Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
File: V5G7EVC-rF6gxyTznSzn_M_BVGo.mft (raw, json)
Hash identifier: kDZTww4hJxNQeevUI02d7cwH2Okm2C7b1IinUwso1Gc=
Subject key identifier: 3C:18:70:5A:FB:08:0C:FB:EE:87:B5:A8:1C:73:A5:18:21:D4:7F:08
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial: 019D29CDD9CAADC2E2A953F89108DA7584CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
Manifest number: 17A2
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: UuWRn46MvNJXFTJ-RnJkgurOGVM.roa (hash: eEkLnHk0Njo0Q0StbkcpTu+aS62BjLKIvwib9SKKCcs=)
2: V5G7EVC-rF6gxyTznSzn_M_BVGo.crl (hash: i/FqTDlf18Nxilr60fIGemeASWBjKzy93kFeMIuJxAo=)
3: e5B6UaZBynauNkkMPicw53NI3mU.roa (hash: 4DmDWJi04vm3aen2qoxWEPXJCD5rR8XX9hHzfX6WDXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d9:ca:ad:c2:e2:a9:53:f8:91:08:da:75:84:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=3c18705afb080cfbee87b5a81c73a51821d47f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:82:9d:f0:9d:63:1f:f3:6b:0e:d6:c8:24:
7f:5b:1a:a4:ef:1c:32:51:7f:f1:57:2b:bb:38:e9:
b0:6f:3b:f1:7a:2f:e5:af:c4:42:cd:ec:79:b2:82:
97:f1:33:cb:6e:50:04:43:51:64:9a:f4:64:31:ba:
b5:88:cc:1c:6d:2c:30:c3:a7:73:68:a0:d1:fc:56:
e3:38:b6:d6:ab:fa:f1:69:c1:75:8b:0c:ae:21:0d:
94:bf:65:ac:b8:25:15:ca:e3:74:99:fe:e7:35:e7:
23:71:a9:1b:a3:ca:1b:45:99:94:a5:e4:25:0a:d4:
a8:94:59:a1:a8:8d:60:6d:b3:09:67:86:bf:c9:cf:
e5:55:8e:31:87:52:31:d4:44:b1:50:ec:1b:c4:73:
b7:b9:0a:a4:1d:ba:c8:4f:35:c8:e0:b2:01:0c:3e:
a6:7f:30:9c:8f:8f:8a:f7:1f:5d:32:89:79:4f:c0:
b0:cd:87:c7:72:cc:c4:7d:3a:cc:c4:2f:82:32:da:
0e:15:7f:9e:0c:ef:f4:18:b1:9d:f0:e9:80:8a:6d:
b2:4c:14:98:4d:fc:f5:88:30:33:22:3c:ec:86:78:
24:fd:3b:11:d1:cc:b3:4d:4e:83:9a:d7:20:15:8f:
63:21:ad:12:6c:9c:57:1f:5b:eb:35:d6:95:40:95:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:18:70:5A:FB:08:0C:FB:EE:87:B5:A8:1C:73:A5:18:21:D4:7F:08
X509v3 Authority Key Identifier:
keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b6:20:b1:3c:bc:ab:98:7d:47:ba:f6:0e:a9:1c:11:b5:5f:
10:7d:6c:d3:0d:8c:2c:3e:38:25:6e:9d:86:f0:d2:fa:c2:19:
9c:00:3a:cc:63:84:62:0c:60:6c:33:04:df:8c:a7:49:18:59:
c6:40:8f:8d:98:3e:0b:32:df:02:5c:c9:3d:b2:ab:63:dc:66:
c8:c8:e9:15:6e:f1:28:fc:f8:c9:5e:51:bb:a3:ef:87:ab:d0:
f1:12:dc:7f:6c:4a:68:fb:17:1d:41:fb:24:dd:25:15:d0:68:
65:6d:85:3c:65:b8:a2:e5:53:7a:6e:b9:93:59:07:6e:42:b4:
c8:f7:3a:50:89:28:a1:81:73:2a:77:28:34:83:ed:1f:b8:38:
a5:1d:07:42:1c:85:7c:3b:5c:db:57:28:c9:bf:15:a3:14:18:
cc:cc:d9:f0:7a:28:db:b8:ea:3a:12:32:c1:a8:21:18:d4:bb:
19:3d:0e:d7:d4:2f:1c:dc:af:7c:04:29:64:60:68:4e:65:42:
53:94:1d:ba:49:43:53:51:93:49:ba:ea:49:91:cb:2c:af:03:
7a:cb:e3:8f:67:c5:65:91:52:35:6c:0b:39:9d:55:eb:ae:97:
ca:c9:ee:a9:ae:ea:49:98:44:c8:c0:ed:fb:41:99:79:2a:c8:
8f:31:4a:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzdnKrcLiqVP4kQjadYTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTFiYjExNTBiZWFjNWVhMGM3MjRmMzlkMmNlN2ZjY2Zj
MTU0NmEwHhcNMjYwMzI2MTEwMDQ5WhcNMjYwMzI3MTEwMDQ5WjAzMTEwLwYDVQQD
EygzYzE4NzA1YWZiMDgwY2ZiZWU4N2I1YTgxYzczYTUxODIxZDQ3ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9qCnfCdYx/zaw7WyCR/Wxqk7xwy
UX/xVyu7OOmwbzvxei/lr8RCzex5soKX8TPLblAEQ1FkmvRkMbq1iMwcbSwww6dz
aKDR/FbjOLbWq/rxacF1iwyuIQ2Uv2WsuCUVyuN0mf7nNecjcakbo8obRZmUpeQl
CtSolFmhqI1gbbMJZ4a/yc/lVY4xh1Ix1ESxUOwbxHO3uQqkHbrITzXI4LIBDD6m
fzCcj4+K9x9dMol5T8CwzYfHcszEfTrMxC+CMtoOFX+eDO/0GLGd8OmAim2yTBSY
Tfz1iDAzIjzshngk/TsR0cyzTU6DmtcgFY9jIa0SbJxXH1vrNdaVQJUefwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwYcFr7CAz77oe1qBxzpRgh1H8IMB8GA1UdIwQY
MBaAFFeRuxFQvqxeoMck850s5/zPwVRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVHN0VWQy1yRjZneHlUem5Tem5fTV9CVkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81Yzg5NDEtNWEyOC00NGUxLTkzOTUt
YmQzMWM1YWNlYjU5LzEvVjVHN0VWQy1yRjZneHlUem5Tem5fTV9CVkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81Yzg5NDEtNWEyOC00NGUxLTkzOTUtYmQzMWM1YWNlYjU5
LzEvVjVHN0VWQy1yRjZneHlUem5Tem5fTV9CVkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbYgsTy8
q5h9R7r2DqkcEbVfEH1s0w2MLD44JW6dhvDS+sIZnAA6zGOEYgxgbDME34ynSRhZ
xkCPjZg+CzLfAlzJPbKrY9xmyMjpFW7xKPz4yV5Ru6Pvh6vQ8RLcf2xKaPsXHUH7
JN0lFdBoZW2FPGW4ouVTem65k1kHbkK0yPc6UIkooYFzKncoNIPtH7g4pR0HQhyF
fDtc21coyb8VoxQYzMzZ8Hoo27jqOhIywaghGNS7GT0O19QvHNyvfAQpZGBoTmVC
U5QduklDU1GTSbrqSZHLLK8Desvjj2fFZZFSNWwLOZ1V666Xysnuqa7qSZhEyMDt
+0GZeSrIjzFKxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:58 2026 by rpki-client