Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier: TkFeeZdkC/1tJRFpaoEXrVVmT30X+WEUofUcTQo/wj4=
Subject key identifier: A5:42:46:67:F9:66:3F:50:F1:A7:AE:1E:37:DC:8B:04:3E:78:D6:D3
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 019D284DE3867E4BB3FA16BF84E1D9ECE21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number: 0BB3
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: yLOX3XxIF3+Um3wqbQyDveSG+OwWfmmksHMy9/G7MbA=)
2: hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa (hash: fAcJlzHm8GX5dH8gtKkRjvytkl6PKP9fjOi2EMtY8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e3:86:7e:4b:b3:fa:16:bf:84:e1:d9:ec:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=a5424667f9663f50f1a7ae1e37dc8b043e78d6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:fe:f7:66:f2:d3:00:9d:bb:e4:d8:54:bc:
ed:e6:60:db:36:35:95:03:d9:a7:b6:d9:8d:50:14:
cf:c6:a8:e9:51:1c:de:30:41:df:1f:ba:cc:a1:45:
7c:13:89:f4:e4:e4:63:46:13:62:f5:12:4b:6d:fc:
22:41:6a:1b:18:ad:a4:d1:39:81:72:26:ce:9f:0d:
f3:1b:0c:5e:74:c0:14:87:33:a4:db:82:34:49:b9:
5d:90:c4:42:9f:f7:46:f5:03:57:69:a5:c0:11:95:
e4:ef:93:0c:f8:c2:29:bc:20:df:99:7b:1a:7a:15:
e9:0f:60:d4:a2:ab:c5:24:48:82:83:3e:e0:0f:df:
6a:f9:7f:dd:0c:e0:e2:73:64:a4:1e:0a:ee:80:f1:
86:0c:d3:a9:60:39:7a:e4:af:fd:2e:96:33:9e:56:
c5:8d:e3:ba:11:a2:8c:43:a0:6b:e0:b2:44:36:55:
ff:48:70:28:c6:96:17:42:64:ec:fd:84:4f:e3:ff:
ac:16:cd:b9:b8:af:46:69:49:38:ca:d4:96:d7:bd:
0f:f2:d3:d1:5c:92:e1:da:34:ae:6d:4c:89:b1:ac:
6a:15:3d:53:68:8e:0c:ad:48:12:ed:55:25:48:b4:
26:36:cd:9e:0c:13:dd:83:96:a8:42:b3:2c:bb:38:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:42:46:67:F9:66:3F:50:F1:A7:AE:1E:37:DC:8B:04:3E:78:D6:D3
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f8:6a:f7:d4:60:ef:b0:2d:7f:c2:1c:e6:ed:25:16:7c:81:
11:0f:50:e1:48:2f:a4:0d:c5:f8:53:d3:04:aa:f9:10:2a:b8:
78:82:0a:fb:86:f7:7a:10:6e:34:ee:ca:6a:9e:f4:cd:78:f7:
68:88:0b:61:98:e5:39:49:73:0e:bd:d8:d6:03:6b:86:38:37:
cf:04:18:f8:d5:16:81:b0:fe:13:7e:c5:a0:a6:af:bf:a1:94:
b5:2d:c8:85:70:d3:8f:9c:36:84:f9:8b:15:f1:88:e1:19:1b:
a9:c3:fb:05:7a:54:41:e8:86:a3:81:14:d3:aa:d7:b7:7e:f9:
1f:f3:1c:2b:02:87:e6:c8:19:53:d5:23:91:a4:07:3b:63:89:
ed:f6:16:35:38:19:35:99:ec:42:06:60:5e:74:f8:ae:11:ed:
9a:88:8f:9c:cb:b8:d8:66:b8:51:88:26:3d:f1:07:20:da:ff:
e4:0a:d7:33:0c:36:33:b6:6f:0d:19:7b:11:1e:be:7a:70:27:
1d:ca:12:b8:e0:f4:e9:74:a9:d1:dd:9f:cd:fb:51:d7:a9:26:
85:49:98:2b:12:67:75:ae:d5:c0:d4:f4:c9:61:55:ab:36:b0:
5c:3f:03:6f:43:e1:a1:b2:34:c4:bf:b8:11:d9:6b:ef:8a:5e:
54:2c:47:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTeOGfkuz+ha/hOHZ7OIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTg1MjQ0NTlmOTEzNTBiZjNhNzBiZGRlYTAyYmI3ZjE5
OGY2MjcwHhcNMjYwMzI2MDQwMTI2WhcNMjYwMzI3MDQwMTI2WjAzMTEwLwYDVQQD
EyhhNTQyNDY2N2Y5NjYzZjUwZjFhN2FlMWUzN2RjOGIwNDNlNzhkNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+r+92by0wCdu+TYVLzt5mDbNjWV
A9mnttmNUBTPxqjpURzeMEHfH7rMoUV8E4n05ORjRhNi9RJLbfwiQWobGK2k0TmB
cibOnw3zGwxedMAUhzOk24I0SbldkMRCn/dG9QNXaaXAEZXk75MM+MIpvCDfmXsa
ehXpD2DUoqvFJEiCgz7gD99q+X/dDODic2SkHgrugPGGDNOpYDl65K/9LpYznlbF
jeO6EaKMQ6Br4LJENlX/SHAoxpYXQmTs/YRP4/+sFs25uK9GaUk4ytSW170P8tPR
XJLh2jSubUyJsaxqFT1TaI4MrUgS7VUlSLQmNs2eDBPdg5aoQrMsuzjXiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVCRmf5Zj9Q8aeuHjfciwQ+eNbTMB8GA1UdIwQY
MBaAFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEt
YzQxOWU3MTI5OTI4LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEtYzQxOWU3MTI5OTI4
LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfhq99Rg
77Atf8Ic5u0lFnyBEQ9Q4UgvpA3F+FPTBKr5ECq4eIIK+4b3ehBuNO7Kap70zXj3
aIgLYZjlOUlzDr3Y1gNrhjg3zwQY+NUWgbD+E37FoKavv6GUtS3IhXDTj5w2hPmL
FfGI4RkbqcP7BXpUQeiGo4EU06rXt375H/McKwKH5sgZU9UjkaQHO2OJ7fYWNTgZ
NZnsQgZgXnT4rhHtmoiPnMu42Ga4UYgmPfEHINr/5ArXMww2M7ZvDRl7ER6+enAn
HcoSuOD06XSp0d2fzftR16kmhUmYKxJnda7VwNT0yWFVqzawXD8Db0PhobI0xL+4
Edlr74peVCxH1Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:23 2026 by rpki-client