Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: e40BT7TSTsQ+walgmhvH5T0xpChEwwbuOUw996l9w9Q=
Subject key identifier: CA:85:CE:1F:26:48:8F:D4:62:B4:3A:0D:BC:6A:C6:71:61:C4:95:54
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 019CAA593C857DF8D3C1D5FD57CB8AE2CD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:40 +0000
Manifest this update: Sun 01 Mar 2026 17:01:40 +0000
Manifest next update: Mon 02 Mar 2026 17:01:40 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: 5kgTSp9aJyRFB2AuH46fhpXG0bfovcBWRrwXCsqkRvg=)
2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:3c:85:7d:f8:d3:c1:d5:fd:57:cb:8a:e2:cd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Mar 1 17:01:40 2026 GMT
Not After : Mar 2 17:01:40 2026 GMT
Subject: CN=ca85ce1f26488fd462b43a0dbc6ac67161c49554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:bd:4b:7b:bc:e7:8e:3a:fc:03:bd:49:43:
f3:e9:65:f0:fa:94:cc:e7:40:c4:c8:a4:27:e6:ff:
81:08:e1:a1:98:af:05:f7:22:29:a8:4a:ad:81:d1:
38:e0:b2:76:3e:ed:bf:ff:47:f5:23:6c:6b:68:8a:
b7:4e:e0:7d:86:09:a2:f4:29:e4:db:c9:c4:a8:fe:
eb:9e:b7:49:2d:1a:91:29:2a:b6:67:20:84:76:fe:
0a:b6:19:c4:14:40:19:2b:e4:ef:a9:18:30:57:29:
fb:89:0d:1a:da:5c:a7:4b:63:fd:9f:ca:1d:56:30:
90:53:75:aa:98:90:97:26:17:f9:70:eb:f6:e4:7b:
10:70:c9:a2:87:74:70:e9:06:ca:fe:73:9c:46:43:
f4:0c:18:5c:ec:64:8e:a0:c7:6d:22:4d:65:fb:58:
1b:bd:68:61:f9:79:75:15:b8:79:d3:60:fd:93:5d:
c1:fd:ff:7c:21:55:73:d7:ab:bb:f0:3e:0f:c7:fd:
48:55:a3:6b:fd:15:df:5d:75:38:07:c0:67:d8:4b:
61:ec:20:22:18:bb:70:45:94:09:20:d7:8b:e9:ba:
f8:d7:f0:4b:9a:df:29:aa:f1:88:bd:58:d5:e5:66:
e5:89:7c:0d:33:f9:3b:99:77:48:13:83:11:81:36:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:CE:1F:26:48:8F:D4:62:B4:3A:0D:BC:6A:C6:71:61:C4:95:54
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ba:f9:41:2a:d9:94:d1:46:7f:73:3e:9b:7b:ec:a6:81:3c:
d6:5c:70:f9:b7:2f:87:5b:ad:4c:73:1d:bb:59:41:e9:51:d3:
9a:30:45:b5:11:d7:a4:00:1b:11:b9:a2:b0:c6:0a:9b:1c:f9:
87:0a:f8:f0:92:1d:c4:38:02:b1:2e:95:0c:76:17:df:2f:b8:
57:17:d0:f7:67:3b:e4:fa:f9:c7:56:c1:bf:e3:2b:35:03:34:
5c:74:52:9e:b2:2d:9d:48:9c:49:7d:26:b3:07:6f:a6:ed:c2:
aa:9d:a1:70:27:37:96:78:d9:9f:92:a5:98:8d:eb:d6:ca:63:
92:bb:1b:b7:87:00:9a:42:71:a5:b6:3c:1d:4d:81:55:07:c9:
10:35:80:87:d7:9a:de:a7:d3:9e:5c:52:c7:b9:05:ad:71:30:
bb:54:cb:6c:17:fb:02:7a:a0:67:3f:f1:c4:69:c0:55:c8:f0:
d2:b0:e2:d5:36:cb:1a:37:5c:54:f5:2c:28:2b:08:fa:1f:38:
5c:8b:34:03:ee:46:c8:f6:e5:4e:f5:84:84:7f:9e:36:17:5d:
71:d1:33:86:7e:7c:7d:15:81:6b:0b:eb:78:45:8e:9a:2d:76:
7f:00:17:7f:43:ea:b4:7f:f2:34:02:38:50:fc:fa:31:e1:aa:
37:9d:dc:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWTyFffjTwdX9V8uK4s1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFlNTE5YzljZTc3NTc1ZDg5ZjA3Y2Y3MThmM2IwY2M4
NmVjNTUwHhcNMjYwMzAxMTcwMTQwWhcNMjYwMzAyMTcwMTQwWjAzMTEwLwYDVQQD
EyhjYTg1Y2UxZjI2NDg4ZmQ0NjJiNDNhMGRiYzZhYzY3MTYxYzQ5NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhe9S3u85446/AO9SUPz6WXw+pTM
50DEyKQn5v+BCOGhmK8F9yIpqEqtgdE44LJ2Pu2//0f1I2xraIq3TuB9hgmi9Cnk
28nEqP7rnrdJLRqRKSq2ZyCEdv4KthnEFEAZK+TvqRgwVyn7iQ0a2lynS2P9n8od
VjCQU3WqmJCXJhf5cOv25HsQcMmih3Rw6QbK/nOcRkP0DBhc7GSOoMdtIk1l+1gb
vWhh+Xl1Fbh502D9k13B/f98IVVz16u78D4Px/1IVaNr/RXfXXU4B8Bn2Eth7CAi
GLtwRZQJINeL6br41/BLmt8pqvGIvVjV5WbliXwNM/k7mXdIE4MRgTYf2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqFzh8mSI/UYrQ6DbxqxnFhxJVUMB8GA1UdIwQY
MBaAFOWh5RnJzndXXYnwfPcY87DMhuxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUt
MzhjNWIwYzRmMTUyLzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUtMzhjNWIwYzRmMTUy
LzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLr5QSrZ
lNFGf3M+m3vspoE81lxw+bcvh1utTHMdu1lB6VHTmjBFtRHXpAAbEbmisMYKmxz5
hwr48JIdxDgCsS6VDHYX3y+4VxfQ92c75Pr5x1bBv+MrNQM0XHRSnrItnUicSX0m
swdvpu3Cqp2hcCc3lnjZn5KlmI3r1spjkrsbt4cAmkJxpbY8HU2BVQfJEDWAh9ea
3qfTnlxSx7kFrXEwu1TLbBf7AnqgZz/xxGnAVcjw0rDi1TbLGjdcVPUsKCsI+h84
XIs0A+5GyPblTvWEhH+eNhddcdEzhn58fRWBawvreEWOmi12fwAXf0PqtH/yNAI4
UPz6MeGqN53ceg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:59 2026 by rpki-client