Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: gRAKnzbfQw/BAqg5o0B4G+gj7QbfDNeJLJFvwWkVoV4=
Subject key identifier: EC:C3:E5:6B:6A:E4:02:AA:E8:28:45:BA:FF:A4:5C:C5:65:DD:F9:AE
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 019CAB6B08549E8DB5917C1CF83296BEACBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:44 +0000
Manifest this update: Sun 01 Mar 2026 22:00:44 +0000
Manifest next update: Mon 02 Mar 2026 22:00:44 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: 5+m5jnHExYt8qO5dkrGx2en1CsxgTU8QiE1I5GdOJ6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:08:54:9e:8d:b5:91:7c:1c:f8:32:96:be:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Mar 1 22:00:44 2026 GMT
Not After : Mar 2 22:00:44 2026 GMT
Subject: CN=ecc3e56b6ae402aae82845baffa45cc565ddf9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0f:97:f1:f9:79:d3:36:3d:b5:64:bf:58:5d:
72:25:d6:d5:df:90:22:1b:44:c6:09:66:9d:96:e8:
5b:6a:d9:e0:92:b2:3f:7d:aa:0e:69:36:e7:89:67:
9a:8a:fe:c0:af:7c:0e:46:2c:f9:30:84:91:32:74:
a6:c7:6f:9b:a7:97:3c:e5:ef:74:af:75:34:7e:04:
3b:9e:31:6d:3f:da:da:19:68:0d:d6:d7:ba:21:91:
92:20:92:1f:48:8a:4e:95:91:4b:52:dc:27:45:a6:
66:db:05:da:d6:7a:d9:c4:f6:2b:ac:1c:f1:14:2d:
94:82:d7:7e:c8:a2:76:a3:de:66:cd:70:4c:ff:7b:
c7:97:59:d8:3c:f7:d2:9e:5f:c4:b3:9a:7c:c5:df:
dd:be:7b:dd:2b:f9:3b:9f:df:26:bf:4e:18:aa:77:
0c:cf:49:52:92:0c:ef:f7:ad:17:20:7f:88:5e:09:
7e:c7:77:57:9b:2a:65:35:48:12:cc:fe:e8:c7:de:
2a:e4:b1:a5:32:b0:cf:f4:83:ff:8d:a3:c5:c9:c6:
e6:89:55:db:fd:a1:bd:2c:cd:cb:3f:b9:ba:84:52:
de:87:9d:b1:2b:c7:4e:71:11:d7:23:56:1a:31:81:
66:01:29:a8:1f:c7:21:9f:04:e8:f2:cf:4a:1f:b1:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:E5:6B:6A:E4:02:AA:E8:28:45:BA:FF:A4:5C:C5:65:DD:F9:AE
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b4:ad:8f:7c:d2:82:33:d6:b5:ff:d7:92:94:4d:ac:4c:71:
fe:0e:71:15:35:6d:88:f6:7f:59:b8:b1:b1:b3:13:0a:28:fc:
35:91:0c:0e:3f:df:0b:e6:6d:2e:4a:60:b0:c3:9e:c0:97:fd:
68:89:ce:1e:07:e1:a6:02:35:f7:4e:a1:33:72:92:68:2b:96:
53:3d:65:7a:f5:0a:4f:41:a8:aa:65:3d:53:7c:5e:84:85:55:
d0:bd:d3:f8:5e:91:8f:c3:72:60:66:86:07:cf:6e:b5:89:b5:
03:3c:21:e2:f1:c7:c2:a2:32:80:a1:5f:96:7c:e7:6f:00:71:
2d:ff:e7:af:61:25:c3:dd:68:fe:05:a4:9a:34:9f:54:a2:a9:
a8:6b:c8:40:1d:e4:87:c8:b7:c9:82:e6:6d:25:73:cd:42:92:
3e:c9:53:52:8c:3c:ef:e2:b4:92:f0:00:cf:c7:17:95:85:fb:
0e:28:96:ba:3b:45:e3:1c:c5:2e:ec:09:ca:ba:cb:ad:b4:be:
62:43:f6:7a:30:95:51:27:d1:25:01:b3:1f:15:92:5d:7a:02:
ea:36:cc:ac:75:3d:ea:7b:53:0d:b9:42:8f:56:4f:a0:da:e6:
1f:e8:7e:41:3c:82:d1:48:ac:c2:91:ba:80:b3:cd:e1:46:a9:
e7:b5:94:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrawhUno21kXwc+DKWvqy7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0
YmM0NGIwHhcNMjYwMzAxMjIwMDQ0WhcNMjYwMzAyMjIwMDQ0WjAzMTEwLwYDVQQD
EyhlY2MzZTU2YjZhZTQwMmFhZTgyODQ1YmFmZmE0NWNjNTY1ZGRmOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A+X8fl50zY9tWS/WF1yJdbV35Ai
G0TGCWadluhbatngkrI/faoOaTbniWeaiv7Ar3wORiz5MISRMnSmx2+bp5c85e90
r3U0fgQ7njFtP9raGWgN1te6IZGSIJIfSIpOlZFLUtwnRaZm2wXa1nrZxPYrrBzx
FC2Ugtd+yKJ2o95mzXBM/3vHl1nYPPfSnl/Es5p8xd/dvnvdK/k7n98mv04YqncM
z0lSkgzv960XIH+IXgl+x3dXmyplNUgSzP7ox94q5LGlMrDP9IP/jaPFycbmiVXb
/aG9LM3LP7m6hFLeh52xK8dOcRHXI1YaMYFmASmoH8chnwTo8s9KH7EagwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzD5Wtq5AKq6ChFuv+kXMVl3fmuMB8GA1UdIwQY
MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt
ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh
LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbStj3zS
gjPWtf/XkpRNrExx/g5xFTVtiPZ/WbixsbMTCij8NZEMDj/fC+ZtLkpgsMOewJf9
aInOHgfhpgI1906hM3KSaCuWUz1levUKT0GoqmU9U3xehIVV0L3T+F6Rj8NyYGaG
B89utYm1Azwh4vHHwqIygKFflnznbwBxLf/nr2Elw91o/gWkmjSfVKKpqGvIQB3k
h8i3yYLmbSVzzUKSPslTUow87+K0kvAAz8cXlYX7DiiWujtF4xzFLuwJyrrLrbS+
YkP2ejCVUSfRJQGzHxWSXXoC6jbMrHU96ntTDblCj1ZPoNrmH+h+QTyC0UiswpG6
gLPN4Uap57WU7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:54 2026 by rpki-client