Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier: srySbdv0vIk55Gr6dkg7l5k1O4wm6i87M4RbcZHu5u8=
Subject key identifier: 39:52:E6:9C:5E:B0:2A:0B:1F:C0:00:D5:33:64:73:D4:62:90:E1:2A
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial: 019CAD59DACF41AC50F9DF4D8AC00EED0714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number: 158C
Signing time: Mon 02 Mar 2026 07:01:12 +0000
Manifest this update: Mon 02 Mar 2026 07:01:12 +0000
Manifest next update: Tue 03 Mar 2026 07:01:12 +0000
Files and hashes: 1: 24bqS1nUjEa-SWJ2ZtFx5ElbqB4.roa (hash: aZJOy0CyZGrP4yrwBkGXYusHSlYLrLzIGIdzThr5g3M=)
2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: PdAhTjthaZOpbijoCL0VYKM19M1ylVa5IpHyNT9TETA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:da:cf:41:ac:50:f9:df:4d:8a:c0:0e:ed:07:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Validity
Not Before: Mar 2 07:01:12 2026 GMT
Not After : Mar 3 07:01:12 2026 GMT
Subject: CN=3952e69c5eb02a0b1fc000d5336473d46290e12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:83:05:f4:f7:3c:63:31:d5:7e:9b:3f:30:
9e:c0:4d:d4:77:72:83:83:9f:1a:e1:a5:0b:7b:0d:
3a:2e:07:52:d6:1a:57:4a:57:c2:9b:69:c5:57:35:
51:ae:3c:8f:0b:22:13:53:94:25:f5:25:42:cf:df:
98:68:e6:73:6e:35:a9:b6:cd:b0:02:8a:3e:a4:30:
54:c8:b5:e5:90:96:6b:2a:bf:9d:8e:88:55:8f:4f:
89:6f:87:38:ca:37:31:56:28:f3:14:c0:58:3e:d9:
56:f6:25:2f:3c:8f:99:d2:d3:22:3c:97:41:de:b1:
be:30:ac:fb:f8:e7:b0:af:bb:ad:c8:da:a4:7a:84:
18:a3:3f:f3:06:a8:c6:62:be:8b:be:ab:aa:a3:6a:
ff:55:33:00:c1:85:21:b5:04:c0:20:ff:50:04:0e:
8a:13:c6:d4:64:ba:36:49:5c:84:23:70:ea:d9:84:
2e:5d:18:3f:27:97:9e:23:19:4e:ce:70:65:50:91:
99:d3:a3:33:75:9f:54:79:87:1f:b9:e8:2d:c8:37:
c5:af:c6:d4:ba:29:3b:93:1b:b7:3b:90:0c:54:26:
ba:f9:2b:21:8a:93:1b:d4:a0:cf:5e:ae:94:c7:17:
fe:35:f6:13:18:53:0f:78:56:4c:de:43:0c:8d:1b:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:52:E6:9C:5E:B0:2A:0B:1F:C0:00:D5:33:64:73:D4:62:90:E1:2A
X509v3 Authority Key Identifier:
keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:e1:ad:cf:97:35:60:9f:75:8b:c2:96:84:6a:0d:be:b2:
25:cb:ae:00:9d:a2:10:95:2f:22:22:79:30:a9:c0:1b:31:3f:
7f:ff:e5:22:c6:4d:3a:92:7a:68:ef:5e:53:7b:e8:51:85:b9:
6c:31:de:15:b8:3b:77:14:66:dd:e2:db:bb:5c:03:3b:ec:df:
8d:5e:0c:99:43:9d:79:c2:94:5a:ca:88:3b:af:f7:20:75:21:
18:d1:86:35:ef:20:05:2b:69:49:6b:13:ca:44:a9:66:95:43:
31:9e:6a:64:0f:61:c0:39:eb:46:24:a7:ba:0a:60:c2:f8:47:
9c:80:40:0e:97:35:ff:de:b9:45:59:77:d8:5b:4d:9c:28:c6:
64:fe:28:30:c0:7d:5b:f0:d4:af:d1:9e:8a:18:42:be:97:0e:
d2:b0:10:4f:c8:92:5f:b5:d9:02:8f:ea:78:30:26:99:59:ce:
b8:ff:85:26:51:e3:d2:63:a2:78:5a:0d:e6:82:42:ec:5c:6a:
ff:86:f8:53:92:e4:08:f1:43:2f:ac:68:c3:bf:08:6c:01:ed:
c4:38:53:4e:17:0e:80:f3:8d:22:31:c3:6f:ea:70:a3:1c:d0:
c8:34:1f:01:c5:36:aa:4e:be:0d:73:3d:3a:02:84:c2:27:17:
db:64:2b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWdrPQaxQ+d9NisAO7QcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjJmOTk3NWE5MWU3MTM3OWRhMTAwZWM4NGJkNDRhMGEy
ODBkOWIwHhcNMjYwMzAyMDcwMTEyWhcNMjYwMzAzMDcwMTEyWjAzMTEwLwYDVQQD
EygzOTUyZTY5YzVlYjAyYTBiMWZjMDAwZDUzMzY0NzNkNDYyOTBlMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkaDBfT3PGMx1X6bPzCewE3Ud3KD
g58a4aULew06LgdS1hpXSlfCm2nFVzVRrjyPCyITU5Ql9SVCz9+YaOZzbjWpts2w
Aoo+pDBUyLXlkJZrKr+djohVj0+Jb4c4yjcxVijzFMBYPtlW9iUvPI+Z0tMiPJdB
3rG+MKz7+Oewr7utyNqkeoQYoz/zBqjGYr6Lvquqo2r/VTMAwYUhtQTAIP9QBA6K
E8bUZLo2SVyEI3Dq2YQuXRg/J5eeIxlOznBlUJGZ06MzdZ9UeYcfuegtyDfFr8bU
uik7kxu3O5AMVCa6+SshipMb1KDPXq6Uxxf+NfYTGFMPeFZM3kMMjRuxbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlS5pxesCoLH8AA1TNkc9RikOEqMB8GA1UdIwQY
MBaAFJqy+ZdakecTedoQDshL1EoKKA2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzkt
MTVmZTA2ZmZmOGJjLzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzktMTVmZTA2ZmZmOGJj
LzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjDhrc+X
NWCfdYvCloRqDb6yJcuuAJ2iEJUvIiJ5MKnAGzE/f//lIsZNOpJ6aO9eU3voUYW5
bDHeFbg7dxRm3eLbu1wDO+zfjV4MmUOdecKUWsqIO6/3IHUhGNGGNe8gBStpSWsT
ykSpZpVDMZ5qZA9hwDnrRiSnugpgwvhHnIBADpc1/965RVl32FtNnCjGZP4oMMB9
W/DUr9GeihhCvpcO0rAQT8iSX7XZAo/qeDAmmVnOuP+FJlHj0mOieFoN5oJC7Fxq
/4b4U5LkCPFDL6xow78IbAHtxDhTThcOgPONIjHDb+pwoxzQyDQfAcU2qk6+DXM9
OgKEwicX22QrfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:22 2026 by rpki-client