Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: ArCtVo7BNossKIt6Jj5RJWQUO3UnNN2iAphD/NwZMUE=
Subject key identifier: C4:E7:95:32:39:72:2D:BD:26:F3:8B:86:D4:57:8B:A9:45:C9:EA:CF
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 019CAC0FE5B33195DAB6495D478402D81F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 142D
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: gygdbPmhqxSRd771dWWF2eIk9JugCpAf6DOcddcxgOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e5:b3:31:95:da:b6:49:5d:47:84:02:d8:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=c4e7953239722dbd26f38b86d4578ba945c9eacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:96:5d:29:a9:7f:f9:24:0c:27:b5:bc:91:
09:c3:0a:1d:bf:8e:73:25:71:ef:96:44:5c:0e:8c:
29:cb:80:1c:46:2b:1d:ce:00:2f:ef:45:2f:d8:88:
89:8a:00:10:d4:28:3a:76:07:a1:03:f2:86:26:65:
53:eb:5f:a9:f0:6f:86:e2:5f:ce:28:a7:40:c9:6f:
a8:03:97:f3:f3:64:22:cb:c4:dd:47:55:f6:9d:15:
43:62:28:fa:4d:c6:89:66:b1:eb:3f:84:fd:32:6a:
5d:73:a9:35:4d:da:c0:9c:2e:18:d8:7d:42:c4:46:
41:5f:e1:00:23:b7:3f:06:ee:63:2b:94:ec:7f:5e:
02:50:8c:e1:ff:0d:73:80:b3:f7:5d:95:03:d6:d1:
eb:45:76:9a:e6:f2:3c:4e:09:13:25:95:8f:1e:16:
6d:c2:45:c6:eb:1f:61:e9:84:12:6c:39:37:dd:9d:
f5:f6:1c:3e:c7:af:3d:f9:a8:59:c1:d9:84:bf:cc:
aa:19:71:6d:b7:52:e0:a5:07:c8:73:20:74:d3:9e:
ad:98:f0:1f:fb:79:57:27:a9:02:38:5e:12:a7:d6:
b4:0e:94:3a:69:3c:8d:25:72:55:a2:02:cf:b4:8f:
14:49:22:2b:48:dc:43:fb:e6:af:82:3e:8b:33:1b:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E7:95:32:39:72:2D:BD:26:F3:8B:86:D4:57:8B:A9:45:C9:EA:CF
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:de:fb:00:d3:1e:07:eb:8e:83:2b:58:d1:2a:36:85:a4:07:
49:7d:8c:a5:93:9d:3c:e5:f1:9b:61:f1:ec:29:3a:f6:38:8e:
63:8c:8e:52:14:da:0e:eb:8f:8e:47:73:c4:c7:ac:52:58:f5:
2b:5c:84:b8:1a:fc:81:31:ab:73:f4:d1:f4:2a:a2:c5:f2:1f:
fe:18:32:4c:df:15:ed:bf:c9:c6:71:83:1b:d1:16:b1:47:f0:
fb:50:4a:fb:df:82:e1:10:2c:32:4f:f4:20:61:d2:fb:7f:02:
14:6a:94:c6:11:4c:0a:92:67:81:e5:64:d8:36:ee:1f:cd:52:
bd:ef:2a:9a:07:c2:6b:a3:5b:b3:b9:d7:98:ef:c5:f4:21:14:
17:00:8a:a5:01:a7:36:9e:b4:89:2a:d9:45:6c:dc:de:63:02:
fb:1b:d6:4c:81:bc:fe:49:9f:4c:1e:59:e1:70:8c:dc:23:c2:
85:2f:65:d9:9c:d5:32:dd:0f:28:92:16:5f:93:5d:aa:63:da:
20:d5:87:ab:dd:48:85:21:48:08:a9:9c:d1:8b:b8:90:d3:43:
99:98:1d:2c:19:08:01:eb:e9:76:b7:52:aa:f0:79:4f:3f:4c:
ce:12:a6:f5:e2:09:c9:db:c2:d3:26:e0:94:9e:29:bf:a9:20:
77:c9:80:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+WzMZXatkldR4QC2B+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw
MGIyZDIwHhcNMjYwMzAyMDEwMDQ4WhcNMjYwMzAzMDEwMDQ4WjAzMTEwLwYDVQQD
EyhjNGU3OTUzMjM5NzIyZGJkMjZmMzhiODZkNDU3OGJhOTQ1YzllYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroCWXSmpf/kkDCe1vJEJwwodv45z
JXHvlkRcDowpy4AcRisdzgAv70Uv2IiJigAQ1Cg6dgehA/KGJmVT61+p8G+G4l/O
KKdAyW+oA5fz82Qiy8TdR1X2nRVDYij6TcaJZrHrP4T9Mmpdc6k1TdrAnC4Y2H1C
xEZBX+EAI7c/Bu5jK5Tsf14CUIzh/w1zgLP3XZUD1tHrRXaa5vI8TgkTJZWPHhZt
wkXG6x9h6YQSbDk33Z319hw+x689+ahZwdmEv8yqGXFtt1LgpQfIcyB0056tmPAf
+3lXJ6kCOF4Sp9a0DpQ6aTyNJXJVogLPtI8USSIrSNxD++avgj6LMxsv9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTnlTI5ci29JvOLhtRXi6lFyerPMB8GA1UdIwQY
MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt
ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1
LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUt77ANMe
B+uOgytY0So2haQHSX2MpZOdPOXxm2Hx7Ck69jiOY4yOUhTaDuuPjkdzxMesUlj1
K1yEuBr8gTGrc/TR9CqixfIf/hgyTN8V7b/JxnGDG9EWsUfw+1BK+9+C4RAsMk/0
IGHS+38CFGqUxhFMCpJngeVk2DbuH81Sve8qmgfCa6Nbs7nXmO/F9CEUFwCKpQGn
Np60iSrZRWzc3mMC+xvWTIG8/kmfTB5Z4XCM3CPChS9l2ZzVMt0PKJIWX5NdqmPa
INWHq91IhSFICKmc0Yu4kNNDmZgdLBkIAevpdrdSqvB5Tz9MzhKm9eIJydvC0ybg
lJ4pv6kgd8mAfg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:49 2026 by rpki-client