Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File: 5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier: npiV+HqYr23EkePTGy0Uo8RZGbuE2K/QAzu/c+unY/E=
Subject key identifier: 8A:2F:8A:57:0A:3A:FC:48:43:48:32:A8:56:EA:99:D5:57:5A:CA:75
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer: /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial: 019CA9EAF51C823D3365270AF886E105BFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number: 0630
Signing time: Sun 01 Mar 2026 15:01:13 +0000
Manifest this update: Sun 01 Mar 2026 15:01:13 +0000
Manifest next update: Mon 02 Mar 2026 15:01:13 +0000
Files and hashes: 1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: Z8y7BFVBc4tyAJPpTYbq/zxvOP2VVlH5XG6bkNp/9nw=)
2: Q92n5As_StLfCEOsCZRxLPjQigk.roa (hash: m0A5cImf1wfkQyI07Q9zPZS2LIiSLajm2W221r5jirk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:f5:1c:82:3d:33:65:27:0a:f8:86:e1:05:bf:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Validity
Not Before: Mar 1 15:01:13 2026 GMT
Not After : Mar 2 15:01:13 2026 GMT
Subject: CN=8a2f8a570a3afc48434832a856ea99d5575aca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:15:20:cb:33:f0:36:3e:58:45:b0:f1:a4:
88:8e:e6:42:2c:52:2c:24:02:49:85:34:58:19:bb:
96:88:13:54:49:64:45:18:b0:ff:f2:68:90:89:d4:
20:92:f2:b5:6c:68:68:8d:71:77:b0:9c:b3:11:ce:
27:b1:09:71:75:00:16:a3:22:c2:95:cb:09:29:c9:
5a:36:fd:8f:4e:24:75:b3:ec:87:de:b8:69:dd:35:
47:e9:b8:72:af:9a:7f:c2:3f:72:1e:95:1b:d7:7f:
06:10:6e:66:f6:89:48:7a:05:8c:12:b3:c3:6b:52:
2e:9c:78:98:1b:de:c7:6f:cb:b9:61:0f:6b:62:7b:
cc:ad:a1:d1:f0:b5:53:91:d0:df:f3:22:b9:99:fb:
a2:2a:60:68:5c:7c:1c:31:c3:e3:5e:8c:db:7c:f5:
c8:99:26:52:11:d4:6b:f6:1e:71:d9:69:f6:81:3d:
6d:ec:76:ff:64:32:21:d2:fd:64:77:bb:5b:f7:12:
60:96:ac:17:f9:5c:e4:9b:bd:1d:35:a6:09:5b:5c:
84:1f:cc:37:5c:ff:f9:15:b7:b3:fa:c3:5d:15:40:
4a:c0:41:8b:f3:ea:a8:95:65:a5:86:f4:19:82:52:
96:18:d4:f0:9a:64:ef:9a:b7:bc:ab:c3:b3:2b:e8:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:8A:57:0A:3A:FC:48:43:48:32:A8:56:EA:99:D5:57:5A:CA:75
X509v3 Authority Key Identifier:
keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e1:62:26:42:9f:97:e6:42:4b:ee:76:37:9c:e8:e1:49:6c:
74:a7:bc:6c:37:9d:d3:83:f4:7d:78:ab:99:39:18:e8:84:0a:
b2:55:4b:4a:9f:cf:2f:30:6b:ab:f5:5b:b9:60:2c:0f:79:82:
2e:30:af:d7:a5:37:a3:4e:38:ef:5d:2c:76:e4:c0:1c:05:37:
1d:7c:c9:70:93:07:66:2a:25:ab:f2:af:3b:d7:f3:70:59:f4:
ca:f4:6b:c9:f4:34:2f:83:b3:08:7f:09:ac:73:e5:b4:20:db:
c0:80:7b:31:3a:8b:e3:59:36:e6:8d:2f:7e:c2:57:22:59:72:
54:68:cb:ce:47:9d:8e:e8:77:df:90:1b:7f:e6:4d:c8:c9:aa:
2e:8b:20:14:e7:f5:56:d9:27:7f:29:f3:e0:a7:c7:c6:fc:6b:
e2:93:8e:53:80:36:b4:28:d8:3f:29:f0:03:a4:41:e8:2f:b9:
29:37:72:a4:0b:a4:63:b0:24:d6:c2:ca:df:69:53:5c:06:6e:
34:84:5c:23:f3:67:4e:d5:b9:e7:36:62:91:27:c8:73:04:b0:
89:fa:b3:5d:eb:f1:67:56:ec:26:a1:75:b5:a5:83:cc:3c:a2:
1f:76:89:3d:c1:a6:b8:f6:31:e5:64:04:f9:eb:db:01:f3:ea:
09:fe:d3:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6vUcgj0zZScK+IbhBb+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YmI0YjllOGRmNmQ2NjRlZmNiNzdiNDEwNDE1YzgzNGE2
MTc3ODIwHhcNMjYwMzAxMTUwMTEzWhcNMjYwMzAyMTUwMTEzWjAzMTEwLwYDVQQD
Eyg4YTJmOGE1NzBhM2FmYzQ4NDM0ODMyYTg1NmVhOTlkNTU3NWFjYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXcVIMsz8DY+WEWw8aSIjuZCLFIs
JAJJhTRYGbuWiBNUSWRFGLD/8miQidQgkvK1bGhojXF3sJyzEc4nsQlxdQAWoyLC
lcsJKclaNv2PTiR1s+yH3rhp3TVH6bhyr5p/wj9yHpUb138GEG5m9olIegWMErPD
a1IunHiYG97Hb8u5YQ9rYnvMraHR8LVTkdDf8yK5mfuiKmBoXHwcMcPjXozbfPXI
mSZSEdRr9h5x2Wn2gT1t7Hb/ZDIh0v1kd7tb9xJglqwX+Vzkm70dNaYJW1yEH8w3
XP/5Fbez+sNdFUBKwEGL8+qolWWlhvQZglKWGNTwmmTvmre8q8OzK+i4IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIovilcKOvxIQ0gyqFbqmdVXWsp1MB8GA1UdIwQY
MBaAFOa7S56N9tZk78t3tBBBXINKYXeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXJ0TG5vMzIxbVR2eTNlMEVFRmNnMHBoZDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81Y2EwN2EtYjI0Mi00MTQ0LWEyNjQt
N2Q1NDdlYzg0MTE0LzEvNXJ0TG5vMzIxbVR2eTNlMEVFRmNnMHBoZDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81Y2EwN2EtYjI0Mi00MTQ0LWEyNjQtN2Q1NDdlYzg0MTE0
LzEvNXJ0TG5vMzIxbVR2eTNlMEVFRmNnMHBoZDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+FiJkKf
l+ZCS+52N5zo4UlsdKe8bDed04P0fXirmTkY6IQKslVLSp/PLzBrq/VbuWAsD3mC
LjCv16U3o044710sduTAHAU3HXzJcJMHZiolq/KvO9fzcFn0yvRryfQ0L4OzCH8J
rHPltCDbwIB7MTqL41k25o0vfsJXIllyVGjLzkedjuh335Abf+ZNyMmqLosgFOf1
Vtknfynz4KfHxvxr4pOOU4A2tCjYPynwA6RB6C+5KTdypAukY7Ak1sLK32lTXAZu
NIRcI/NnTtW55zZikSfIcwSwifqzXevxZ1bsJqF1taWDzDyiH3aJPcGmuPYx5WQE
+evbAfPqCf7TJg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:30 2026 by rpki-client