
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
File: ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json)
Hash identifier: 1+0n13pi+1fTJFgrfS8XXaHuym1065xszCFoh4CK8pM=
Subject key identifier: C6:BF:70:CF:45:F3:26:E0:78:38:9A:4D:53:71:01:11:13:25:F9:BB
Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Certificate serial: 019CAAC66475CB269B5B441051C0544FD081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
Manifest number: 1668
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: gG4OiviI+Np/PbRpbc94WTks9yJ4V0P+P6T5GFwIxrE=)
2: huM-GkqhBk0Re8XPHSnKFpnI1VQ.roa (hash: yMEbieQN4mmr0B4PHYgIfIopNkBH4Ovpl20WF2oTeLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:64:75:cb:26:9b:5b:44:10:51:c0:54:4f:d0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=c6bf70cf45f326e078389a4d537101111325f9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:d3:ba:66:4f:ce:a9:08:db:66:0c:7d:6f:
49:6e:68:e7:44:14:27:e5:89:38:7f:c1:ea:95:6f:
14:1a:40:e1:ca:a1:5f:a8:64:b4:6e:c3:b0:ea:30:
82:0f:05:9d:3e:d3:d9:8e:d1:5c:b9:b0:35:3d:8f:
ed:11:55:57:08:03:71:06:45:8b:50:9f:1b:65:46:
37:af:65:44:88:4a:e7:e2:37:a1:66:44:c8:0d:a1:
a4:ad:94:e4:e7:25:2a:18:f8:cd:a4:d7:aa:29:6f:
a2:9d:84:59:d8:48:61:1d:9d:f2:f2:70:d5:3c:c1:
96:ea:51:05:61:69:76:09:af:62:6b:63:ea:63:0b:
e6:ec:1e:7e:8c:06:83:d8:e2:ac:d5:9c:f0:a0:fc:
ca:8c:0c:71:77:de:06:c7:0d:35:fe:8e:c9:3a:38:
35:78:32:63:71:9e:4f:14:06:e5:7e:68:01:c8:e4:
df:9a:e0:65:01:4d:3f:db:5a:4c:53:ac:0d:0a:5c:
b8:30:c3:40:89:16:d2:8b:c8:0e:e1:2d:fd:db:fc:
70:62:f8:e0:5f:1b:3d:3e:ea:b3:fc:43:af:fc:ca:
b3:26:ed:34:d6:01:29:8d:3c:43:9d:dd:87:56:34:
ef:08:63:25:4a:8f:db:8e:5c:48:92:59:8d:b9:7c:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BF:70:CF:45:F3:26:E0:78:38:9A:4D:53:71:01:11:13:25:F9:BB
X509v3 Authority Key Identifier:
keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:a0:50:1c:e0:30:3b:46:c3:3e:ea:34:d8:7a:29:fd:ac:
2b:f0:58:5f:b0:15:aa:fe:ca:64:ea:7f:f1:eb:87:3d:7a:0f:
e2:5f:1b:37:35:d7:a3:a3:6f:c8:49:a6:57:c4:ca:0c:85:e4:
29:17:af:7f:d1:3c:1b:6f:5a:3b:0b:e1:0d:1c:8d:fd:8f:16:
65:23:8f:f6:7a:e1:40:25:e8:70:d9:e6:21:47:b8:23:58:85:
89:f6:7e:9b:f3:40:57:89:f9:2b:33:7f:08:39:7a:d7:ee:e6:
22:c3:05:17:25:31:45:87:85:7e:28:7a:43:44:a0:3d:df:90:
da:6d:ef:ed:47:ef:07:47:14:9c:71:05:29:c2:d8:d0:55:20:
20:c7:d5:ee:bb:43:3c:c5:50:0b:9b:43:d1:02:ca:e9:d1:43:
5a:8e:0c:d5:ec:82:af:d7:8f:4f:da:bf:c1:6d:93:31:3d:77:
5f:e4:7c:ad:5e:c5:72:17:89:70:4f:a5:ff:81:9c:e0:b5:bf:
80:ec:dd:e2:cc:ec:c7:56:c2:0c:77:ac:97:e6:73:d1:b8:2e:
75:1d:54:d6:f2:0c:7a:c3:e8:1d:55:5e:9a:cf:19:89:17:6c:
35:35:56:57:84:20:af:4a:4d:b0:37:cd:ef:fa:64:6f:55:a5:
94:73:ff:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmR1yyabW0QQUcBUT9CBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2Y2U2MzdkNDdiNzgwMDRkMGNjZmFlMzcxZTY4MTg3Njhh
YzNmYTUwHhcNMjYwMzAxMTkwMDU0WhcNMjYwMzAyMTkwMDU0WjAzMTEwLwYDVQQD
EyhjNmJmNzBjZjQ1ZjMyNmUwNzgzODlhNGQ1MzcxMDExMTEzMjVmOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndvTumZPzqkI22YMfW9JbmjnRBQn
5Yk4f8HqlW8UGkDhyqFfqGS0bsOw6jCCDwWdPtPZjtFcubA1PY/tEVVXCANxBkWL
UJ8bZUY3r2VEiErn4jehZkTIDaGkrZTk5yUqGPjNpNeqKW+inYRZ2EhhHZ3y8nDV
PMGW6lEFYWl2Ca9ia2PqYwvm7B5+jAaD2OKs1ZzwoPzKjAxxd94Gxw01/o7JOjg1
eDJjcZ5PFAblfmgByOTfmuBlAU0/21pMU6wNCly4MMNAiRbSi8gO4S392/xwYvjg
Xxs9Puqz/EOv/MqzJu001gEpjTxDnd2HVjTvCGMlSo/bjlxIklmNuXxKCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa/cM9F8ybgeDiaTVNxARETJfm7MB8GA1UdIwQY
MBaAFHbOY31Ht4AE0Mz643HmgYdorD+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYt
ODQwODgxYTRkMzBkLzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYtODQwODgxYTRkMzBk
LzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkqgUBzg
MDtGwz7qNNh6Kf2sK/BYX7AVqv7KZOp/8euHPXoP4l8bNzXXo6NvyEmmV8TKDIXk
KRevf9E8G29aOwvhDRyN/Y8WZSOP9nrhQCXocNnmIUe4I1iFifZ+m/NAV4n5KzN/
CDl61+7mIsMFFyUxRYeFfih6Q0SgPd+Q2m3v7UfvB0cUnHEFKcLY0FUgIMfV7rtD
PMVQC5tD0QLK6dFDWo4M1eyCr9ePT9q/wW2TMT13X+R8rV7FcheJcE+l/4Gc4LW/
gOzd4szsx1bCDHesl+Zz0bgudR1U1vIMesPoHVVems8ZiRdsNTVWV4Qgr0pNsDfN
7/pkb1WllHP/ng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:24 2026 by rpki-client