Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier: tCPDT8yLrF1xbvhy03XMIcKlFod30lqH46eKU7RWP0M=
Subject key identifier: D1:AA:38:A5:AD:DA:9A:7F:26:14:11:26:62:16:2C:63:B5:55:32:AA
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial: 019CAAFD096F3D8B6A3521EB30785B374F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number: 0F1D
Signing time: Sun 01 Mar 2026 20:00:35 +0000
Manifest this update: Sun 01 Mar 2026 20:00:35 +0000
Manifest next update: Mon 02 Mar 2026 20:00:35 +0000
Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: nE8mZowrc71A3CqIbcETNqd7VHf0Q+vE4JYLVrcX3Xg=)
2: X3KSPRpScg7W0Ns5vBLAW7YVOAY.roa (hash: gCWNoXRiXdqXJ9sAUoBn9JpM+1ZIHNyGOsBQSFKX4Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:09:6f:3d:8b:6a:35:21:eb:30:78:5b:37:4f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Validity
Not Before: Mar 1 20:00:35 2026 GMT
Not After : Mar 2 20:00:35 2026 GMT
Subject: CN=d1aa38a5adda9a7f2614112662162c63b55532aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:84:e1:a4:33:f6:98:16:65:99:64:73:1b:
8c:6f:54:1d:7b:4d:18:a2:71:1f:1c:2f:ee:a8:ed:
7a:d1:2d:fa:c7:49:77:ec:1e:c4:82:58:80:92:03:
9e:06:7c:af:d8:74:05:01:de:aa:c1:c1:91:83:be:
f3:3f:77:f4:74:43:4b:3c:de:87:f3:59:6e:73:ca:
dc:a1:5c:11:24:f5:c9:79:b0:78:0e:ee:95:88:b2:
3c:43:13:b3:e4:0e:23:a6:61:cb:45:2d:81:a1:18:
e9:78:de:ce:e6:bf:f8:ff:eb:8b:c1:be:2c:15:5a:
c2:46:0e:a6:34:86:59:f3:26:45:14:1d:d7:e3:b5:
9d:1c:88:23:9b:e1:fd:dd:04:03:4f:0f:70:e1:e4:
51:25:1f:f2:ab:f4:d1:fc:04:5e:5e:ab:24:6c:21:
0d:7e:75:92:fb:30:d0:00:f2:ae:73:df:3b:79:93:
f4:ae:be:cd:7b:82:fb:20:d0:03:7a:23:d8:97:29:
d3:21:67:10:9b:fb:31:69:42:44:62:4e:03:e6:55:
7b:c3:1f:55:7d:93:09:f4:bc:61:3a:8d:23:e8:6e:
e6:d9:ba:07:e0:5a:ba:bd:c0:15:da:c1:33:84:83:
18:51:c0:7e:c5:08:08:0c:55:78:1a:c4:de:2f:9c:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:38:A5:AD:DA:9A:7F:26:14:11:26:62:16:2C:63:B5:55:32:AA
X509v3 Authority Key Identifier:
keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bb:08:d5:49:f5:88:66:02:f2:e3:1d:42:c2:42:d1:44:28:
40:cf:44:a4:c6:14:a0:4e:c4:18:70:ce:e8:9a:c2:35:30:c5:
9d:da:66:4a:3e:0c:3d:26:55:45:5d:da:d5:7b:38:d3:c6:90:
d0:e1:cf:f9:fd:98:ec:81:97:ab:0c:a6:a3:3c:f7:f3:66:1d:
4a:d0:87:38:d7:b9:77:e1:1e:3a:0b:d2:95:9e:1d:be:e9:95:
e8:2d:84:69:a6:26:60:32:d6:85:c5:b9:77:84:55:76:9a:35:
cd:37:4d:98:b2:69:3d:39:63:08:5d:0a:c8:d4:fb:fc:75:61:
b9:e9:22:07:37:9a:05:4f:a7:b3:35:6a:50:fa:7d:6e:dd:f2:
39:ae:b8:4a:9f:f8:c8:c6:af:fc:6d:02:aa:78:fc:bd:38:44:
e9:f9:88:39:01:85:e7:1f:e2:51:6e:c8:d0:3a:35:c0:b8:d2:
48:55:bb:55:2e:11:5f:47:a0:d0:3a:07:93:ae:19:1a:16:f5:
0b:e8:70:34:65:ff:2e:63:fc:ae:09:a7:e0:6a:ac:9c:d4:7e:
1a:04:f3:68:0c:5d:75:4d:a6:52:06:79:40:5c:92:a9:18:ae:
06:e4:3b:e7:be:25:e1:e3:5b:f8:16:62:cb:61:4a:6e:44:1a:
80:2c:7f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/QlvPYtqNSHrMHhbN0+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGEzM2E1OGZiNDc2MzRkNjE0ZWMwOWE2ODk4ZGUwZjU4
MDA2ZmUwHhcNMjYwMzAxMjAwMDM1WhcNMjYwMzAyMjAwMDM1WjAzMTEwLwYDVQQD
EyhkMWFhMzhhNWFkZGE5YTdmMjYxNDExMjY2MjE2MmM2M2I1NTUzMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYeE4aQz9pgWZZlkcxuMb1Qde00Y
onEfHC/uqO160S36x0l37B7EgliAkgOeBnyv2HQFAd6qwcGRg77zP3f0dENLPN6H
81luc8rcoVwRJPXJebB4Du6ViLI8QxOz5A4jpmHLRS2BoRjpeN7O5r/4/+uLwb4s
FVrCRg6mNIZZ8yZFFB3X47WdHIgjm+H93QQDTw9w4eRRJR/yq/TR/AReXqskbCEN
fnWS+zDQAPKuc987eZP0rr7Ne4L7INADeiPYlynTIWcQm/sxaUJEYk4D5lV7wx9V
fZMJ9LxhOo0j6G7m2boH4Fq6vcAV2sEzhIMYUcB+xQgIDFV4GsTeL5yLlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGqOKWt2pp/JhQRJmIWLGO1VTKqMB8GA1UdIwQY
MBaAFOTaM6WPtHY01hTsCaaJjeD1gAb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMt
NmNlNjAyMjZhOWU4LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMtNmNlNjAyMjZhOWU4
LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7sI1Un1
iGYC8uMdQsJC0UQoQM9EpMYUoE7EGHDO6JrCNTDFndpmSj4MPSZVRV3a1Xs408aQ
0OHP+f2Y7IGXqwymozz382YdStCHONe5d+EeOgvSlZ4dvumV6C2EaaYmYDLWhcW5
d4RVdpo1zTdNmLJpPTljCF0KyNT7/HVhuekiBzeaBU+nszVqUPp9bt3yOa64Sp/4
yMav/G0Cqnj8vThE6fmIOQGF5x/iUW7I0Do1wLjSSFW7VS4RX0eg0DoHk64ZGhb1
C+hwNGX/LmP8rgmn4GqsnNR+GgTzaAxddU2mUgZ5QFySqRiuBuQ7574l4eNb+BZi
y2FKbkQagCx/Lg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:05 2026 by rpki-client