Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json)
Hash identifier: K99ismnCxHfZgJBvNodK0KjBEmFmGA62ToYYce6L9ds=
Subject key identifier: 18:59:C4:5A:C5:D9:3E:79:F3:B2:75:F1:81:1A:00:76:58:F6:71:00
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019E1EDA0E06FF38887647201229083B6589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
Manifest number: 0150
Signing time: Wed 13 May 2026 01:01:07 +0000
Manifest this update: Wed 13 May 2026 01:01:07 +0000
Manifest next update: Thu 14 May 2026 01:01:07 +0000
Files and hashes: 1: 1K-wZ5uPostKh-fkGAk4IVnMfEQ.roa (hash: T108aWezzyk0uJTlEQH1843+W6VdA3vjDPONZfC4M34=)
2: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: AGqMZj/jicYza4vAP9IU0ehGQcMuIjD5CTQirjnJBqs=)
3: WJpRhcAh1CAtYyAM_DLd9bpr2Js.roa (hash: /W0CGNihCPhIf7S2HH4RB+ml0KPuTVy+3/SiD+h8lEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:0e:06:ff:38:88:76:47:20:12:29:08:3b:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: May 13 01:01:07 2026 GMT
Not After : May 14 01:01:07 2026 GMT
Subject: CN=1859c45ac5d93e79f3b275f1811a007658f67100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:de:57:1b:db:9f:8b:67:e8:ca:d8:6b:59:
4e:49:fd:d3:bb:c2:eb:5f:b5:47:3e:25:27:5a:6d:
21:57:ff:ed:d9:36:2e:d9:7c:70:03:e9:87:77:73:
47:7a:4e:19:c1:ed:fb:8e:8a:0e:88:cc:50:95:d8:
66:e6:ff:47:29:c9:d0:ad:d2:0f:52:a7:05:76:3a:
68:fc:57:26:c9:89:62:98:7f:be:26:71:fb:1e:c4:
da:db:af:48:91:a0:f3:65:5b:79:04:16:ac:d2:35:
ea:d6:ed:3f:c4:1e:5f:8e:d8:07:c0:ae:14:a3:a8:
50:e0:b3:48:c8:9c:1d:77:79:ce:53:90:7d:44:2e:
e6:99:af:40:1f:18:3c:84:31:5b:17:bb:21:64:13:
b7:41:f0:7f:e0:87:06:15:64:37:c5:68:1c:1e:54:
51:c2:b9:f7:4e:5c:75:3d:d4:9e:db:20:62:34:9b:
87:b4:e5:5b:a8:78:90:ac:fd:f0:31:67:6d:fe:05:
bd:bd:ae:0d:54:a9:8e:08:6c:2d:06:4a:2b:70:8a:
0a:15:5c:a6:5a:7f:6d:d1:d4:60:0b:52:5e:1e:15:
db:88:40:b7:1a:0e:f6:d9:f3:91:22:c2:18:44:45:
49:24:b6:c0:00:df:19:0e:15:cb:c4:f5:2e:9a:1f:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:C4:5A:C5:D9:3E:79:F3:B2:75:F1:81:1A:00:76:58:F6:71:00
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6a:e9:f3:74:2c:cd:01:fe:bc:01:d7:d9:3d:e0:c5:bd:56:
8e:fe:96:52:12:9e:4e:4e:9f:48:a1:2a:55:1d:f8:12:2f:38:
85:b9:f7:49:97:b9:e7:25:d3:25:38:d7:5c:3f:90:b2:b4:7a:
7d:67:8c:5a:08:68:31:92:84:e3:06:92:3b:b3:49:72:0e:99:
de:f3:ea:56:19:51:33:30:46:60:7e:c0:81:d3:d8:e7:36:41:
2a:2c:a9:78:9c:69:6a:92:52:58:8e:b4:b9:d1:91:51:bb:71:
43:d7:43:4d:6d:75:5a:7a:a2:04:7d:f6:81:0a:dc:a4:e6:cd:
65:42:03:1a:b7:23:09:ad:14:5c:10:05:de:18:dc:b5:f4:6d:
d7:d0:50:fd:48:75:d0:1b:87:28:74:7d:18:11:5c:c7:f6:66:
82:03:76:fe:ec:ca:c9:2b:92:17:85:f5:92:06:08:40:10:1f:
3c:22:cd:87:a1:a7:36:ed:4c:c9:f8:6f:d7:a7:dc:26:ca:d2:
c7:3e:29:4c:8c:64:5d:6f:c9:5f:c9:80:19:29:ee:46:73:4d:
96:bc:dc:52:e0:69:f0:0a:e8:dc:87:ec:9a:6e:f3:8e:5a:dc:
7e:99:94:2c:93:8e:5e:8e:19:ac:14:c6:e7:c7:ec:0a:04:b9:
5b:98:09:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2g4G/ziIdkcgEikIO2WJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MGIxNmQzNjlhZDI3Y2VkODU0OTk0NjUzMjhmMDk1YjE1
NWY0MzEwHhcNMjYwNTEzMDEwMTA3WhcNMjYwNTE0MDEwMTA3WjAzMTEwLwYDVQQD
EygxODU5YzQ1YWM1ZDkzZTc5ZjNiMjc1ZjE4MTFhMDA3NjU4ZjY3MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I/eVxvbn4tn6MrYa1lOSf3Tu8Lr
X7VHPiUnWm0hV//t2TYu2XxwA+mHd3NHek4Zwe37jooOiMxQldhm5v9HKcnQrdIP
UqcFdjpo/FcmyYlimH++JnH7HsTa269IkaDzZVt5BBas0jXq1u0/xB5fjtgHwK4U
o6hQ4LNIyJwdd3nOU5B9RC7mma9AHxg8hDFbF7shZBO3QfB/4IcGFWQ3xWgcHlRR
wrn3Tlx1PdSe2yBiNJuHtOVbqHiQrP3wMWdt/gW9va4NVKmOCGwtBkorcIoKFVym
Wn9t0dRgC1JeHhXbiEC3Gg722fORIsIYREVJJLbAAN8ZDhXLxPUumh8CdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhZxFrF2T5587J18YEaAHZY9nEAMB8GA1UdIwQY
MBaAFOQLFtNprSfO2FSZRlMo8JWxVfQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAt
MDM3MWQ0YjQ1NDdhLzEvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAtMDM3MWQ0YjQ1NDdh
LzEvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2rp83Qs
zQH+vAHX2T3gxb1Wjv6WUhKeTk6fSKEqVR34Ei84hbn3SZe55yXTJTjXXD+QsrR6
fWeMWghoMZKE4waSO7NJcg6Z3vPqVhlRMzBGYH7AgdPY5zZBKiypeJxpapJSWI60
udGRUbtxQ9dDTW11WnqiBH32gQrcpObNZUIDGrcjCa0UXBAF3hjctfRt19BQ/Uh1
0BuHKHR9GBFcx/ZmggN2/uzKySuSF4X1kgYIQBAfPCLNh6GnNu1Myfhv16fcJsrS
xz4pTIxkXW/JX8mAGSnuRnNNlrzcUuBp8Aro3Ifsmm7zjlrcfpmULJOOXo4ZrBTG
58fsCgS5W5gJmg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:56:21 2026 by rpki-client