Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier: bBXhh5K6g1kW8VbqzNGgsprpweOJ1GAGKRmQmTkLfqw=
Subject key identifier: 46:80:FE:28:8C:E5:75:2B:76:53:9F:3A:14:ED:41:FC:B3:A9:F8:7E
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 019CAB3456E58E31736259F0330538177CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:59 +0000
Manifest this update: Sun 01 Mar 2026 21:00:59 +0000
Manifest next update: Mon 02 Mar 2026 21:00:59 +0000
Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: TxSfpJG8km3FaS04Vw9n3LvHOFIrg5vJua1wkAGzbus=)
2: DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa (hash: FTS7rWAdFS8UyAMp19YH0zdu88+Df8yK+Znwjqplx54=)
3: sA6Qf2_ToIyGcsbWCFpl1ww3zYM.roa (hash: wfbilCSxn7pd6CKUaeLQcmM0OSGs3jIpHSCViiEgaxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:56:e5:8e:31:73:62:59:f0:33:05:38:17:7c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Mar 1 21:00:59 2026 GMT
Not After : Mar 2 21:00:59 2026 GMT
Subject: CN=4680fe288ce5752b76539f3a14ed41fcb3a9f87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c3:f0:53:2e:2f:a1:ad:b1:50:ff:2b:66:d9:
47:9d:cc:9d:52:9f:24:aa:cb:a0:bc:70:24:a6:f7:
ee:c6:70:46:93:a6:aa:93:65:69:ec:92:b8:04:d6:
28:05:83:a1:76:1b:41:16:58:1d:2f:f7:cc:96:0e:
f5:31:27:0a:59:75:e7:a0:bd:2c:f3:5f:1d:9c:51:
4b:55:8e:ff:d3:b9:ed:0d:af:f7:97:44:74:ba:67:
f2:28:7d:42:5c:0b:44:dd:79:9e:47:3b:de:ab:06:
13:29:06:a2:c3:0e:92:7e:d6:33:4f:cc:45:38:e3:
ea:1b:ac:ed:d9:46:51:d8:a3:7a:a1:9f:d9:67:6d:
e0:4d:69:7a:90:8c:48:e2:13:ba:2c:ef:39:42:c9:
94:7a:35:f2:0f:8f:70:7c:62:2a:ac:b6:09:46:6c:
bb:25:17:09:d8:09:f6:38:46:f3:11:20:e6:db:6c:
1e:9e:27:8c:c8:d6:60:6f:61:e0:d0:0d:82:be:b8:
a3:25:d2:96:75:ac:8b:e1:65:01:fe:3f:95:ec:4d:
38:58:e2:60:4d:c0:08:17:ac:01:60:5d:af:4f:d5:
35:0a:7f:4f:4e:99:f5:4f:7b:12:11:58:8f:61:c7:
fd:a5:27:0c:c4:55:c5:79:a9:cd:c5:c5:cf:37:ab:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:FE:28:8C:E5:75:2B:76:53:9F:3A:14:ED:41:FC:B3:A9:F8:7E
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e6:bf:fe:04:37:5f:64:a3:f5:e9:65:6c:7a:94:05:aa:3b:
9b:f2:23:ce:ba:79:c6:5e:aa:39:2f:64:c4:10:1e:d9:2a:ee:
82:d8:b6:48:6b:5c:75:46:de:a5:a8:89:4a:26:90:b7:47:b2:
3d:b1:54:53:06:5a:ea:1f:38:b3:1f:c5:e0:1f:1a:9c:49:31:
05:63:48:71:79:6e:63:1b:2b:2d:ec:e5:c2:47:09:92:c2:68:
8c:db:d2:90:71:30:7c:82:7c:a9:e8:66:67:35:6b:2b:07:94:
4a:a6:45:4e:7c:92:16:74:c1:0c:96:32:41:47:b1:ab:fc:db:
5a:f9:67:38:65:0a:be:64:fc:00:80:76:6a:48:02:8c:77:6f:
53:37:c0:d6:ec:37:6b:9f:50:d1:f6:d4:a2:1d:95:b5:ea:0c:
45:03:6e:a2:e2:cd:e1:c8:62:6b:3e:98:9d:48:f2:be:d5:b9:
1d:57:97:ae:46:be:3a:c9:55:73:7a:da:f9:de:c8:4d:0e:de:
f3:b9:00:48:45:04:4d:27:0b:73:a6:d4:c1:26:49:88:a5:ab:
43:84:70:bf:84:f2:22:cf:4a:c4:70:47:56:bc:20:90:a5:e5:
8b:d9:ef:b3:78:49:6f:f8:c4:72:1f:f3:35:bb:00:df:99:9f:
ea:53:ff:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNFbljjFzYlnwMwU4F3zFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NzEwMDY3OWYwNzI4MmNkNDhjYjUxMDdiZjk3YWY3YWYz
ODg5YzkwHhcNMjYwMzAxMjEwMDU5WhcNMjYwMzAyMjEwMDU5WjAzMTEwLwYDVQQD
Eyg0NjgwZmUyODhjZTU3NTJiNzY1MzlmM2ExNGVkNDFmY2IzYTlmODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MPwUy4voa2xUP8rZtlHncydUp8k
qsugvHAkpvfuxnBGk6aqk2Vp7JK4BNYoBYOhdhtBFlgdL/fMlg71MScKWXXnoL0s
818dnFFLVY7/07ntDa/3l0R0umfyKH1CXAtE3XmeRzveqwYTKQaiww6SftYzT8xF
OOPqG6zt2UZR2KN6oZ/ZZ23gTWl6kIxI4hO6LO85QsmUejXyD49wfGIqrLYJRmy7
JRcJ2An2OEbzESDm22wenieMyNZgb2Hg0A2CvrijJdKWdayL4WUB/j+V7E04WOJg
TcAIF6wBYF2vT9U1Cn9PTpn1T3sSEViPYcf9pScMxFXFeanNxcXPN6vTxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaA/iiM5XUrdlOfOhTtQfyzqfh+MB8GA1UdIwQY
MBaAFOZxAGefBygs1Iy1EHv5evevOInJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUt
YWU4YzU4MzBjYzIwLzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUtYWU4YzU4MzBjYzIw
LzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+a//gQ3
X2Sj9ellbHqUBao7m/Ijzrp5xl6qOS9kxBAe2Srugti2SGtcdUbepaiJSiaQt0ey
PbFUUwZa6h84sx/F4B8anEkxBWNIcXluYxsrLezlwkcJksJojNvSkHEwfIJ8qehm
ZzVrKweUSqZFTnySFnTBDJYyQUexq/zbWvlnOGUKvmT8AIB2akgCjHdvUzfA1uw3
a59Q0fbUoh2VteoMRQNuouLN4chiaz6YnUjyvtW5HVeXrka+OslVc3ra+d7ITQ7e
87kASEUETScLc6bUwSZJiKWrQ4Rwv4TyIs9KxHBHVrwgkKXli9nvs3hJb/jEch/z
NbsA35mf6lP/yA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:34 2026 by rpki-client