Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: h7CB804x7JZUXLAZKAEPyvBVQa1vMGVaTkOUvks8Mk8=
Subject key identifier: 4D:02:AA:B3:76:C9:95:B2:13:CF:F3:36:B7:06:16:B0:F5:6F:50:35
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 019CAA215D6E27A803A0490CA4B36C840C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 16:00:39 +0000
Manifest this update: Sun 01 Mar 2026 16:00:39 +0000
Manifest next update: Mon 02 Mar 2026 16:00:39 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: kn3dhmShge8x8ZLsqjPYbdmy9nX1qnTfz4IqICLHr9s=)
2: PHHmlI_lozSBsIeTe7D4ho8MMgk.roa (hash: Q0/1mQZnoW0veYxUY+kdm56TFO9WzQm4B7+icQrGOc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:5d:6e:27:a8:03:a0:49:0c:a4:b3:6c:84:0c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Mar 1 16:00:39 2026 GMT
Not After : Mar 2 16:00:39 2026 GMT
Subject: CN=4d02aab376c995b213cff336b70616b0f56f5035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:84:8c:59:23:1b:16:55:0a:12:5d:c7:ba:
26:60:6d:70:3d:f0:51:7d:ff:a1:04:23:23:ac:f7:
2d:84:72:ac:d2:b2:03:ef:56:a6:8f:5e:56:46:57:
89:55:40:ad:16:6b:e9:6a:4c:7a:a7:e1:bf:7e:dd:
62:97:82:94:19:91:85:52:2a:dd:70:a5:1a:7e:56:
19:95:3c:37:1f:04:6d:ae:2f:b2:22:4b:b4:eb:ce:
3d:1a:99:1e:d5:75:78:75:3e:54:1e:c1:14:4d:e5:
29:cd:ff:76:96:db:96:1a:dd:d8:3c:5f:8b:09:c2:
da:ca:81:50:92:1c:c9:17:ad:f2:a2:d2:aa:ec:74:
61:6f:f6:17:be:b9:2a:05:49:bf:7c:ab:07:37:ad:
25:26:88:a8:0a:32:c6:b7:f7:6f:99:08:57:47:06:
42:e6:8b:cd:1f:5c:9c:37:59:63:88:5c:06:5e:ec:
67:cd:57:bf:62:28:4b:80:13:23:dc:21:11:68:81:
e7:0f:dd:b5:3e:16:4d:c1:ee:48:fb:e5:1c:85:c7:
70:55:c0:de:b8:50:58:36:74:ea:22:3b:10:23:b8:
d0:83:b0:9e:64:43:e3:d3:c2:b7:87:1c:f9:7c:54:
ee:ba:5c:24:e5:d2:e2:e8:1c:f6:e6:5e:9a:fa:8f:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:02:AA:B3:76:C9:95:B2:13:CF:F3:36:B7:06:16:B0:F5:6F:50:35
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f5:c2:70:fe:da:55:c3:79:48:f9:31:0e:da:17:8d:a5:66:
f3:5a:80:b9:38:8e:df:28:c3:8d:94:e2:39:2e:d7:88:be:85:
41:96:e1:a7:eb:a4:bd:da:a0:f1:c8:08:54:36:cd:8f:f8:0c:
fe:02:52:4e:ac:c2:1c:b5:75:97:9a:0f:5d:0f:f6:2b:fc:b7:
8e:5b:bb:75:72:52:51:2f:e3:cc:05:00:02:c2:e3:1e:8f:52:
3f:fc:30:de:15:aa:ed:e9:fc:13:5e:54:df:f6:78:86:e9:dd:
f3:df:4e:02:1d:34:ae:62:46:78:b6:3b:2f:ca:45:20:60:b9:
28:d2:69:96:d6:bf:0b:60:04:1e:4b:d8:8f:77:0a:98:6c:da:
e9:ea:a8:c0:2a:4c:a6:98:0f:2e:9f:04:55:6d:cb:59:92:68:
c3:23:bf:bc:66:4b:2c:9d:40:be:31:1a:39:e4:e0:ae:74:73:
52:12:dc:b2:7f:f8:6d:4c:7d:d8:2a:d1:47:86:bf:8e:d2:a8:
bc:df:a7:d4:79:4f:55:99:5d:8a:a0:87:50:49:49:30:83:1e:
f0:e0:99:89:4c:27:cc:26:9f:ad:40:0b:93:bc:4a:a4:a7:a4:
d1:87:c8:7a:6b:ee:55:a2:3c:49:b0:2c:fc:da:ef:b3:ec:a6:
93:b0:e6:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIV1uJ6gDoEkMpLNshAwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YTRjYjc0Y2Y1MjRjMTgxMjFkNTNiNTMyYzAzYzA2ZjRh
ZDZiZTYwHhcNMjYwMzAxMTYwMDM5WhcNMjYwMzAyMTYwMDM5WjAzMTEwLwYDVQQD
Eyg0ZDAyYWFiMzc2Yzk5NWIyMTNjZmYzMzZiNzA2MTZiMGY1NmY1MDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJuEjFkjGxZVChJdx7omYG1wPfBR
ff+hBCMjrPcthHKs0rID71amj15WRleJVUCtFmvpakx6p+G/ft1il4KUGZGFUird
cKUaflYZlTw3HwRtri+yIku06849Gpke1XV4dT5UHsEUTeUpzf92ltuWGt3YPF+L
CcLayoFQkhzJF63yotKq7HRhb/YXvrkqBUm/fKsHN60lJoioCjLGt/dvmQhXRwZC
5ovNH1ycN1ljiFwGXuxnzVe/YihLgBMj3CERaIHnD921PhZNwe5I++UchcdwVcDe
uFBYNnTqIjsQI7jQg7CeZEPj08K3hxz5fFTuulwk5dLi6Bz25l6a+o/lZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0CqrN2yZWyE8/zNrcGFrD1b1A1MB8GA1UdIwQY
MBaAFOaky3TPUkwYEh1TtTLAPAb0rWvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYt
OThiZjQyODlkZjNiLzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYtOThiZjQyODlkZjNi
LzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfXCcP7a
VcN5SPkxDtoXjaVm81qAuTiO3yjDjZTiOS7XiL6FQZbhp+ukvdqg8cgIVDbNj/gM
/gJSTqzCHLV1l5oPXQ/2K/y3jlu7dXJSUS/jzAUAAsLjHo9SP/ww3hWq7en8E15U
3/Z4hund899OAh00rmJGeLY7L8pFIGC5KNJplta/C2AEHkvYj3cKmGza6eqowCpM
ppgPLp8EVW3LWZJowyO/vGZLLJ1AvjEaOeTgrnRzUhLcsn/4bUx92CrRR4a/jtKo
vN+n1HlPVZldiqCHUElJMIMe8OCZiUwnzCafrUALk7xKpKek0YfIemvuVaI8SbAs
/Nrvs+ymk7DmAg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:08:02 2026 by rpki-client