Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: GVcUIuSEf72SbFzq8smOQJi2BKnEEVLp2yX604AKkKU=
Subject key identifier: 43:D4:6B:51:C9:75:EC:0B:9D:53:FC:3D:61:D1:56:F3:F8:48:0B:10
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 019D27E070AF0FA08EF09050F6794042D764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: gSEtp7uXQfFdV+qqghVxplYcGICb9emVc281GsPgahs=)
2: 8n1cP-EeM_0aPON8tQRs5t94Tcw.roa (hash: oWMSKnzC7MzhiIiFzW+fvutsE0+XNV6RpmpSUYLiCP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:70:af:0f:a0:8e:f0:90:50:f6:79:40:42:d7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=43d46b51c975ec0b9d53fc3d61d156f3f8480b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:32:ed:e9:49:13:d6:a9:1e:1f:70:52:6e:
39:aa:81:a5:ce:66:5c:d3:ab:6f:aa:76:fc:ca:78:
2b:99:38:ef:fe:fd:fe:af:fc:1b:b1:a6:5d:6a:0f:
09:71:f6:18:54:ff:80:9e:6f:60:41:82:cf:2c:9c:
6b:8e:3c:f3:24:23:47:68:de:e8:d8:32:76:91:f3:
a9:ae:e5:ba:93:90:8d:34:dc:e9:6a:e1:da:80:88:
8e:f2:cf:e9:3d:c8:95:64:4c:aa:b4:31:b3:4b:d1:
48:57:b8:a3:ba:b4:ae:77:96:83:f7:81:94:4a:37:
19:2f:ac:a8:13:be:82:ae:26:10:5e:16:20:c0:35:
68:83:ac:bb:f1:b1:fc:e4:9e:7e:46:d7:1a:a1:60:
0f:19:be:ea:d8:e7:97:eb:11:e9:65:28:9f:f0:99:
fc:92:b0:f0:bf:32:5c:74:e3:9f:8b:f3:f4:20:18:
8e:27:d8:7a:da:66:da:29:65:7a:c4:a3:71:34:2c:
8f:08:b6:9a:47:fc:96:26:d0:0e:ed:db:e3:9f:da:
dc:02:b9:7e:5c:72:d7:37:d5:ab:2d:8d:c2:2f:37:
6e:17:80:b9:31:a4:c2:08:6f:b9:d6:07:2c:8d:45:
55:5b:a6:a5:ac:ab:98:a2:b8:f9:26:7a:9c:ea:71:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D4:6B:51:C9:75:EC:0B:9D:53:FC:3D:61:D1:56:F3:F8:48:0B:10
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b1:c4:da:c9:86:db:5f:e1:ec:8d:dd:f4:04:c7:72:25:d1:
4f:71:64:6d:bf:85:e6:c8:31:b2:e5:44:cd:20:0a:e0:df:92:
65:3a:d7:a4:11:3e:69:01:f7:4d:93:12:48:4a:1a:96:28:a9:
7b:c6:13:8d:76:c3:81:a4:7e:13:89:57:f5:2b:d7:c6:6a:cb:
7f:10:6f:68:bb:b9:14:af:8b:a6:36:87:77:90:18:0f:de:fb:
ed:17:02:ef:ed:08:da:33:6a:4d:ef:78:88:d3:fa:56:d0:02:
84:49:93:54:be:c8:91:7b:c9:05:c9:90:88:ad:2c:64:d3:bf:
06:ad:a4:7e:fa:a9:b3:94:df:56:09:32:31:23:ad:b1:04:4d:
27:45:bb:45:cd:77:d2:11:2a:c4:fa:8d:f7:bb:6c:74:15:46:
5d:62:42:97:20:af:29:5b:78:f6:85:52:ba:16:7d:b4:5c:03:
07:80:83:2b:f8:36:89:1a:78:14:6c:ff:d1:f7:7d:05:4b:0c:
94:01:3f:1c:fd:8f:ec:09:10:89:ba:99:aa:e6:3e:48:fa:55:
72:31:c1:73:41:e1:09:2a:f9:a7:bb:72:ee:15:25:b1:1f:47:
4d:05:0e:ef:59:fc:66:4e:aa:e5:51:22:6a:56:27:e5:36:09:
67:0b:a7:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4HCvD6CO8JBQ9nlAQtdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjRjNTNhZjY1ZjBiODM5NmI5NWI0ZDA3ZDRlYzRlN2Jl
Mjc3ZTUwHhcNMjYwMzI2MDIwMTUzWhcNMjYwMzI3MDIwMTUzWjAzMTEwLwYDVQQD
Eyg0M2Q0NmI1MWM5NzVlYzBiOWQ1M2ZjM2Q2MWQxNTZmM2Y4NDgwYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q0y7elJE9apHh9wUm45qoGlzmZc
06tvqnb8yngrmTjv/v3+r/wbsaZdag8JcfYYVP+Anm9gQYLPLJxrjjzzJCNHaN7o
2DJ2kfOpruW6k5CNNNzpauHagIiO8s/pPciVZEyqtDGzS9FIV7ijurSud5aD94GU
SjcZL6yoE76CriYQXhYgwDVog6y78bH85J5+RtcaoWAPGb7q2OeX6xHpZSif8Jn8
krDwvzJcdOOfi/P0IBiOJ9h62mbaKWV6xKNxNCyPCLaaR/yWJtAO7dvjn9rcArl+
XHLXN9WrLY3CLzduF4C5MaTCCG+51gcsjUVVW6alrKuYorj5Jnqc6nHjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPUa1HJdewLnVP8PWHRVvP4SAsQMB8GA1UdIwQY
MBaAFOS0xTr2XwuDlrlbTQfU7E574nflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUt
ODhkYjAxMjVhNmI4LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUtODhkYjAxMjVhNmI4
LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrHE2smG
21/h7I3d9ATHciXRT3Fkbb+F5sgxsuVEzSAK4N+SZTrXpBE+aQH3TZMSSEoaliip
e8YTjXbDgaR+E4lX9SvXxmrLfxBvaLu5FK+LpjaHd5AYD9777RcC7+0I2jNqTe94
iNP6VtAChEmTVL7IkXvJBcmQiK0sZNO/Bq2kfvqps5TfVgkyMSOtsQRNJ0W7Rc13
0hEqxPqN97tsdBVGXWJClyCvKVt49oVSuhZ9tFwDB4CDK/g2iRp4FGz/0fd9BUsM
lAE/HP2P7AkQibqZquY+SPpVcjHBc0HhCSr5p7ty7hUlsR9HTQUO71n8Zk6q5VEi
alYn5TYJZwuneQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:33 2026 by rpki-client