Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: U87M8h3puB6Lpmmt97aAbed5HMZlyvgb1T9aZJiA/ZQ=
Subject key identifier: 5C:5D:AC:3C:85:25:1B:07:04:FF:17:9E:89:CD:8B:5A:B6:0B:22:CF
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 019CAB340965D3545F18D29A2944CF2ADE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 17E0
Signing time: Sun 01 Mar 2026 21:00:39 +0000
Manifest this update: Sun 01 Mar 2026 21:00:39 +0000
Manifest next update: Mon 02 Mar 2026 21:00:39 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: +twcaiPKquSmZBDy0Uqwt3vh45uJdWGHcLAXCvQVz5c=)
2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:09:65:d3:54:5f:18:d2:9a:29:44:cf:2a:de:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Mar 1 21:00:39 2026 GMT
Not After : Mar 2 21:00:39 2026 GMT
Subject: CN=5c5dac3c85251b0704ff179e89cd8b5ab60b22cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:96:50:ff:bf:48:28:72:93:d7:e1:ac:14:
f0:7c:7c:98:29:9c:3d:71:14:8d:2e:f3:37:dc:27:
6e:05:ac:3e:32:dd:3d:d6:94:c2:d6:fc:31:df:06:
f5:0c:96:ca:06:94:f7:2f:10:1d:87:9f:58:ee:ef:
e4:21:7d:27:de:03:0c:a3:2b:27:02:eb:92:05:a0:
cb:6a:83:8d:29:3c:e5:08:6a:08:bd:4c:ef:06:dc:
ec:d5:80:e4:b4:d5:69:e0:20:24:7e:46:d6:2e:12:
10:e1:af:4f:51:72:1b:64:ad:13:e9:0d:f0:4a:46:
7b:0e:54:d8:3c:e4:d1:05:31:cc:85:7f:79:f4:8f:
fe:d9:5e:85:bf:ec:8c:5f:5a:41:57:07:dc:b2:07:
5a:bf:43:18:09:63:e1:02:39:f7:59:60:eb:ad:2c:
49:e2:c2:6d:4e:63:be:d6:e1:50:23:ce:6c:b2:5b:
02:87:0f:bb:93:7c:ee:fc:c0:c3:39:45:0a:9b:1c:
94:21:a5:da:57:81:14:fb:ff:9a:c2:01:1b:bb:66:
08:64:53:4b:fc:e5:71:db:d6:9f:46:ea:55:e1:88:
66:84:1d:1d:f1:cc:c8:4a:48:24:0d:b1:f6:df:0c:
7d:44:b3:81:63:db:b6:ed:9b:97:b0:46:34:70:24:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5D:AC:3C:85:25:1B:07:04:FF:17:9E:89:CD:8B:5A:B6:0B:22:CF
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d9:68:98:d2:6f:8a:23:d8:6c:0f:23:84:47:33:f7:d3:98:
19:49:81:c6:08:4e:03:78:0c:31:14:4c:c5:68:a3:52:1c:88:
c5:ec:9f:5b:e3:fc:65:db:f8:f8:d3:cf:1c:2c:ca:92:35:6b:
6b:66:69:68:c9:65:d9:e9:92:84:2f:ba:fa:45:82:cc:fe:8d:
c0:4b:de:f6:75:67:b7:1e:b4:8b:86:36:32:7a:4c:f8:47:85:
1b:73:02:1f:8c:d3:a1:a8:3c:d6:86:66:0b:59:5d:d6:98:41:
f4:bd:eb:75:84:3c:3b:3f:5b:a1:6a:93:55:42:c4:ee:ea:36:
aa:02:1b:0e:3a:b5:6f:5e:86:0f:bc:90:49:65:07:32:43:c4:
31:31:b5:f5:75:2b:6b:1c:4a:b9:34:83:9e:1e:d6:c6:6a:9b:
09:ba:39:62:34:2c:ae:8b:3d:42:11:3d:8e:e4:e7:89:e7:d5:
30:84:8f:82:a9:fc:c4:2b:b3:b2:41:6c:da:65:fe:e3:d1:a3:
1e:e2:e5:26:61:2d:49:d9:92:68:62:14:1f:c3:42:62:ba:ac:
99:d0:2e:c8:a6:9a:da:a6:5e:fb:ee:b4:6d:27:34:9c:5a:f8:
4d:8e:de:67:23:58:9e:2f:cd:46:18:0e:a7:7b:80:93:01:d7:
56:f6:9c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNAll01RfGNKaKUTPKt5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NDNmYzIwM2Y3MDZmOTczMTQxMjc2MWIyN2ExYTRiMzk1
Y2ZjMWUwHhcNMjYwMzAxMjEwMDM5WhcNMjYwMzAyMjEwMDM5WjAzMTEwLwYDVQQD
Eyg1YzVkYWMzYzg1MjUxYjA3MDRmZjE3OWU4OWNkOGI1YWI2MGIyMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3aWUP+/SChyk9fhrBTwfHyYKZw9
cRSNLvM33CduBaw+Mt091pTC1vwx3wb1DJbKBpT3LxAdh59Y7u/kIX0n3gMMoysn
AuuSBaDLaoONKTzlCGoIvUzvBtzs1YDktNVp4CAkfkbWLhIQ4a9PUXIbZK0T6Q3w
SkZ7DlTYPOTRBTHMhX959I/+2V6Fv+yMX1pBVwfcsgdav0MYCWPhAjn3WWDrrSxJ
4sJtTmO+1uFQI85sslsChw+7k3zu/MDDOUUKmxyUIaXaV4EU+/+awgEbu2YIZFNL
/OVx29afRupV4YhmhB0d8czISkgkDbH23wx9RLOBY9u27ZuXsEY0cCQ3ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxdrDyFJRsHBP8XnonNi1q2CyLPMB8GA1UdIwQY
MBaAFORD/CA/cG+XMUEnYbJ6Gks5XPweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWIt
YzBmOWQwODdmYzEwLzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWItYzBmOWQwODdmYzEw
LzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9lomNJv
iiPYbA8jhEcz99OYGUmBxghOA3gMMRRMxWijUhyIxeyfW+P8Zdv4+NPPHCzKkjVr
a2ZpaMll2emShC+6+kWCzP6NwEve9nVntx60i4Y2MnpM+EeFG3MCH4zToag81oZm
C1ld1phB9L3rdYQ8Oz9boWqTVULE7uo2qgIbDjq1b16GD7yQSWUHMkPEMTG19XUr
axxKuTSDnh7WxmqbCbo5YjQsros9QhE9juTniefVMISPgqn8xCuzskFs2mX+49Gj
HuLlJmEtSdmSaGIUH8NCYrqsmdAuyKaa2qZe++60bSc0nFr4TY7eZyNYni/NRhgO
p3uAkwHXVvac6Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:35 2026 by rpki-client