Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: w9s2BhTzpOcjRilDvGJvWHYGFgS3gLTD9ObhMXfBmAQ=
Subject key identifier: C7:AB:73:43:1E:55:ED:3E:82:5E:54:2A:7E:87:D9:9C:8B:48:37:CA
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019CAC0FF9AA3BE318433759CAC13995992A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 01:00:53 +0000
Manifest this update: Mon 02 Mar 2026 01:00:53 +0000
Manifest next update: Tue 03 Mar 2026 01:00:53 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: ACE8WDjBZYOCvYmqfETtcZDjFFBFmC44Z7OP6f4cN4U=)
2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=)
3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=)
4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=)
5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=)
6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=)
7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=)
8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f9:aa:3b:e3:18:43:37:59:ca:c1:39:95:99:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Mar 2 01:00:53 2026 GMT
Not After : Mar 3 01:00:53 2026 GMT
Subject: CN=c7ab73431e55ed3e825e542a7e87d99c8b4837ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:94:e3:6c:93:15:40:d1:0c:4a:65:96:bb:
1e:5b:d1:6e:e3:67:a4:56:e1:5c:bf:a0:e7:eb:09:
aa:dc:47:8f:05:b3:36:9c:f6:dd:36:e8:0c:23:cc:
7a:17:7e:ad:51:bc:c1:3a:12:8b:e1:fc:fa:57:b5:
90:3a:48:ca:34:8f:dc:b0:01:71:ac:ba:23:63:3b:
ae:65:85:25:bb:99:4c:4b:9d:8b:e7:08:f9:34:1d:
85:bc:13:26:7c:df:b9:c3:7f:dd:37:87:fd:45:f0:
8d:09:41:d3:5f:64:e0:44:a6:93:33:39:3f:a9:31:
d8:a7:57:ca:15:45:f9:59:9f:c2:77:6a:08:72:03:
69:4e:b4:f7:90:47:31:cf:2d:d5:40:23:08:e9:7b:
0f:cb:51:a3:05:be:ba:10:df:c5:2b:90:58:6b:7a:
67:fe:7a:52:ba:7a:b9:26:0f:16:29:64:71:83:9a:
71:f9:0f:6f:a7:a3:9a:da:51:ff:40:f6:5d:c8:ea:
c7:43:48:cc:17:58:45:5c:a9:0d:2d:fc:ab:2a:55:
df:ce:30:6e:14:7a:ce:be:a5:7a:64:37:b9:22:61:
be:6c:14:f6:00:15:5e:d0:4c:30:d8:0d:96:cb:2c:
bd:54:14:55:58:e6:73:ed:c2:35:27:18:d3:32:04:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:73:43:1E:55:ED:3E:82:5E:54:2A:7E:87:D9:9C:8B:48:37:CA
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:87:44:c3:66:b8:04:f7:8d:53:c8:55:35:46:aa:77:55:c1:
12:fc:1d:75:c4:ef:90:d3:47:f1:08:41:0c:e1:2f:2d:b4:f8:
6f:fe:86:69:3d:d1:3e:4b:85:97:5c:f1:40:8e:a3:b3:ac:41:
0d:65:3d:46:e5:95:59:b8:1f:e9:a2:b5:87:95:11:78:97:ce:
0c:11:f6:10:49:49:17:5e:a2:3b:19:78:bb:bb:14:ce:6c:42:
7d:c0:ef:a3:88:1e:7b:31:59:18:a0:41:c9:ef:2c:2a:24:2e:
8a:6f:fa:25:f7:e3:51:88:f1:bb:55:0d:1b:68:e4:1a:c1:bf:
fc:22:c9:b7:61:d5:3e:86:c0:c6:b7:4c:15:e0:09:24:12:c1:
da:fd:87:f7:e4:fe:bd:80:bb:9e:21:ae:00:8a:83:09:de:50:
b3:88:b3:f3:f5:fd:72:a0:05:b5:e6:91:de:c9:9c:9e:da:81:
90:89:d9:43:87:5d:a4:6f:80:e8:14:9d:c1:8d:46:d0:55:ea:
76:1f:f1:f0:30:63:a5:2c:5e:33:96:d1:ac:97:98:f7:0c:58:
19:18:74:fc:12:7e:e9:65:60:a2:fb:0f:af:1f:71:c4:f9:32:
bd:c4:cf:b3:ea:09:46:00:22:bf:cf:b5:08:66:a1:28:c2:ad:
6a:6a:53:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD/mqO+MYQzdZysE5lZkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz
NzQ5ZTIwHhcNMjYwMzAyMDEwMDUzWhcNMjYwMzAzMDEwMDUzWjAzMTEwLwYDVQQD
EyhjN2FiNzM0MzFlNTVlZDNlODI1ZTU0MmE3ZTg3ZDk5YzhiNDgzN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJmU42yTFUDRDEpllrseW9Fu42ek
VuFcv6Dn6wmq3EePBbM2nPbdNugMI8x6F36tUbzBOhKL4fz6V7WQOkjKNI/csAFx
rLojYzuuZYUlu5lMS52L5wj5NB2FvBMmfN+5w3/dN4f9RfCNCUHTX2TgRKaTMzk/
qTHYp1fKFUX5WZ/Cd2oIcgNpTrT3kEcxzy3VQCMI6XsPy1GjBb66EN/FK5BYa3pn
/npSunq5Jg8WKWRxg5px+Q9vp6Oa2lH/QPZdyOrHQ0jMF1hFXKkNLfyrKlXfzjBu
FHrOvqV6ZDe5ImG+bBT2ABVe0Eww2A2Wyyy9VBRVWOZz7cI1JxjTMgRc3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMerc0MeVe0+gl5UKn6H2ZyLSDfKMB8GA1UdIwQY
MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqodEw2a4
BPeNU8hVNUaqd1XBEvwddcTvkNNH8QhBDOEvLbT4b/6GaT3RPkuFl1zxQI6js6xB
DWU9RuWVWbgf6aK1h5UReJfODBH2EElJF16iOxl4u7sUzmxCfcDvo4geezFZGKBB
ye8sKiQuim/6JffjUYjxu1UNG2jkGsG//CLJt2HVPobAxrdMFeAJJBLB2v2H9+T+
vYC7niGuAIqDCd5Qs4iz8/X9cqAFteaR3smcntqBkInZQ4ddpG+A6BSdwY1G0FXq
dh/x8DBjpSxeM5bRrJeY9wxYGRh0/BJ+6WVgovsPrx9xxPkyvcTPs+oJRgAiv8+1
CGahKMKtampTdg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:20 2026 by rpki-client