Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: LM0BxIsMbY4Ck0o0WHlIxdEiLVJj22gJwI+dzmCFrPk=
Subject key identifier: C1:32:30:BF:EE:44:CB:1C:FB:17:6D:F7:C4:47:E2:A0:1C:5E:B4:49
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019D29CE50C3DE8F361C47F2636E8DB6460F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 09BF
Signing time: Thu 26 Mar 2026 11:01:20 +0000
Manifest this update: Thu 26 Mar 2026 11:01:20 +0000
Manifest next update: Fri 27 Mar 2026 11:01:20 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: nwC6kxUG6x9c8GVcNTOXRbtgzGoL/aZqRYNpADRHS74=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:50:c3:de:8f:36:1c:47:f2:63:6e:8d:b6:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Mar 26 11:01:20 2026 GMT
Not After : Mar 27 11:01:20 2026 GMT
Subject: CN=c13230bfee44cb1cfb176df7c447e2a01c5eb449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:8c:2f:63:5b:eb:f0:19:2f:7e:ff:e9:ee:
8b:27:a0:b3:47:29:6f:81:0e:cc:8b:cc:0f:0f:cd:
03:cb:be:ed:65:bc:46:9f:d2:d7:8b:29:4d:4c:e0:
81:2f:ed:ff:01:44:15:f0:be:85:7e:fa:ad:fa:d8:
7e:3a:2d:ee:9f:22:02:9c:4e:a0:9e:bd:68:96:1d:
12:8e:5c:3c:56:53:1c:6c:ff:92:b4:6e:ac:73:27:
8e:16:ab:87:3f:7a:b5:f4:73:32:b9:d9:70:a0:df:
83:17:b1:87:85:40:4c:bb:bd:ca:31:8a:fe:95:ab:
bf:ef:bf:4c:6d:99:07:db:8b:69:0b:2f:6e:03:85:
9c:32:49:ea:4f:43:ba:0d:11:12:ae:2b:20:8d:ac:
fb:18:d7:32:0e:cd:7a:58:10:be:6c:8d:c4:94:2b:
4b:84:cd:81:44:6c:a6:0d:c8:93:c5:29:6c:82:66:
45:3e:26:94:2b:17:3e:45:c3:0c:89:c8:b8:4e:f8:
4b:8d:4c:2b:ee:cf:79:d5:db:20:23:d4:6e:68:ba:
ca:06:9c:bd:82:a9:36:71:41:03:79:96:d4:2c:ad:
45:a8:7c:39:50:f1:4f:a6:07:2a:72:5d:6a:fb:ab:
04:14:7d:2e:b5:67:7d:37:57:3a:c1:80:37:8d:97:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:30:BF:EE:44:CB:1C:FB:17:6D:F7:C4:47:E2:A0:1C:5E:B4:49
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0c:cf:eb:e3:d6:b5:69:a5:8b:82:40:42:f2:7b:ec:51:d3:
46:f5:6e:92:9d:b2:4a:f4:b5:f2:2f:c8:95:88:3e:c4:5a:ac:
1b:f6:b5:6e:52:e0:3e:7f:25:2f:32:ac:0a:62:16:b7:6b:3d:
ee:03:42:3c:7d:d3:6f:fd:4f:e6:29:9a:34:0c:48:69:28:b1:
4a:24:12:21:c7:93:77:f7:94:d0:c3:04:53:43:10:1d:20:93:
12:25:8b:82:c9:85:e7:aa:eb:0c:7b:7d:87:ba:4f:69:1c:94:
fc:ad:26:2d:9e:de:4b:c2:b5:0c:63:f6:f0:7f:44:76:a5:07:
c5:20:9e:08:2b:b1:0f:d0:81:f4:13:46:ba:f9:e7:41:f7:13:
9d:44:9e:3b:ed:9c:73:80:81:30:01:5f:4e:ba:90:a3:79:33:
e7:40:6c:1a:d0:5e:c4:da:79:31:61:37:a2:a3:ab:6b:66:69:
6c:7a:c9:6c:d6:9b:e0:f1:92:76:5b:64:f0:4a:64:ae:4c:e8:
1f:6e:cc:65:5c:37:05:4d:d2:57:df:51:57:43:ff:15:15:b1:
96:74:c0:ed:d1:d6:50:c3:01:0a:13:10:c0:75:2d:59:d5:bd:
07:70:1c:48:40:9a:9e:64:9f:8b:2a:8d:bf:1b:d9:0a:42:13:
bd:64:e2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzlDD3o82HEfyY26NtkYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzAwNzYxNGY2NzcwMGIyY2E3NmQ2MGI0OTQyYjdhOGU0
YjVjZTQwHhcNMjYwMzI2MTEwMTIwWhcNMjYwMzI3MTEwMTIwWjAzMTEwLwYDVQQD
EyhjMTMyMzBiZmVlNDRjYjFjZmIxNzZkZjdjNDQ3ZTJhMDFjNWViNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ6ML2Nb6/AZL37/6e6LJ6CzRylv
gQ7Mi8wPD80Dy77tZbxGn9LXiylNTOCBL+3/AUQV8L6Ffvqt+th+Oi3unyICnE6g
nr1olh0Sjlw8VlMcbP+StG6scyeOFquHP3q19HMyudlwoN+DF7GHhUBMu73KMYr+
lau/779MbZkH24tpCy9uA4WcMknqT0O6DRESrisgjaz7GNcyDs16WBC+bI3ElCtL
hM2BRGymDciTxSlsgmZFPiaUKxc+RcMMici4TvhLjUwr7s951dsgI9RuaLrKBpy9
gqk2cUEDeZbULK1FqHw5UPFPpgcqcl1q+6sEFH0utWd9N1c6wYA3jZeLSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEyML/uRMsc+xdt98RH4qAcXrRJMB8GA1UdIwQY
MBaAFOYwB2FPZ3ALLKdtYLSUK3qOS1zkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQt
YjIxMTEwZDhmZmExLzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQtYjIxMTEwZDhmZmEx
LzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAzP6+PW
tWmli4JAQvJ77FHTRvVukp2ySvS18i/IlYg+xFqsG/a1blLgPn8lLzKsCmIWt2s9
7gNCPH3Tb/1P5imaNAxIaSixSiQSIceTd/eU0MMEU0MQHSCTEiWLgsmF56rrDHt9
h7pPaRyU/K0mLZ7eS8K1DGP28H9EdqUHxSCeCCuxD9CB9BNGuvnnQfcTnUSeO+2c
c4CBMAFfTrqQo3kz50BsGtBexNp5MWE3oqOra2ZpbHrJbNab4PGSdltk8Epkrkzo
H27MZVw3BU3SV99RV0P/FRWxlnTA7dHWUMMBChMQwHUtWdW9B3AcSECanmSfiyqN
vxvZCkITvWTiIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:24 2026 by rpki-client