Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: U3Lb1IJ/uvHnxEfPF00WlBJHioxh5iaKO6eA5v3SUH8=
Subject key identifier: 3A:2A:CE:0D:33:4B:21:25:4E:67:CD:96:9C:F6:19:BD:85:59:F5:9E
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 019D27DF5E5CE96F6674F21B97F658B09DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: D24GcSE/Q5QMseKj9CBaG36TQvAs7NWLCNoqHLcUXnY=)
2: l26a7R_zJZToxzZfQDSNdGwONXo.roa (hash: f6mXkllCRchDTdmRlgeark5dgGsFI7jH1YE/DCr29Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5e:5c:e9:6f:66:74:f2:1b:97:f6:58:b0:9d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=3a2ace0d334b21254e67cd969cf619bd8559f59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:6b:20:81:22:67:1d:16:ee:54:fa:4a:f1:
76:96:3f:2f:8a:8f:c8:e6:94:69:6a:b3:7b:85:9e:
8b:85:ec:3d:b1:b0:c9:42:92:76:4c:56:68:a5:6f:
10:aa:27:56:73:a8:25:a4:61:56:7e:54:a5:61:97:
dd:04:21:21:53:b2:d5:bf:b1:77:a3:fa:fe:46:b5:
ea:21:2e:21:75:9f:70:e3:44:07:e7:8c:1a:24:b9:
27:96:fb:c9:7f:18:b0:59:e9:08:5d:76:f4:b0:cb:
ba:4e:78:bf:bc:bc:ab:cd:2a:10:4c:30:d8:7f:25:
2a:33:ac:76:75:4d:a7:e4:8b:12:7d:6b:21:54:d5:
25:89:fd:86:f7:00:ef:ba:d6:b5:e7:ee:52:ad:b9:
61:65:12:88:ae:45:a5:14:0e:21:d0:01:47:c7:cd:
16:46:f3:e3:61:f6:68:f3:25:a7:1f:af:1d:36:ce:
a2:05:87:11:14:2e:c5:bb:47:30:1f:96:38:6d:92:
d7:74:57:5e:ff:53:3d:23:1f:a9:a8:8b:af:dc:cb:
01:6a:36:89:12:01:f4:c5:a1:66:b2:46:85:3f:4d:
8e:45:e5:c8:32:01:26:11:2c:28:d8:40:b2:6a:4d:
4f:75:89:b3:13:05:df:1d:bc:98:9f:87:43:72:e9:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2A:CE:0D:33:4B:21:25:4E:67:CD:96:9C:F6:19:BD:85:59:F5:9E
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b6:33:53:c4:74:e8:3a:ad:aa:61:c4:3d:61:10:09:e3:28:
44:12:65:1d:57:d5:d1:ed:fe:8d:95:49:69:fa:1c:a1:a9:49:
70:88:18:e8:af:7f:3f:54:e1:52:d8:c7:23:50:68:cc:8e:89:
55:13:4d:91:4b:a8:87:d2:bc:bb:34:dc:75:3b:7d:86:72:da:
61:dd:b7:40:d1:26:c3:f8:85:43:4a:d8:8c:34:cb:06:15:b8:
ee:d8:fc:9a:f9:64:a8:25:4c:5a:02:b7:a8:9e:fd:7e:53:93:
43:c4:29:7e:1b:cf:da:da:c2:bf:0b:af:80:27:b7:06:82:a9:
ab:b8:2f:03:c8:e1:2b:be:76:14:19:99:cf:7f:8e:cd:cc:0d:
1f:c6:9d:5b:e4:fe:5d:79:94:1b:3b:33:9f:c2:e7:a4:1b:ec:
31:0d:0f:d4:cd:ae:5c:e2:e5:86:82:f3:44:07:d5:78:c6:e2:
0b:67:09:67:30:a2:9a:94:bc:00:7d:c3:c7:4c:af:bf:61:50:
45:fc:06:ed:24:61:d2:40:d6:50:24:e3:16:15:11:ac:94:1f:
01:4c:b9:84:fc:66:88:2e:9d:f0:67:7d:e0:65:a4:06:41:a3:
dd:1d:a0:bf:30:3f:7b:8b:69:20:d6:53:94:d5:72:92:60:2b:
4f:af:70:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n315c6W9mdPIbl/ZYsJ3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2JjMTJiMzY4NTcxNmQ4ZWY2NTY3ZTIxOTA0MTk0Mzc3
YmUxZTUwHhcNMjYwMzI2MDIwMDQzWhcNMjYwMzI3MDIwMDQzWjAzMTEwLwYDVQQD
EygzYTJhY2UwZDMzNGIyMTI1NGU2N2NkOTY5Y2Y2MTliZDg1NTlmNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uFrIIEiZx0W7lT6SvF2lj8vio/I
5pRparN7hZ6Lhew9sbDJQpJ2TFZopW8QqidWc6glpGFWflSlYZfdBCEhU7LVv7F3
o/r+RrXqIS4hdZ9w40QH54waJLknlvvJfxiwWekIXXb0sMu6Tni/vLyrzSoQTDDY
fyUqM6x2dU2n5IsSfWshVNUlif2G9wDvuta15+5SrblhZRKIrkWlFA4h0AFHx80W
RvPjYfZo8yWnH68dNs6iBYcRFC7Fu0cwH5Y4bZLXdFde/1M9Ix+pqIuv3MsBajaJ
EgH0xaFmskaFP02OReXIMgEmESwo2ECyak1PdYmzEwXfHbyYn4dDcul4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoqzg0zSyElTmfNlpz2Gb2FWfWeMB8GA1UdIwQY
MBaAFOZ7wSs2hXFtjvZWfiGQQZQ3e+HlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82YWZhODUtMzY3YS00ZWZkLWEzMTEt
NDExNzJiMjQ5NzQwLzEvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82YWZhODUtMzY3YS00ZWZkLWEzMTEtNDExNzJiMjQ5NzQw
LzEvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLYzU8R0
6DqtqmHEPWEQCeMoRBJlHVfV0e3+jZVJafocoalJcIgY6K9/P1ThUtjHI1BozI6J
VRNNkUuoh9K8uzTcdTt9hnLaYd23QNEmw/iFQ0rYjDTLBhW47tj8mvlkqCVMWgK3
qJ79flOTQ8QpfhvP2trCvwuvgCe3BoKpq7gvA8jhK752FBmZz3+OzcwNH8adW+T+
XXmUGzszn8LnpBvsMQ0P1M2uXOLlhoLzRAfVeMbiC2cJZzCimpS8AH3Dx0yvv2FQ
RfwG7SRh0kDWUCTjFhURrJQfAUy5hPxmiC6d8Gd94GWkBkGj3R2gvzA/e4tpINZT
lNVykmArT69w/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:31 2026 by rpki-client