Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: GwJvSMxLsMH4TXlpqFg6oC1xz1K5WkhXVyEVrPZb4Jc=
Subject key identifier: B3:CD:80:02:E4:43:8D:BF:05:9C:49:F0:A7:4F:D6:19:B8:81:F6:39
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019CA9B3B703F94498F3B2DA13C4DC65EEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 14:00:53 +0000
Manifest this update: Sun 01 Mar 2026 14:00:53 +0000
Manifest next update: Mon 02 Mar 2026 14:00:53 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: q/wP7yiUDVJVMIci3qAXuzCxip2eFsbcSYMjjBRSJaI=)
2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:b7:03:f9:44:98:f3:b2:da:13:c4:dc:65:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Mar 1 14:00:53 2026 GMT
Not After : Mar 2 14:00:53 2026 GMT
Subject: CN=b3cd8002e4438dbf059c49f0a74fd619b881f639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:e7:0e:1f:0c:f1:8c:c9:c4:7b:9c:ec:f4:
62:6e:83:ce:af:e5:10:77:7f:0b:b3:7a:32:74:9e:
2e:3f:b0:6d:48:d1:25:0b:06:05:25:a4:5f:a8:7e:
ed:fa:67:b9:20:31:a4:14:04:99:b7:55:30:bd:f3:
06:df:5f:93:27:2c:cb:96:d5:ab:d5:a6:7d:98:6d:
73:e2:20:46:99:88:88:f3:fd:d8:69:81:71:80:0d:
59:ed:c4:31:17:51:aa:67:fb:08:a0:77:88:92:b6:
b0:8a:b1:e8:42:33:82:7b:1b:dd:af:56:a0:bd:8c:
71:2d:c9:1d:2b:36:c0:2c:22:ee:b4:27:92:ea:b4:
34:c0:e6:5f:eb:81:f5:99:dc:90:64:d8:20:68:2d:
75:9f:42:44:8e:f4:e4:24:03:d5:df:a5:ad:a6:24:
d8:b8:e1:ac:5b:3c:15:75:02:45:46:d5:bd:1a:b4:
ce:e7:67:2c:ef:30:23:9d:96:7c:69:7c:a2:a6:ad:
e4:c2:90:71:80:00:a6:12:37:10:6b:9d:d3:74:92:
25:7c:b1:1e:f3:2e:ae:d7:6e:4c:51:22:9c:06:48:
8d:ef:1b:ac:0d:10:cd:e7:50:95:da:b6:3d:49:4d:
17:7e:5f:e3:af:7b:17:55:d8:71:97:65:55:58:99:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CD:80:02:E4:43:8D:BF:05:9C:49:F0:A7:4F:D6:19:B8:81:F6:39
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:93:33:fa:81:45:f7:f4:85:a9:f6:1b:b6:27:a4:9d:88:2e:
d8:cc:39:c6:30:44:8a:b7:5e:bb:9e:4b:43:6d:7b:d5:20:7f:
04:c9:f4:f1:bc:6a:94:8e:22:cc:b4:9b:b7:27:e4:a0:1d:50:
29:8a:1b:69:09:04:a4:b4:77:bb:92:db:02:10:e6:9b:ff:2d:
0f:48:22:cc:f5:c4:a3:09:f3:6c:3d:67:05:cc:8d:51:dd:0d:
d0:50:0c:80:f1:1d:5c:55:72:63:e6:03:fc:66:9b:67:78:7f:
81:73:79:a3:11:9f:1c:39:ab:54:3a:1d:06:c3:29:ca:3d:24:
59:48:1c:1a:94:8e:e0:6e:5f:2e:90:57:7e:1c:55:56:61:96:
d3:52:96:c2:e4:bd:40:9f:19:b7:93:04:72:ea:b0:23:d5:fb:
e5:56:ed:01:2a:75:22:aa:bd:e9:76:46:50:f2:62:30:07:40:
09:51:5e:1e:b3:63:0c:66:e6:e4:04:88:cd:07:5c:2f:dd:5c:
f4:90:48:33:49:a5:ec:ca:b6:fa:78:c0:57:4b:a7:66:89:ca:
49:9f:e7:d9:51:3c:34:3f:fd:8c:62:8d:10:24:94:8a:03:73:
48:fa:2d:78:20:d4:3c:3f:af:8a:20:7e:57:14:f6:3d:01:b2:
d6:af:a5:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps7cD+USY87LaE8TcZe74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDRlMjY2ZDRlYjljYzdkZWQyOTJjMTJiMDZiMWNhN2Jj
ZWE3NzgwHhcNMjYwMzAxMTQwMDUzWhcNMjYwMzAyMTQwMDUzWjAzMTEwLwYDVQQD
EyhiM2NkODAwMmU0NDM4ZGJmMDU5YzQ5ZjBhNzRmZDYxOWI4ODFmNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmifnDh8M8YzJxHuc7PRiboPOr+UQ
d38Ls3oydJ4uP7BtSNElCwYFJaRfqH7t+me5IDGkFASZt1UwvfMG31+TJyzLltWr
1aZ9mG1z4iBGmYiI8/3YaYFxgA1Z7cQxF1GqZ/sIoHeIkrawirHoQjOCexvdr1ag
vYxxLckdKzbALCLutCeS6rQ0wOZf64H1mdyQZNggaC11n0JEjvTkJAPV36WtpiTY
uOGsWzwVdQJFRtW9GrTO52cs7zAjnZZ8aXyipq3kwpBxgACmEjcQa53TdJIlfLEe
8y6u125MUSKcBkiN7xusDRDN51CV2rY9SU0Xfl/jr3sXVdhxl2VVWJnZrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPNgALkQ42/BZxJ8KdP1hm4gfY5MB8GA1UdIwQY
MBaAFOVE4mbU65zH3tKSwSsGscp7zqd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2Qt
ODI0NzYwNzE0ZGZiLzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2QtODI0NzYwNzE0ZGZi
LzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZMz+oFF
9/SFqfYbtieknYgu2Mw5xjBEirdeu55LQ2171SB/BMn08bxqlI4izLSbtyfkoB1Q
KYobaQkEpLR3u5LbAhDmm/8tD0gizPXEownzbD1nBcyNUd0N0FAMgPEdXFVyY+YD
/GabZ3h/gXN5oxGfHDmrVDodBsMpyj0kWUgcGpSO4G5fLpBXfhxVVmGW01KWwuS9
QJ8Zt5MEcuqwI9X75VbtASp1Iqq96XZGUPJiMAdACVFeHrNjDGbm5ASIzQdcL91c
9JBIM0ml7Mq2+njAV0unZonKSZ/n2VE8ND/9jGKNECSUigNzSPoteCDUPD+viiB+
VxT2PQGy1q+lZA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:13 2026 by rpki-client