Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: bK9F7c4QvYFEvYqY1thOD+HTMTsO9Pm51etJxGlYtGU=
Subject key identifier: A5:39:F3:5E:DE:F8:B5:FF:54:94:BB:6C:24:D8:0A:56:68:65:CE:F5
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019CAAC6751A4A3402D0A5B6BB5B4B7532DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0B5E
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: P3Pgo+uy96wTAyeeRpvwyYwIBHQNXx+31il8ewAEsSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:75:1a:4a:34:02:d0:a5:b6:bb:5b:4b:75:32:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=a539f35edef8b5ff5494bb6c24d80a566865cef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:09:4d:a1:52:20:eb:91:c4:f1:cc:c8:df:
03:d3:20:6d:3d:c9:5a:cf:80:6a:85:16:26:77:7f:
4b:c1:91:a1:7b:6b:b3:ea:ff:66:68:22:f9:93:4e:
63:40:5b:0f:58:77:cc:53:68:07:48:c7:cc:3a:1e:
28:8a:f5:54:9b:ee:88:77:36:4e:e2:4f:c2:2d:80:
da:b7:c3:fa:ab:e6:33:a8:2d:12:8e:5d:50:69:48:
31:92:6b:99:73:49:9f:4a:90:1b:0d:9e:c5:fc:e1:
98:4f:ec:27:6c:ae:f0:fd:18:ff:22:60:54:1f:4a:
8a:9b:3d:7d:7f:2d:ce:93:d5:e4:06:31:f2:25:77:
05:1e:88:20:5b:31:66:fc:27:42:61:7e:4e:46:b5:
81:ea:94:09:b8:17:c0:2a:40:06:13:2e:da:e6:ca:
2f:c6:cf:a4:b4:02:d4:27:04:35:08:0b:dd:f7:16:
90:c9:f1:1e:8e:08:4b:82:32:c9:66:3f:4a:60:da:
8c:d8:2f:81:69:40:35:31:c1:62:f6:4b:45:7c:78:
d4:c5:90:b7:fb:a0:f4:3c:5d:95:bb:1a:3a:f9:41:
7e:1a:34:04:cc:bb:ec:aa:7e:6c:34:5d:d6:8c:6f:
2d:f6:09:de:21:1c:89:38:0b:4f:15:46:f3:aa:b7:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:F3:5E:DE:F8:B5:FF:54:94:BB:6C:24:D8:0A:56:68:65:CE:F5
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:e2:04:e6:33:5f:e6:5e:de:a2:87:84:c2:bc:82:93:89:
76:27:89:75:33:5d:9f:be:e5:88:24:c6:bd:e9:ea:e0:2a:e3:
62:56:1b:0b:45:dd:9d:90:40:3f:34:6c:75:46:91:d6:33:26:
b1:84:51:4c:27:ef:d6:b2:66:71:1a:80:07:54:cc:98:3e:f1:
12:55:ed:e7:9f:51:4c:a5:06:cc:4c:af:1e:02:ca:4e:37:47:
ea:1f:96:76:2d:2e:a9:b7:cc:20:31:0a:82:47:24:5f:77:ee:
ba:32:70:fb:88:ed:54:44:af:b1:20:73:5d:d1:57:5a:f6:c5:
e5:12:46:99:9d:4a:83:4b:1b:69:4b:54:3f:09:30:0c:37:f9:
97:25:7e:8c:11:86:58:07:ae:cb:b2:5a:26:65:99:34:ff:1b:
7b:c6:9f:89:71:c7:ec:eb:0f:f9:de:4c:82:53:03:db:27:2c:
02:a2:1f:0c:aa:86:8b:23:6d:60:50:95:60:b0:a4:0c:72:5b:
43:ba:d9:fe:06:82:22:fa:bb:70:53:28:46:af:fd:80:13:e6:
30:fc:e3:f4:ea:4a:2f:b2:9e:e8:9f:e9:38:62:5d:81:43:da:
c1:fd:de:48:ac:0e:4d:c5:9e:c5:6c:30:a7:ed:47:41:fa:06:
5a:f3:77:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxnUaSjQC0KW2u1tLdTLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGIzOTdkYzc2NDhmMGZkMzNjNjMxZjM1Y2MyMDc0ZTRl
ZTMzMmUwHhcNMjYwMzAxMTkwMDU4WhcNMjYwMzAyMTkwMDU4WjAzMTEwLwYDVQQD
EyhhNTM5ZjM1ZWRlZjhiNWZmNTQ5NGJiNmMyNGQ4MGE1NjY4NjVjZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wAJTaFSIOuRxPHMyN8D0yBtPcla
z4BqhRYmd39LwZGhe2uz6v9maCL5k05jQFsPWHfMU2gHSMfMOh4oivVUm+6IdzZO
4k/CLYDat8P6q+YzqC0Sjl1QaUgxkmuZc0mfSpAbDZ7F/OGYT+wnbK7w/Rj/ImBU
H0qKmz19fy3Ok9XkBjHyJXcFHoggWzFm/CdCYX5ORrWB6pQJuBfAKkAGEy7a5sov
xs+ktALUJwQ1CAvd9xaQyfEejghLgjLJZj9KYNqM2C+BaUA1McFi9ktFfHjUxZC3
+6D0PF2Vuxo6+UF+GjQEzLvsqn5sNF3WjG8t9gneIRyJOAtPFUbzqrdCdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU5817e+LX/VJS7bCTYClZoZc71MB8GA1UdIwQY
MBaAFIXbOX3HZI8P0zxjHzXMIHTk7jMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2Yt
NGVkMWQwNzViNjM3LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2YtNGVkMWQwNzViNjM3
LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1niBOYz
X+Ze3qKHhMK8gpOJdieJdTNdn77liCTGvenq4CrjYlYbC0XdnZBAPzRsdUaR1jMm
sYRRTCfv1rJmcRqAB1TMmD7xElXt559RTKUGzEyvHgLKTjdH6h+Wdi0uqbfMIDEK
gkckX3fuujJw+4jtVESvsSBzXdFXWvbF5RJGmZ1Kg0sbaUtUPwkwDDf5lyV+jBGG
WAeuy7JaJmWZNP8be8afiXHH7OsP+d5MglMD2ycsAqIfDKqGiyNtYFCVYLCkDHJb
Q7rZ/gaCIvq7cFMoRq/9gBPmMPzj9OpKL7Ke6J/pOGJdgUPawf3eSKwOTcWexWww
p+1HQfoGWvN3WQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:29 2026 by rpki-client