Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier: 5lldvYKBB+xfayHsHCLFReSzJ0D0OgtAJt1+RvkNCjs=
Subject key identifier: DA:FF:CB:33:52:3F:B9:E1:29:8C:2F:05:C5:DC:BD:A1:77:D2:22:07
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019D25F126A925E359FB5525F959EA4C52D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number: 18A0
Signing time: Wed 25 Mar 2026 17:00:54 +0000
Manifest this update: Wed 25 Mar 2026 17:00:54 +0000
Manifest next update: Thu 26 Mar 2026 17:00:54 +0000
Files and hashes: 1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: jM2XlbT4Ekh/DOq9lr+Szv61VcqZVRG+oo8mguGXXr4=)
4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:26:a9:25:e3:59:fb:55:25:f9:59:ea:4c:52:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Mar 25 17:00:54 2026 GMT
Not After : Mar 26 17:00:54 2026 GMT
Subject: CN=daffcb33523fb9e1298c2f05c5dcbda177d22207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:83:3f:f3:a9:c7:a0:be:d9:31:02:07:25:
22:19:29:69:6e:86:b9:cd:78:12:a7:ce:66:84:ea:
a0:a4:f4:fe:03:a3:c0:ab:e4:cb:6c:9a:72:f7:a8:
07:af:26:c5:e5:6d:e4:90:34:dd:9a:d7:53:09:a6:
3e:fd:dc:c7:d8:6a:5e:18:b6:85:0b:e6:61:8b:f9:
70:05:a1:b2:76:d4:e3:fc:30:f3:f5:22:4a:09:d2:
43:1c:06:c0:0c:9e:93:bb:18:ed:df:72:e4:41:69:
b0:a1:90:7d:ad:64:42:25:3b:2f:db:c0:ca:05:59:
94:cf:37:57:17:b1:2f:00:c8:b9:90:76:f9:70:0c:
cc:20:45:7e:87:f9:2e:84:13:12:d4:fb:f2:9e:83:
bf:3c:4a:78:e6:dd:cb:65:3d:65:de:96:74:4b:90:
16:84:03:f5:7f:63:f9:3d:40:83:ac:2f:07:97:3b:
7a:94:b0:a2:7e:31:c3:d4:c2:2f:8f:22:ad:6b:ed:
d1:ce:a1:05:17:19:9a:0c:57:df:20:f0:d0:a4:f5:
90:d4:5c:fd:8d:7c:8f:83:ad:25:6f:ab:53:b9:e0:
fa:f5:e1:d5:f9:8f:31:91:eb:dc:da:cf:a7:f1:9f:
6e:69:ae:89:8a:29:20:db:5c:f5:3d:a3:23:79:e3:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FF:CB:33:52:3F:B9:E1:29:8C:2F:05:C5:DC:BD:A1:77:D2:22:07
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:35:b2:07:94:6f:8a:14:2b:0b:9d:a2:36:c3:c8:fe:36:24:
05:f4:0f:4e:a2:fc:cd:01:f4:4f:93:66:16:13:cc:96:9a:19:
eb:81:50:37:b0:7e:b7:3f:65:f4:2f:a1:5a:2a:54:7d:52:2d:
21:10:1c:fa:8d:9b:23:f0:fa:02:1a:6c:89:07:44:59:fd:f4:
a9:65:0d:56:21:94:8c:d7:13:43:72:77:30:ea:58:f9:fc:2c:
89:a0:79:7f:0e:14:aa:25:0a:28:a5:f0:a0:98:f9:77:a7:0a:
16:79:ae:26:ef:cf:76:52:fa:3e:f7:ef:c4:74:e5:4d:22:1e:
b5:26:60:9c:88:66:cf:cc:7b:50:92:8c:a4:ad:6d:c9:ff:0e:
28:f8:75:12:01:cd:a4:b7:87:38:b6:2c:bc:3d:d5:52:be:04:
d3:93:ab:34:96:66:4f:4d:6e:c9:ed:e7:70:05:c7:3c:db:2b:
6f:49:1a:f6:b0:04:96:c5:29:bb:ba:34:45:83:6c:06:13:55:
fa:54:7a:e2:d0:56:44:8f:70:25:94:26:93:70:13:c6:1b:10:
37:d1:28:f3:33:a3:2a:27:10:53:33:2f:13:d5:ab:36:81:ed:
0f:41:23:56:a9:f1:e2:29:47:6f:80:67:af:0f:69:d0:9a:54:
fb:98:1f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8SapJeNZ+1Ul+VnqTFLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5
ZTcwOTMwHhcNMjYwMzI1MTcwMDU0WhcNMjYwMzI2MTcwMDU0WjAzMTEwLwYDVQQD
EyhkYWZmY2IzMzUyM2ZiOWUxMjk4YzJmMDVjNWRjYmRhMTc3ZDIyMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+eDP/Opx6C+2TECByUiGSlpboa5
zXgSp85mhOqgpPT+A6PAq+TLbJpy96gHrybF5W3kkDTdmtdTCaY+/dzH2GpeGLaF
C+Zhi/lwBaGydtTj/DDz9SJKCdJDHAbADJ6Tuxjt33LkQWmwoZB9rWRCJTsv28DK
BVmUzzdXF7EvAMi5kHb5cAzMIEV+h/kuhBMS1PvynoO/PEp45t3LZT1l3pZ0S5AW
hAP1f2P5PUCDrC8Hlzt6lLCifjHD1MIvjyKta+3RzqEFFxmaDFffIPDQpPWQ1Fz9
jXyPg60lb6tTueD69eHV+Y8xkevc2s+n8Z9uaa6Jiikg21z1PaMjeeOqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr/yzNSP7nhKYwvBcXcvaF30iIHMB8GA1UdIwQY
MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt
ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh
LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTWyB5Rv
ihQrC52iNsPI/jYkBfQPTqL8zQH0T5NmFhPMlpoZ64FQN7B+tz9l9C+hWipUfVIt
IRAc+o2bI/D6AhpsiQdEWf30qWUNViGUjNcTQ3J3MOpY+fwsiaB5fw4UqiUKKKXw
oJj5d6cKFnmuJu/PdlL6PvfvxHTlTSIetSZgnIhmz8x7UJKMpK1tyf8OKPh1EgHN
pLeHOLYsvD3VUr4E05OrNJZmT01uye3ncAXHPNsrb0ka9rAElsUpu7o0RYNsBhNV
+lR64tBWRI9wJZQmk3ATxhsQN9Eo8zOjKicQUzMvE9WrNoHtD0EjVqnx4ilHb4Bn
rw9p0JpU+5gfgA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:26 2026 by rpki-client