Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: Esq++/D9JNCOmAWQoVCidW/aFcP0BMbcn5NHuHnyrKI=
Subject key identifier: D7:BC:C0:F9:EB:BD:8E:B2:E3:91:8A:DC:3A:94:2C:F2:68:72:49:09
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 019CAAFD3523B3994B6528874734389C6175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 20:00:46 +0000
Manifest this update: Sun 01 Mar 2026 20:00:46 +0000
Manifest next update: Mon 02 Mar 2026 20:00:46 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: NvZW3m+iYgiMhE3nCQaoinVC5iQlWkTZUZARPwVSbmQ=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:35:23:b3:99:4b:65:28:87:47:34:38:9c:61:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Mar 1 20:00:46 2026 GMT
Not After : Mar 2 20:00:46 2026 GMT
Subject: CN=d7bcc0f9ebbd8eb2e3918adc3a942cf268724909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:1b:11:b4:42:02:20:37:63:b2:9b:6e:09:
e0:cc:60:2b:ae:ad:fd:2a:cb:ae:32:60:9a:0d:af:
84:dd:4c:b7:a3:3d:59:95:81:6a:e3:f5:76:2c:29:
a0:3c:c2:a6:5e:b9:86:4c:ea:83:05:d2:c6:f6:08:
cf:1a:8f:75:6e:93:f4:a4:73:af:3a:20:6c:a0:72:
6e:1b:16:f9:a5:d1:f6:1c:33:15:b8:e2:61:a4:9a:
3e:8d:db:8a:be:bc:a9:f4:e0:64:4a:7b:5b:fe:24:
ef:93:52:ec:e2:cb:b9:5f:f5:b5:32:25:ab:0e:d2:
0e:43:f3:15:29:08:d1:c9:ec:73:c1:96:85:98:6b:
24:20:a0:39:14:f4:e1:37:63:af:82:94:19:dc:fb:
d1:d2:53:e1:8c:fc:69:51:ec:66:ae:bb:00:a1:cc:
c8:38:7b:82:9a:dd:1c:02:f8:31:80:9a:77:76:a5:
3d:bd:03:4d:d7:f6:2c:99:09:25:ba:98:78:64:de:
8a:3d:d8:01:31:2a:d0:f3:d1:85:f7:f3:68:27:ae:
97:f0:2c:6f:87:07:4e:d6:76:40:17:1d:9f:f2:f5:
94:26:ac:e0:23:42:f9:9f:41:42:94:0a:88:2b:6f:
2b:65:c0:f0:89:ee:a8:f2:50:cc:cd:52:72:49:bf:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BC:C0:F9:EB:BD:8E:B2:E3:91:8A:DC:3A:94:2C:F2:68:72:49:09
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:b1:df:85:f0:a6:ad:39:f2:14:ed:9d:39:9f:29:22:1a:
a0:55:77:69:b2:87:f1:62:46:a6:30:b7:98:dd:bb:c2:de:5a:
f2:41:c5:ca:27:3d:64:76:0b:d6:07:f1:ab:06:34:ec:52:5f:
72:27:bb:bc:de:55:b4:e5:0f:11:7a:0e:07:00:f2:b8:ce:e5:
24:04:ef:18:9a:a5:c5:56:24:f6:10:ef:ea:3c:7e:02:91:9a:
17:99:b5:b2:67:10:61:84:25:a4:a1:30:19:8f:52:ee:c6:74:
d5:23:e6:60:84:88:73:75:f4:d0:80:5a:92:0f:2f:75:25:26:
17:59:4e:48:46:ca:c9:e3:bd:db:6b:53:1b:6a:f6:55:ee:04:
70:a7:bf:9a:03:e6:33:d2:54:29:dd:b5:56:38:06:2e:cd:c8:
4c:0b:36:28:78:05:be:be:cc:7d:d0:2f:33:03:83:91:8a:df:
19:5d:05:5a:89:e3:d6:10:0e:12:49:16:0d:83:ee:a8:0b:90:
24:8f:b2:fc:a1:9b:f7:f4:18:53:d6:26:ba:0e:c8:53:e5:4e:
60:87:5a:4e:49:38:e1:7e:81:89:bd:3a:d0:8b:1f:57:b3:12:
19:bd:c8:51:01:5b:4b:9d:81:19:a1:fa:2d:12:62:17:29:a9:
82:2b:36:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/TUjs5lLZSiHRzQ4nGF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0
NjQ1M2EwHhcNMjYwMzAxMjAwMDQ2WhcNMjYwMzAyMjAwMDQ2WjAzMTEwLwYDVQQD
EyhkN2JjYzBmOWViYmQ4ZWIyZTM5MThhZGMzYTk0MmNmMjY4NzI0OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IMbEbRCAiA3Y7KbbgngzGArrq39
KsuuMmCaDa+E3Uy3oz1ZlYFq4/V2LCmgPMKmXrmGTOqDBdLG9gjPGo91bpP0pHOv
OiBsoHJuGxb5pdH2HDMVuOJhpJo+jduKvryp9OBkSntb/iTvk1Ls4su5X/W1MiWr
DtIOQ/MVKQjRyexzwZaFmGskIKA5FPThN2OvgpQZ3PvR0lPhjPxpUexmrrsAoczI
OHuCmt0cAvgxgJp3dqU9vQNN1/YsmQkluph4ZN6KPdgBMSrQ89GF9/NoJ66X8Cxv
hwdO1nZAFx2f8vWUJqzgI0L5n0FClAqIK28rZcDwie6o8lDMzVJySb/BswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe8wPnrvY6y45GK3DqULPJockkJMB8GA1UdIwQY
MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt
YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm
LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaSx34Xw
pq058hTtnTmfKSIaoFV3abKH8WJGpjC3mN27wt5a8kHFyic9ZHYL1gfxqwY07FJf
cie7vN5VtOUPEXoOBwDyuM7lJATvGJqlxVYk9hDv6jx+ApGaF5m1smcQYYQlpKEw
GY9S7sZ01SPmYISIc3X00IBakg8vdSUmF1lOSEbKyeO922tTG2r2Ve4EcKe/mgPm
M9JUKd21VjgGLs3ITAs2KHgFvr7MfdAvMwODkYrfGV0FWonj1hAOEkkWDYPuqAuQ
JI+y/KGb9/QYU9Ymug7IU+VOYIdaTkk44X6Bib060IsfV7MSGb3IUQFbS52BGaH6
LRJiFympgis2BA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:26 2026 by rpki-client