Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: 4mYirZRWdUQnGBgtIVHL557Czrsk8+mZWFrmxSyKij0=
Subject key identifier: CE:C1:72:A7:8B:EF:C7:32:81:FC:85:5D:71:21:0E:10:5F:CC:3F:19
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019D25F19FF862A1984AF047CB821EB4BA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 0554
Signing time: Wed 25 Mar 2026 17:01:25 +0000
Manifest this update: Wed 25 Mar 2026 17:01:25 +0000
Manifest next update: Thu 26 Mar 2026 17:01:25 +0000
Files and hashes: 1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: 7/GAZxujIuyBDKzaP8sDPidoXLwYXEDoQFLn0lQhvyg=)
3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9f:f8:62:a1:98:4a:f0:47:cb:82:1e:b4:ba:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Mar 25 17:01:25 2026 GMT
Not After : Mar 26 17:01:25 2026 GMT
Subject: CN=cec172a78befc73281fc855d71210e105fcc3f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:3b:d0:50:99:b3:39:18:93:c8:06:da:80:
df:2b:ec:dd:be:5f:1e:98:a5:24:3a:28:6b:ca:aa:
66:47:26:ad:45:41:f6:69:a4:4a:9c:29:5e:9d:88:
49:f7:4c:b0:e0:25:2e:c4:67:de:3e:75:30:40:35:
09:39:19:26:a9:44:ba:ff:f2:02:2f:4a:74:27:ad:
b5:61:db:47:47:5f:6f:c8:6d:b3:88:d2:fd:1e:39:
87:c7:31:e1:9a:3e:ac:03:19:52:64:8a:6f:99:41:
9b:b1:bc:49:c7:ef:37:ad:80:28:9b:d1:36:d0:6f:
32:b7:2c:06:9f:16:88:cd:a3:05:17:5d:b9:72:3f:
ad:f9:1a:4a:42:93:de:13:83:19:8f:d7:1c:04:43:
11:e3:d2:13:1f:3a:2b:db:06:e2:d8:04:37:4e:77:
d8:63:25:59:4b:4d:a6:2b:77:65:a7:ba:c4:0f:69:
46:c1:92:86:08:14:e5:eb:0b:07:00:81:a9:b7:da:
92:14:04:97:a1:18:0a:f9:17:62:f5:9c:76:64:9a:
27:41:cf:ba:ca:ad:3b:58:e2:89:f5:4c:9d:4b:72:
2a:df:5c:f2:91:f0:a7:a5:d2:81:7e:a3:ff:54:09:
b0:9e:58:2d:56:a5:d3:24:6d:e6:bb:a4:21:f7:6a:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:72:A7:8B:EF:C7:32:81:FC:85:5D:71:21:0E:10:5F:CC:3F:19
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:e2:1e:d7:7c:4a:58:7a:89:60:f6:7e:f3:3b:84:76:25:
79:db:66:b8:8e:21:58:58:99:f5:85:d1:0a:b3:f2:d5:31:2e:
44:95:c4:e5:7d:91:b2:b8:8c:4b:c1:e0:70:d4:ef:7e:01:ec:
52:a5:e8:40:46:20:9c:da:67:82:7b:04:f7:c6:bf:95:c7:21:
4a:03:6b:47:ea:02:36:05:d1:5e:47:f6:c4:35:40:35:43:ff:
13:20:d4:19:47:cc:19:c3:8a:6b:4f:5c:48:df:2f:36:c0:f3:
1e:f2:ed:85:bc:90:dd:54:0e:23:d0:6c:aa:ae:7e:92:58:4c:
58:e7:05:0f:c1:f3:4c:82:6b:d6:2e:4c:1f:91:d1:e7:af:63:
7d:79:f9:56:de:c1:66:48:37:d7:bd:c8:54:6e:b0:9e:1b:8e:
9a:e1:77:4a:36:fe:5c:a4:f4:92:73:76:3b:94:07:38:a9:72:
eb:12:0e:c5:4d:7f:cb:be:24:3f:63:f4:93:ce:a5:97:ee:43:
45:17:6d:2e:74:9b:ad:01:34:42:66:49:f6:b0:33:6e:81:52:
5c:bb:d7:e0:ad:87:a3:97:07:cf:3e:56:9c:20:15:1f:71:c5:
76:83:3e:79:1a:52:77:f8:8a:f6:c8:0e:85:d1:c9:20:60:68:
b4:c0:90:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Z/4YqGYSvBHy4IetLqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OGZmNzM5MjVhMjM2OTI4NDdlZDkyYmM2NjYxM2ZkNDcw
NjhkY2YwHhcNMjYwMzI1MTcwMTI1WhcNMjYwMzI2MTcwMTI1WjAzMTEwLwYDVQQD
EyhjZWMxNzJhNzhiZWZjNzMyODFmYzg1NWQ3MTIxMGUxMDVmY2MzZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu470FCZszkYk8gG2oDfK+zdvl8e
mKUkOihryqpmRyatRUH2aaRKnClenYhJ90yw4CUuxGfePnUwQDUJORkmqUS6//IC
L0p0J621YdtHR19vyG2ziNL9HjmHxzHhmj6sAxlSZIpvmUGbsbxJx+83rYAom9E2
0G8ytywGnxaIzaMFF125cj+t+RpKQpPeE4MZj9ccBEMR49ITHzor2wbi2AQ3TnfY
YyVZS02mK3dlp7rED2lGwZKGCBTl6wsHAIGpt9qSFASXoRgK+Rdi9Zx2ZJonQc+6
yq07WOKJ9UydS3Iq31zykfCnpdKBfqP/VAmwnlgtVqXTJG3mu6Qh92qWMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7BcqeL78cygfyFXXEhDhBfzD8ZMB8GA1UdIwQY
MBaAFOWP9zklojaShH7ZK8ZmE/1HBo3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUt
N2I0N2I1YmE2YWVkLzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUtN2I0N2I1YmE2YWVk
LzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzniHtd8
Slh6iWD2fvM7hHYledtmuI4hWFiZ9YXRCrPy1TEuRJXE5X2RsriMS8HgcNTvfgHs
UqXoQEYgnNpngnsE98a/lcchSgNrR+oCNgXRXkf2xDVANUP/EyDUGUfMGcOKa09c
SN8vNsDzHvLthbyQ3VQOI9Bsqq5+klhMWOcFD8HzTIJr1i5MH5HR569jfXn5Vt7B
Zkg3173IVG6wnhuOmuF3Sjb+XKT0knN2O5QHOKly6xIOxU1/y74kP2P0k86ll+5D
RRdtLnSbrQE0QmZJ9rAzboFSXLvX4K2Ho5cHzz5WnCAVH3HFdoM+eRpSd/iK9sgO
hdHJIGBotMCQOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:24 2026 by rpki-client