Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File: 53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier: LY7WbzWIUMcb/Ac4nMOyw5dVzxbeHKXktiiWAG69N4U=
Subject key identifier: CB:BA:84:5B:6A:CF:B2:23:29:07:76:AB:FA:C8:5F:64:D6:56:DC:C1
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer: /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial: 019CABD9CCAFDA668E7031D805CBD1164512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number: 045A
Signing time: Mon 02 Mar 2026 00:01:43 +0000
Manifest this update: Mon 02 Mar 2026 00:01:43 +0000
Manifest next update: Tue 03 Mar 2026 00:01:43 +0000
Files and hashes: 1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: CvvzQWY6UpJ30o9tzTVbEknGFhs1xT1fs0FtbdjCS6E=)
2: TQEZqwqBvL5LSKJlBpz9ZlwxI2k.roa (hash: h28Y5SLCkXSu2nNw0njBdHdQWxez9aqEeYAyLE+jLNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cc:af:da:66:8e:70:31:d8:05:cb:d1:16:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Validity
Not Before: Mar 2 00:01:43 2026 GMT
Not After : Mar 3 00:01:43 2026 GMT
Subject: CN=cbba845b6acfb223290776abfac85f64d656dcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:bd:20:d0:63:8f:8d:4e:bb:42:f6:1e:e2:
78:ae:ef:2e:80:c0:d9:3d:e8:aa:76:e9:16:35:e5:
02:2f:65:2c:d5:19:18:57:bb:cd:5a:bc:8c:58:1b:
8b:3c:f6:f8:07:60:d9:56:a8:e1:83:fd:d7:97:3c:
7a:bc:97:9d:1c:8c:7d:d3:73:4d:9d:bf:57:0b:08:
19:40:8b:98:2c:d2:7f:d7:d4:90:16:24:a6:c2:25:
a4:20:eb:cc:98:73:ba:75:69:8d:28:07:b5:32:0a:
48:f2:d8:8e:00:67:4f:a2:87:16:a8:bc:20:13:bf:
89:56:33:f7:a2:01:bc:da:f7:db:65:f0:c3:de:bf:
dd:dc:12:ab:08:d2:ef:b2:91:af:4b:d3:6b:a8:d9:
3f:4c:81:44:bc:cf:bc:23:20:1f:4a:c4:e2:65:38:
ec:55:27:bc:cc:81:85:8c:99:52:be:42:8c:f1:9f:
67:de:75:62:b4:03:e2:0a:de:36:a4:80:f1:7e:e2:
c1:1e:01:25:c5:62:38:4e:b9:51:cc:61:23:89:75:
95:ca:76:27:c9:71:e5:6c:27:38:fb:62:08:e7:d5:
ed:d4:9e:0a:d0:cd:2e:9e:9b:c2:4c:7c:4f:1b:70:
3b:2b:15:99:37:e5:bf:9d:5b:26:5f:90:2d:06:a7:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:84:5B:6A:CF:B2:23:29:07:76:AB:FA:C8:5F:64:D6:56:DC:C1
X509v3 Authority Key Identifier:
keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d7:f7:63:d4:e9:99:2c:d0:bd:51:3e:a9:4d:a7:ff:46:84:
33:15:7c:e3:1d:f8:03:7e:31:ec:b8:58:e0:82:d2:48:71:ed:
e9:7b:4b:e7:44:37:c4:9b:24:fd:54:9d:1b:fe:e0:bc:13:e1:
10:00:56:72:00:a1:62:c7:52:80:66:45:c9:34:d7:8a:74:c0:
66:9f:80:dd:82:d9:5c:cc:64:23:44:b2:80:4a:62:c8:50:22:
08:78:5e:1d:6d:08:e3:ac:82:02:b2:d9:57:7e:14:bb:d2:15:
7d:d2:9a:25:a6:8b:fa:4a:3f:aa:d6:32:48:72:ee:98:ca:29:
67:52:b3:77:f6:16:39:cf:8f:7d:f2:f9:81:dc:c8:b8:99:fa:
a9:92:0e:a4:d1:19:8f:48:20:76:aa:ac:0e:e8:10:c9:cc:47:
8b:09:e8:bd:82:41:75:cc:56:a1:c8:03:df:02:ed:10:f2:7f:
fa:e0:88:67:c3:ce:6c:93:3c:cd:81:64:43:ee:ef:f4:9c:36:
c5:47:56:28:5c:71:fa:8f:40:58:ce:c8:3e:4a:50:25:10:2a:
db:82:25:68:ec:d8:b8:8c:8f:c5:94:e1:82:bd:e1:a6:88:15:
82:0a:64:bd:37:ac:6b:31:f0:64:eb:ca:5a:5f:12:0c:13:ba:
a8:34:a1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cyv2maOcDHYBcvRFkUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzZjNTE5ODBjNzUxZWE1ZTMxZGRkYWM4ZWY2MWZiNTZj
OTcwMGYwHhcNMjYwMzAyMDAwMTQzWhcNMjYwMzAzMDAwMTQzWjAzMTEwLwYDVQQD
EyhjYmJhODQ1YjZhY2ZiMjIzMjkwNzc2YWJmYWM4NWY2NGQ2NTZkY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cG9INBjj41Ou0L2HuJ4ru8ugMDZ
PeiqdukWNeUCL2Us1RkYV7vNWryMWBuLPPb4B2DZVqjhg/3Xlzx6vJedHIx903NN
nb9XCwgZQIuYLNJ/19SQFiSmwiWkIOvMmHO6dWmNKAe1MgpI8tiOAGdPoocWqLwg
E7+JVjP3ogG82vfbZfDD3r/d3BKrCNLvspGvS9NrqNk/TIFEvM+8IyAfSsTiZTjs
VSe8zIGFjJlSvkKM8Z9n3nVitAPiCt42pIDxfuLBHgElxWI4TrlRzGEjiXWVynYn
yXHlbCc4+2II59Xt1J4K0M0unpvCTHxPG3A7KxWZN+W/nVsmX5AtBqcyBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu6hFtqz7IjKQd2q/rIX2TWVtzBMB8GA1UdIwQY
MBaAFOd2xRmAx1HqXjHd2sjvYftWyXAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80NWFkZGUtMjdiNS00ZDk5LTkzMTkt
ZDdjMDA3NTBlZDk0LzEvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80NWFkZGUtMjdiNS00ZDk5LTkzMTktZDdjMDA3NTBlZDk0
LzEvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdf3Y9Tp
mSzQvVE+qU2n/0aEMxV84x34A34x7LhY4ILSSHHt6XtL50Q3xJsk/VSdG/7gvBPh
EABWcgChYsdSgGZFyTTXinTAZp+A3YLZXMxkI0SygEpiyFAiCHheHW0I46yCArLZ
V34Uu9IVfdKaJaaL+ko/qtYySHLumMopZ1Kzd/YWOc+PffL5gdzIuJn6qZIOpNEZ
j0ggdqqsDugQycxHiwnovYJBdcxWocgD3wLtEPJ/+uCIZ8PObJM8zYFkQ+7v9Jw2
xUdWKFxx+o9AWM7IPkpQJRAq24IlaOzYuIyPxZThgr3hpogVggpkvTesazHwZOvK
Wl8SDBO6qDSh+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:25 2026 by rpki-client