Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: T1dfKkaU9Pal7QYNVrNvzTzQoGv5Um+hkDV4CqZuFjg=
Subject key identifier: 23:99:63:37:C5:45:7D:B7:1D:3C:77:F8:94:FA:76:C5:EA:8B:9F:6D
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 019CAB6AD5A284D8FAFA744503888D2011FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: cB1Ccf9OJkkC2vdMyFeZEoO/bvcy5ZuClXJD0DQJx8g=)
2: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (hash: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d5:a2:84:d8:fa:fa:74:45:03:88:8d:20:11:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=23996337c5457db71d3c77f894fa76c5ea8b9f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:6e:57:2e:ea:88:02:e1:1a:ea:ad:77:e2:
07:a3:3e:ac:d2:6b:45:35:7f:a1:fa:69:d2:07:ce:
94:17:c8:1f:b8:df:52:b7:0a:71:9f:e9:85:de:7d:
ed:8d:61:2e:69:00:5b:8c:b0:64:48:1a:69:2f:8b:
b7:8c:c9:c6:9b:e9:cf:69:a1:01:74:14:a8:86:d7:
89:2c:e6:03:1c:2c:74:f9:0a:b4:df:95:d3:9e:a7:
05:fb:56:61:e5:5b:25:1a:86:68:df:cf:84:4b:f9:
24:d7:a6:f1:6b:8c:04:1d:e8:f6:be:e9:9a:49:71:
ea:74:81:3f:64:5b:22:8e:60:5f:5d:c4:b4:f1:6c:
67:97:5e:e5:dc:11:36:db:f0:5c:d5:2e:c6:a3:6c:
01:69:3e:cc:4d:b7:c6:0b:fe:be:0c:be:09:2a:d1:
50:35:ac:f2:db:a5:04:2e:25:19:3b:ac:42:ab:8a:
d8:bf:bd:35:26:58:fe:bd:9b:00:c3:af:ec:b4:73:
4b:4b:f9:31:97:f6:4e:72:fe:d7:bc:dd:73:16:10:
dd:02:49:7e:a7:17:f3:7b:16:85:d8:8c:df:50:2f:
4f:c5:e8:3f:92:9c:4a:fa:3c:ec:82:0f:82:b9:af:
d5:c2:59:d3:95:d2:d7:8f:49:b3:d8:e2:49:37:82:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:99:63:37:C5:45:7D:B7:1D:3C:77:F8:94:FA:76:C5:EA:8B:9F:6D
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ae:fe:30:81:a7:6b:0d:39:29:d1:d4:33:72:d6:d2:0f:82:
e9:da:d9:ed:9d:5b:8c:78:c6:64:e3:ce:16:6d:63:5c:24:09:
df:6a:73:ce:c4:ab:15:06:99:fa:ff:4a:34:c3:37:5a:68:22:
96:27:04:d9:e3:27:5b:01:57:2d:45:97:a4:0e:21:72:c7:37:
32:9b:df:b4:49:e9:3e:ce:ea:7b:bc:c0:11:89:07:6f:47:7b:
f6:eb:1a:28:d5:aa:03:f4:43:4b:37:0d:da:22:2d:8f:cd:1f:
d3:0d:a7:f4:e8:f6:5e:b3:7e:82:6a:70:df:ea:5a:18:30:86:
26:a6:70:ac:aa:b1:6c:3d:8f:38:fe:18:b6:3d:69:04:0b:c9:
fe:73:bf:bf:b6:7e:c8:f7:98:14:86:2a:cf:1f:34:eb:78:72:
1b:e6:a1:84:a5:a4:91:e1:43:d5:97:28:44:5b:38:1f:e9:01:
5e:14:9d:47:18:f6:16:2e:28:21:b3:9d:e9:cc:0c:a7:a1:1f:
9d:d3:f9:c4:64:cf:e6:db:e2:47:b9:b5:09:08:5d:12:a8:1e:
80:75:92:57:01:8c:fd:68:2b:b1:64:a5:ab:17:3a:56:f8:6d:
a6:15:09:f1:15:db:d6:1a:2c:b8:9d:95:7c:5a:b9:8c:24:e9:
75:bd:5a:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyratWihNj6+nRFA4iNIBH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OWM5MmMzYjllZTYwYmEwMTNkOTQxODIyMDQyZjI1MDA0
Yzk1ZWMwHhcNMjYwMzAxMjIwMDMxWhcNMjYwMzAyMjIwMDMxWjAzMTEwLwYDVQQD
EygyMzk5NjMzN2M1NDU3ZGI3MWQzYzc3Zjg5NGZhNzZjNWVhOGI5ZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaVuVy7qiALhGuqtd+IHoz6s0mtF
NX+h+mnSB86UF8gfuN9Stwpxn+mF3n3tjWEuaQBbjLBkSBppL4u3jMnGm+nPaaEB
dBSohteJLOYDHCx0+Qq035XTnqcF+1Zh5VslGoZo38+ES/kk16bxa4wEHej2vuma
SXHqdIE/ZFsijmBfXcS08Wxnl17l3BE22/Bc1S7Go2wBaT7MTbfGC/6+DL4JKtFQ
Nazy26UELiUZO6xCq4rYv701Jlj+vZsAw6/stHNLS/kxl/ZOcv7XvN1zFhDdAkl+
pxfzexaF2IzfUC9Pxeg/kpxK+jzsgg+Cua/VwlnTldLXj0mz2OJJN4JxSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOZYzfFRX23HTx3+JT6dsXqi59tMB8GA1UdIwQY
MBaAFOacksO57mC6AT2UGCIELyUATJXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEt
OTEzNzEwM2M5M2VmLzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEtOTEzNzEwM2M5M2Vm
LzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeq7+MIGn
aw05KdHUM3LW0g+C6drZ7Z1bjHjGZOPOFm1jXCQJ32pzzsSrFQaZ+v9KNMM3Wmgi
licE2eMnWwFXLUWXpA4hcsc3MpvftEnpPs7qe7zAEYkHb0d79usaKNWqA/RDSzcN
2iItj80f0w2n9Oj2XrN+gmpw3+paGDCGJqZwrKqxbD2POP4Ytj1pBAvJ/nO/v7Z+
yPeYFIYqzx8063hyG+ahhKWkkeFD1ZcoRFs4H+kBXhSdRxj2Fi4oIbOd6cwMp6Ef
ndP5xGTP5tviR7m1CQhdEqgegHWSVwGM/WgrsWSlqxc6VvhtphUJ8RXb1hosuJ2V
fFq5jCTpdb1aFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:59 2026 by rpki-client