Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: Xb2fhUc2noKY1K45oN1mq5HpEbkZra2RgH7a7buengc=
Subject key identifier: 56:85:11:41:6E:F2:C0:87:4E:6F:87:A3:67:F8:26:38:67:CE:67:29
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 019CAB6B730A84A070D9897B61378510490C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 12FD
Signing time: Sun 01 Mar 2026 22:01:11 +0000
Manifest this update: Sun 01 Mar 2026 22:01:11 +0000
Manifest next update: Mon 02 Mar 2026 22:01:11 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: kf1woTjxNs92Ja9QZzZ+lvnCerI4anuek1N7zHNMOSo=)
2: sZ_wJd4obInjvojttLVzF1c-iho.roa (hash: 3arQ7GDjRVulm35+QdBtPgi507F8KwHTfe7c2qEyJ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:73:0a:84:a0:70:d9:89:7b:61:37:85:10:49:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Mar 1 22:01:11 2026 GMT
Not After : Mar 2 22:01:11 2026 GMT
Subject: CN=568511416ef2c0874e6f87a367f8263867ce6729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:c9:17:5a:d4:0e:ff:32:d7:ea:31:65:c6:
20:89:d2:d9:cc:c5:e9:08:22:64:95:da:45:ed:3b:
e0:78:30:a0:37:84:59:30:78:fe:d7:83:59:cc:65:
bd:8f:d5:35:ff:f2:67:52:a7:da:5a:48:82:81:61:
f1:2e:c1:c9:8c:72:c1:b9:9a:c6:26:fb:f3:2e:27:
ee:01:5e:85:47:c3:f4:86:89:6d:3c:65:98:4c:84:
01:8f:2b:e9:0b:98:77:7a:86:01:d7:e9:8e:9a:77:
59:32:42:23:e6:04:f2:a6:b2:b9:dc:96:c7:24:34:
c4:ec:b1:17:4c:5a:99:bf:e2:ee:d9:d8:14:55:63:
ec:37:8c:2e:73:f7:75:26:bd:c6:05:99:03:b0:1c:
f8:e7:f9:30:4c:ed:88:3f:51:0c:9f:b1:f2:6f:06:
76:56:1d:93:69:53:cf:a4:18:48:46:b3:8e:38:2b:
e4:f9:8f:92:26:1e:47:c8:b3:62:f6:c0:c1:b2:5f:
4e:01:2e:63:aa:4f:e9:bf:33:eb:ab:da:79:5d:29:
80:58:da:f5:a0:b1:51:f8:9e:90:e3:45:4e:df:bf:
84:f4:51:f5:ed:9e:1a:df:0d:19:fc:28:47:65:c9:
1e:b2:06:84:11:26:03:be:f1:33:a7:17:55:0f:ca:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:11:41:6E:F2:C0:87:4E:6F:87:A3:67:F8:26:38:67:CE:67:29
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f2:c8:36:65:1a:46:02:7b:4a:3c:51:57:cd:7c:72:34:ce:
dd:0f:7e:f5:09:d4:4b:a4:1d:8c:a0:46:23:b5:b5:86:d8:59:
57:17:4e:4a:e3:b4:ff:d2:c1:0c:6a:ed:f2:9f:6e:e5:9f:24:
c0:11:3b:81:c6:83:99:ae:bc:ad:00:96:6e:4d:ef:c8:9b:78:
07:ae:e0:26:9e:55:03:fb:d1:46:f4:b7:34:9d:92:6f:85:80:
be:36:d1:8f:4b:11:43:e6:aa:33:8d:c0:ac:8d:db:04:f3:a3:
ed:69:86:78:a8:e8:58:5f:f0:44:51:e2:ee:10:2a:ce:c5:62:
c0:f1:bd:f5:6c:2f:9e:60:10:7b:c7:fd:96:44:f9:a4:b6:10:
5e:62:79:67:bd:72:20:08:b4:49:3d:79:2a:e7:19:21:d1:a4:
ae:16:8f:08:3c:39:3e:6a:f1:00:a3:f0:ed:5e:0a:87:cb:62:
c0:6a:e5:7c:8f:eb:45:fd:34:96:c8:2a:1b:d4:6d:43:89:3b:
3d:11:3a:42:02:89:0e:24:ff:8d:95:e7:f0:12:59:d3:45:c3:
73:5d:d2:27:d2:dd:ea:6f:96:35:2d:ff:8b:5c:b5:6c:c7:ee:
d2:c1:93:b3:0e:c7:5d:99:17:a9:6c:c7:30:fb:9c:b5:18:27:
96:28:0d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra3MKhKBw2Yl7YTeFEEkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0
NzQyMmYwHhcNMjYwMzAxMjIwMTExWhcNMjYwMzAyMjIwMTExWjAzMTEwLwYDVQQD
Eyg1Njg1MTE0MTZlZjJjMDg3NGU2Zjg3YTM2N2Y4MjYzODY3Y2U2NzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmDJF1rUDv8y1+oxZcYgidLZzMXp
CCJkldpF7TvgeDCgN4RZMHj+14NZzGW9j9U1//JnUqfaWkiCgWHxLsHJjHLBuZrG
JvvzLifuAV6FR8P0holtPGWYTIQBjyvpC5h3eoYB1+mOmndZMkIj5gTyprK53JbH
JDTE7LEXTFqZv+Lu2dgUVWPsN4wuc/d1Jr3GBZkDsBz45/kwTO2IP1EMn7HybwZ2
Vh2TaVPPpBhIRrOOOCvk+Y+SJh5HyLNi9sDBsl9OAS5jqk/pvzPrq9p5XSmAWNr1
oLFR+J6Q40VO37+E9FH17Z4a3w0Z/ChHZckesgaEESYDvvEzpxdVD8qH5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaFEUFu8sCHTm+Ho2f4JjhnzmcpMB8GA1UdIwQY
MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt
MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh
LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvLINmUa
RgJ7SjxRV818cjTO3Q9+9QnUS6QdjKBGI7W1hthZVxdOSuO0/9LBDGrt8p9u5Z8k
wBE7gcaDma68rQCWbk3vyJt4B67gJp5VA/vRRvS3NJ2Sb4WAvjbRj0sRQ+aqM43A
rI3bBPOj7WmGeKjoWF/wRFHi7hAqzsViwPG99WwvnmAQe8f9lkT5pLYQXmJ5Z71y
IAi0ST15KucZIdGkrhaPCDw5PmrxAKPw7V4Kh8tiwGrlfI/rRf00lsgqG9RtQ4k7
PRE6QgKJDiT/jZXn8BJZ00XDc13SJ9Ld6m+WNS3/i1y1bMfu0sGTsw7HXZkXqWzH
MPuctRgnligNXA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:32 2026 by rpki-client