certificate serial: 019D2771E7DAD56CD09F11EBEE8CFD357A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
Manifest number: 0683
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: H4xxUMciv0wKhkNT+Ernz1r4VQ9fX1cMPm759XMgP0E=)
2: FAvhW8sWKAscHGAU3zgxhLTugZQ.roa (hash: X1WXq/o7P8HF12gEZBw3GGE/Mbe7dHMWJeZRsRBeNTQ=)
3: MIF8N-KpLT760HK_96OqYdm8Sr8.roa (hash: i6ivYqrYWRkrcljfnaVnu2kE1lYrM4nCwRHvHmb1hvA=)
4: qcFtPoETurA1PkvXMkugUfoiKGU.roa (hash: m5xsMcWMBwTe7Bg6C7QmtOlyUFNHQEv2lA3sKFUAMJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e7:da:d5:6c:d0:9f:11:eb:ee:8c:fd:35:7a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=1803f61a88cfdb3635db4c78eaae48af7f1e4ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:b5:b4:94:da:cc:5e:ee:90:34:56:d9:9c:
6a:20:86:fa:ef:9c:eb:8c:7d:6e:4a:f8:0e:46:2c:
85:06:12:97:d2:4f:89:46:34:21:88:f1:33:7d:dd:
b5:aa:7c:c6:8a:fb:39:2c:93:fc:bc:76:37:e6:a5:
fc:6b:67:a3:66:0b:9f:21:e0:b9:bb:39:ff:c5:c3:
c3:36:b1:3b:bb:66:30:11:f6:c8:1f:8f:b0:2d:77:
da:bd:79:55:44:08:8d:c1:94:87:0b:cf:f1:7d:c6:
37:b9:4c:d7:f8:ec:3a:b3:6a:36:14:00:3d:a3:84:
a1:4c:5d:6d:50:87:2a:96:6f:1e:fd:05:93:36:0a:
ab:49:90:70:85:59:a9:5c:b9:1e:36:e3:c3:5d:97:
e1:83:d7:86:60:52:0f:0e:80:9b:42:ca:78:b1:e0:
cb:cd:a8:66:bb:98:46:8f:2e:68:23:87:07:dc:db:
ee:0e:20:03:2b:7e:78:13:d1:87:c2:3e:67:f3:9f:
4f:62:94:55:2f:6c:4a:2e:0e:3d:bc:ae:47:85:d9:
bc:41:85:91:a8:45:61:9f:ee:bf:f0:ff:16:81:9e:
ca:3f:09:a6:7a:b1:25:60:e4:d2:94:75:0b:ae:5c:
99:b7:c6:48:cf:f5:99:91:1e:81:36:d9:f9:3d:eb:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:F6:1A:88:CF:DB:36:35:DB:4C:78:EA:AE:48:AF:7F:1E:4E:BB
X509v3 Authority Key Identifier:
keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:70:2b:35:87:42:98:e0:a9:fc:c2:1f:be:e1:e8:ac:00:bb:
da:cb:8c:4b:e6:49:97:ec:d0:35:bd:ac:8c:33:a4:37:7f:0a:
6e:1e:8e:a0:f2:f3:b3:d0:fd:06:98:a4:41:c5:dc:08:83:f6:
8e:8c:38:76:b6:4b:01:37:7e:85:f6:9b:12:95:c3:bc:8c:24:
15:ed:bd:87:fb:b5:d0:6c:fb:23:3d:6c:a6:f2:51:c4:95:0c:
4d:a6:bc:9f:72:d3:e1:11:f3:dc:7f:ba:0d:d6:6a:f7:97:e7:
5d:e5:65:a8:dc:d0:d5:06:33:80:df:ae:ec:dc:0f:8e:98:01:
79:8a:ca:12:56:6e:e7:1d:b2:d0:f7:71:aa:fd:b2:ac:aa:0a:
3e:c4:d4:96:c1:1b:bc:a7:ed:a4:cc:95:fd:75:3d:9a:84:0f:
d5:3e:fa:4e:6c:23:ed:fe:08:8c:de:43:42:a0:8c:b5:e7:04:
1b:ad:b4:f4:dc:3c:61:c6:74:27:f5:9e:fd:68:e7:c9:56:83:
b7:24:89:c7:2d:cb:c9:0b:98:93:d4:30:31:e0:1b:11:83:7d:
cb:7c:f4:58:94:2c:ac:6c:bf:22:ec:33:4e:79:c6:dc:a6:85:
49:d1:94:fb:1d:24:a8:31:7b:cb:53:da:59:af:95:63:24:cd:
69:ec:33:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncefa1WzQnxHr7oz9NXphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MmQ4YjVjYmE3YzJkMmI4YWYwNDZlYjdmMzEwMTA1YWMw
YzA5YWMwHhcNMjYwMzI2MDAwMTA5WhcNMjYwMzI3MDAwMTA5WjAzMTEwLwYDVQQD
EygxODAzZjYxYTg4Y2ZkYjM2MzVkYjRjNzhlYWFlNDhhZjdmMWU0ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk61tJTazF7ukDRW2ZxqIIb675zr
jH1uSvgORiyFBhKX0k+JRjQhiPEzfd21qnzGivs5LJP8vHY35qX8a2ejZgufIeC5
uzn/xcPDNrE7u2YwEfbIH4+wLXfavXlVRAiNwZSHC8/xfcY3uUzX+Ow6s2o2FAA9
o4ShTF1tUIcqlm8e/QWTNgqrSZBwhVmpXLkeNuPDXZfhg9eGYFIPDoCbQsp4seDL
zahmu5hGjy5oI4cH3NvuDiADK354E9GHwj5n859PYpRVL2xKLg49vK5Hhdm8QYWR
qEVhn+6/8P8WgZ7KPwmmerElYOTSlHULrlyZt8ZIz/WZkR6BNtn5Pev4AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgD9hqIz9s2NdtMeOquSK9/Hk67MB8GA1UdIwQY
MBaAFOUti1y6fC0rivBG638xAQWsDAmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt
YzBkMDYyYTc1MzU0LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0
LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0XArNYdC
mOCp/MIfvuHorAC72suMS+ZJl+zQNb2sjDOkN38Kbh6OoPLzs9D9BpikQcXcCIP2
jow4drZLATd+hfabEpXDvIwkFe29h/u10Gz7Iz1spvJRxJUMTaa8n3LT4RHz3H+6
DdZq95fnXeVlqNzQ1QYzgN+u7NwPjpgBeYrKElZu5x2y0Pdxqv2yrKoKPsTUlsEb
vKftpMyV/XU9moQP1T76Tmwj7f4IjN5DQqCMtecEG6209Nw8YcZ0J/We/WjnyVaD
tySJxy3LyQuYk9QwMeAbEYN9y3z0WJQsrGy/IuwzTnnG3KaFSdGU+x0kqDF7y1Pa
Wa+VYyTNaewzng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:29 2026 by rpki-client