Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: DELwE42GqJjNXcCtM5DXNWlEKQa0//uwlwV05AEyVVs=
Subject key identifier: 44:A8:B7:A1:17:92:1D:41:B3:C2:9A:63:CC:11:5D:6F:4A:25:AF:5A
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 019CABD9DE2720AEA90BE2D8C37817761B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 15D8
Signing time: Mon 02 Mar 2026 00:01:47 +0000
Manifest this update: Mon 02 Mar 2026 00:01:47 +0000
Manifest next update: Tue 03 Mar 2026 00:01:47 +0000
Files and hashes: 1: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: CCrssicephqtT5Oy2g//TWZrDo5zS6WdjuqV9TYDArQ=)
2: Wu9t7d9tnZW1AA2IWZCyVHCZEmo.roa (hash: kOHm2lN17Qca/qCn59+JS7mNSFFu2Gxe0p/zQAQ3878=)
3: ew282-AhNX4FMYFmo40ImlhZsYU.roa (hash: 7VW/QfG/Z+KeGR3BpgjUt4A9hj2uza0zmvqYLXTnLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:de:27:20:ae:a9:0b:e2:d8:c3:78:17:76:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Mar 2 00:01:47 2026 GMT
Not After : Mar 3 00:01:47 2026 GMT
Subject: CN=44a8b7a117921d41b3c29a63cc115d6f4a25af5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:97:b4:31:af:6b:ef:ab:9d:ce:75:cc:84:
7b:06:3e:c7:f2:49:60:db:31:5a:46:2a:ed:bb:af:
60:2f:be:75:f2:45:ee:2f:ab:a4:51:d0:6f:cc:bf:
99:be:92:4b:11:45:de:79:39:00:48:e5:aa:83:5f:
2b:1b:a1:e4:e5:2d:8e:91:01:7a:21:18:48:5f:6c:
56:e0:52:43:5b:95:48:24:fa:b5:14:db:10:15:ea:
97:ee:49:e8:b7:c4:8b:0a:dc:0f:4b:42:f5:4c:df:
90:76:fc:4a:ed:7f:01:ab:c6:2b:31:79:06:95:75:
ce:22:ce:e6:46:8f:ab:6a:75:ba:7b:6a:39:01:87:
44:9a:c9:72:22:38:51:b4:47:80:c3:55:d3:b2:42:
71:b1:cd:45:a6:05:0f:7d:1c:57:7b:90:19:7b:d8:
47:b1:43:bd:b5:9a:19:ba:40:23:39:a2:2b:27:6a:
44:12:c2:a7:ce:2a:b5:ad:2a:df:66:57:2f:69:08:
a8:cb:c0:56:c1:f4:50:26:26:03:3f:f7:0c:b7:51:
1c:9d:27:f6:c2:10:e5:1b:8c:ba:12:fb:7b:aa:4f:
09:9e:a1:97:dc:02:ec:01:13:b9:a6:02:92:b8:db:
06:ee:87:24:72:fc:a2:40:00:f8:c0:e3:9c:a1:6d:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:B7:A1:17:92:1D:41:B3:C2:9A:63:CC:11:5D:6F:4A:25:AF:5A
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fe:90:bd:61:3b:5d:91:70:2f:2f:9a:53:2a:37:dd:5f:b0:
35:a1:32:c5:27:33:61:f2:dd:f9:0b:e5:49:13:dd:48:cf:c3:
f6:07:e8:2f:ef:d0:17:f7:a9:5f:ec:a2:b5:35:6c:8c:e0:a6:
89:15:a8:9f:a9:c4:b6:13:22:f1:b8:55:64:51:0d:17:cf:b8:
73:43:6c:f5:24:56:ac:35:27:14:40:39:24:ea:e3:8f:06:51:
af:2c:11:cf:17:ef:69:23:0a:ed:06:8b:26:24:17:4f:e4:94:
5e:f0:ee:44:18:06:5a:79:6f:d1:e0:9f:bd:d0:df:06:12:06:
60:1a:ce:88:e9:0c:b9:f7:0e:9e:46:9f:a9:35:c9:d2:e4:8d:
75:8d:f6:28:0b:dd:f4:c0:5b:2a:b2:05:4a:c4:95:42:08:35:
7b:b6:18:b7:5f:8f:f8:46:e7:27:5a:dd:68:8e:ff:78:38:af:
0b:29:8c:1f:d1:f8:c1:29:f1:fe:18:d6:9f:8a:2e:73:61:c2:
98:5c:e6:87:de:8f:94:87:ab:b9:de:7e:3c:21:a5:9f:63:21:
36:d0:9f:a6:43:d8:42:56:77:fc:c4:35:14:df:df:98:2c:19:
cb:ed:cb:1e:d5:46:55:06:17:60:bc:61:0a:26:9a:bb:6a:20:
ac:94:f0:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2d4nIK6pC+LYw3gXdhsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZjRmMjRiNDBmZGE5Yjk1MjhlNGE4ZWRjYWQ2MWI4NDFk
ZjZjMTgwHhcNMjYwMzAyMDAwMTQ3WhcNMjYwMzAzMDAwMTQ3WjAzMTEwLwYDVQQD
Eyg0NGE4YjdhMTE3OTIxZDQxYjNjMjlhNjNjYzExNWQ2ZjRhMjVhZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8SXtDGva++rnc51zIR7Bj7H8klg
2zFaRirtu69gL7518kXuL6ukUdBvzL+ZvpJLEUXeeTkASOWqg18rG6Hk5S2OkQF6
IRhIX2xW4FJDW5VIJPq1FNsQFeqX7knot8SLCtwPS0L1TN+QdvxK7X8Bq8YrMXkG
lXXOIs7mRo+ranW6e2o5AYdEmslyIjhRtEeAw1XTskJxsc1FpgUPfRxXe5AZe9hH
sUO9tZoZukAjOaIrJ2pEEsKnziq1rSrfZlcvaQioy8BWwfRQJiYDP/cMt1EcnSf2
whDlG4y6Evt7qk8JnqGX3ALsARO5pgKSuNsG7ockcvyiQAD4wOOcoW13CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESot6EXkh1Bs8KaY8wRXW9KJa9aMB8GA1UdIwQY
MBaAFOX08ktA/am5Uo5KjtytYbhB32wYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZUeVMwRDlxYmxTamtxTzNLMWh1RUhmYkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81MWUzYTUtMzFkYi00YmRkLWIwY2Qt
ODI4MDIyMDQzZWEzLzEvNWZUeVMwRDlxYmxTamtxTzNLMWh1RUhmYkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81MWUzYTUtMzFkYi00YmRkLWIwY2QtODI4MDIyMDQzZWEz
LzEvNWZUeVMwRDlxYmxTamtxTzNLMWh1RUhmYkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/6QvWE7
XZFwLy+aUyo33V+wNaEyxSczYfLd+QvlSRPdSM/D9gfoL+/QF/epX+yitTVsjOCm
iRWon6nEthMi8bhVZFENF8+4c0Ns9SRWrDUnFEA5JOrjjwZRrywRzxfvaSMK7QaL
JiQXT+SUXvDuRBgGWnlv0eCfvdDfBhIGYBrOiOkMufcOnkafqTXJ0uSNdY32KAvd
9MBbKrIFSsSVQgg1e7YYt1+P+EbnJ1rdaI7/eDivCymMH9H4wSnx/hjWn4ouc2HC
mFzmh96PlIerud5+PCGln2MhNtCfpkPYQlZ3/MQ1FN/fmCwZy+3LHtVGVQYXYLxh
Ciaau2ogrJTw6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:58 2026 by rpki-client