Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: y4ciMk1MsfXRtw3SWtE+xDr+0PS/f71XOChHi2u7Vvc=
Subject key identifier: F5:0D:C1:82:E5:A6:DF:EA:6F:41:26:AA:5C:83:1A:22:EC:A1:1F:7C
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 019D284E41AB6321156B6EF50E3DC91A54D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 049A
Signing time: Thu 26 Mar 2026 04:01:50 +0000
Manifest this update: Thu 26 Mar 2026 04:01:50 +0000
Manifest next update: Fri 27 Mar 2026 04:01:50 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: 93IZwl3qicssR9GUpijIURMfYMDP/VEDkKJ4ZUekjFE=)
2: DVxcthJ5zcZ8COkBA3rotGAlLFU.roa (hash: vJnipHRerz0UttumCZypDHr2IzvHL7fPbWoqduV1jL8=)
3: iDjUHReMaiMBvtjZdmRz4HvetFg.roa (hash: jPu0BoNWhKVwiGPpdPSY4iU5CH4YO6NsUMtetTUIS9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:41:ab:63:21:15:6b:6e:f5:0e:3d:c9:1a:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Mar 26 04:01:50 2026 GMT
Not After : Mar 27 04:01:50 2026 GMT
Subject: CN=f50dc182e5a6dfea6f4126aa5c831a22eca11f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:4b:32:bf:ed:5c:db:2a:fa:3f:b3:31:a2:
22:95:06:4b:d5:73:c1:dc:1e:a6:10:b8:97:51:bd:
d5:79:e1:be:8f:c6:ad:18:e8:7d:ed:b1:c0:07:88:
2b:5e:49:d5:f8:6d:06:3b:5d:17:c7:22:65:a2:31:
96:0d:01:d9:d9:1a:9e:f1:7f:7e:3e:e7:1b:56:da:
e6:d8:00:95:48:0a:0a:ef:3e:f8:90:40:9d:2f:7a:
0a:4a:64:6d:db:2c:32:4e:61:97:4b:9e:25:a2:df:
51:ca:35:bf:bb:6a:67:fe:f2:03:19:dc:a1:aa:df:
7f:60:7e:f0:ae:56:93:94:f8:8c:61:c2:48:5b:e9:
05:98:0b:57:dd:ad:80:99:cf:69:f0:62:df:55:50:
74:33:bb:72:1d:24:4a:72:fa:27:0f:6e:2e:bc:a4:
da:7a:4f:c7:57:0f:8c:0a:19:64:b5:fa:f1:fb:9f:
ef:e1:3e:a8:a8:e2:8b:45:48:28:7b:d8:00:50:2a:
6f:29:6c:fb:02:68:e3:eb:0d:fe:38:b4:da:7b:14:
1f:65:a0:cf:0e:fd:6b:ac:1f:b0:d3:6a:57:45:3e:
63:a4:3d:22:bb:c6:17:58:6c:49:71:3e:c8:4f:91:
cb:b5:d5:64:a9:4b:c9:7f:7d:cc:7c:fe:24:c6:3d:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0D:C1:82:E5:A6:DF:EA:6F:41:26:AA:5C:83:1A:22:EC:A1:1F:7C
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:75:88:ab:5d:43:b1:a3:ca:b7:c5:5b:44:1d:91:08:1c:ff:
d2:b0:ee:ce:7a:69:3e:7b:d6:ac:cc:6d:3a:f4:60:a2:ea:e5:
c0:06:51:e7:d4:4b:4f:57:4c:3d:e2:bf:d4:7f:87:f7:98:87:
20:c0:57:a8:96:2e:23:2c:bd:07:6b:ca:15:5d:2a:d1:ba:4f:
27:5c:f2:6d:7f:47:b9:9d:41:33:4f:7c:2f:99:b6:d7:24:4b:
61:6a:67:1a:6c:9c:af:14:41:19:85:32:21:c8:d2:09:74:d3:
de:37:b1:95:19:1b:38:f3:d1:b6:2e:42:38:08:4b:c9:04:b5:
2c:ab:3e:fb:40:2b:16:c1:17:80:a4:a8:ad:34:7a:6f:26:9f:
df:4c:bc:0e:10:db:b9:8e:f4:57:63:be:b1:14:4f:9e:5c:01:
59:54:5b:a7:de:0a:01:10:08:c3:25:e6:e5:25:cc:5a:fc:bd:
61:cf:85:3e:13:ae:ea:51:8a:3c:dc:8b:8c:4e:f9:45:6d:6b:
53:ca:c5:f7:77:cc:1d:f0:45:71:c2:bb:16:d6:38:84:1a:af:
93:ce:db:6d:f1:19:ee:12:23:12:3b:a5:d9:e9:5e:6b:86:b9:
0f:12:72:6e:a0:56:e2:6e:36:9c:73:2c:d7:f1:56:09:92:67:
b9:5e:79:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTkGrYyEVa271Dj3JGlTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzI5ZWU4OTYzNmJhMzRmZTU2YmQ3MmU3NThmNTgyYWRl
NzBlNTIwHhcNMjYwMzI2MDQwMTUwWhcNMjYwMzI3MDQwMTUwWjAzMTEwLwYDVQQD
EyhmNTBkYzE4MmU1YTZkZmVhNmY0MTI2YWE1YzgzMWEyMmVjYTExZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy1LMr/tXNsq+j+zMaIilQZL1XPB
3B6mELiXUb3VeeG+j8atGOh97bHAB4grXknV+G0GO10XxyJlojGWDQHZ2Rqe8X9+
PucbVtrm2ACVSAoK7z74kECdL3oKSmRt2ywyTmGXS54lot9RyjW/u2pn/vIDGdyh
qt9/YH7wrlaTlPiMYcJIW+kFmAtX3a2Amc9p8GLfVVB0M7tyHSRKcvonD24uvKTa
ek/HVw+MChlktfrx+5/v4T6oqOKLRUgoe9gAUCpvKWz7Amjj6w3+OLTaexQfZaDP
Dv1rrB+w02pXRT5jpD0iu8YXWGxJcT7IT5HLtdVkqUvJf33MfP4kxj1SjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUNwYLlpt/qb0EmqlyDGiLsoR98MB8GA1UdIwQY
MBaAFOVynuiWNro0/la9cudY9YKt5w5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAt
YzEzOGJkMWMxNzFlLzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAtYzEzOGJkMWMxNzFl
LzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3WIq11D
saPKt8VbRB2RCBz/0rDuznppPnvWrMxtOvRgourlwAZR59RLT1dMPeK/1H+H95iH
IMBXqJYuIyy9B2vKFV0q0bpPJ1zybX9HuZ1BM098L5m21yRLYWpnGmycrxRBGYUy
IcjSCXTT3jexlRkbOPPRti5COAhLyQS1LKs++0ArFsEXgKSorTR6byaf30y8DhDb
uY70V2O+sRRPnlwBWVRbp94KARAIwyXm5SXMWvy9Yc+FPhOu6lGKPNyLjE75RW1r
U8rF93fMHfBFccK7FtY4hBqvk87bbfEZ7hIjEjul2elea4a5DxJybqBW4m42nHMs
1/FWCZJnuV55xg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:18 2026 by rpki-client