Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: HU5Bpy264VTNhahOYRsdIYoKbCcVhnHggCk6YBDHZFQ=
Subject key identifier: D0:18:B4:91:BD:6C:6E:67:1D:BF:CB:0F:51:52:F8:62:E9:E6:55:99
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 019CAA8FC1403CC40E371363EB66962BFEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0E9D
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: AKTzfWKDjPp5FXeDhhr07iIVSSeZBuJH2ck4qAK+fEg=)
2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c1:40:3c:c4:0e:37:13:63:eb:66:96:2b:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=d018b491bd6c6e671dbfcb0f5152f862e9e65599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:7c:22:14:e5:66:99:bd:83:bb:6e:fa:87:
49:7e:17:91:18:e7:9f:32:c6:6a:a0:9d:38:ee:fe:
f2:da:4d:72:48:48:46:43:ce:c8:8b:8f:b6:e0:a9:
ba:83:e0:1f:c8:27:12:6b:22:e5:54:b2:d3:f5:d7:
11:37:c0:95:c5:4a:a9:e1:44:2a:b6:6e:a6:dd:57:
b1:85:23:0a:8d:a3:28:d1:e5:12:a4:88:26:17:f1:
98:fa:c8:4b:04:3a:d5:46:48:40:08:60:c8:5d:1d:
1d:9f:56:43:68:2a:84:12:55:fc:b5:8e:e4:49:ca:
ad:f6:24:18:04:56:a8:6a:82:24:2f:87:18:ec:70:
b0:b0:e4:f4:64:8a:f6:cc:ff:c3:4e:6b:68:29:75:
0a:87:20:5b:13:07:7a:18:52:de:97:48:32:bc:9a:
27:79:a0:02:09:31:9c:55:89:13:4c:3f:c8:da:57:
92:36:04:91:9f:31:b5:4b:f7:6c:78:9d:ff:f1:1f:
6a:2d:99:a0:0c:db:e5:4a:89:fc:6b:6c:25:da:e0:
f4:a5:09:6b:41:05:e6:25:75:3e:05:54:20:26:65:
da:f4:f6:00:84:b5:90:77:07:18:06:99:04:5b:3b:
10:e8:9d:4f:04:68:1c:2d:96:5d:4c:87:9f:77:77:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:B4:91:BD:6C:6E:67:1D:BF:CB:0F:51:52:F8:62:E9:E6:55:99
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:f6:ef:b7:f5:2a:85:73:8d:05:eb:83:74:34:d4:9e:ab:
3a:89:1a:89:de:81:3d:e6:37:f7:d3:37:0c:fc:6c:42:28:d7:
50:24:c0:cd:55:e6:53:c9:cb:07:01:a2:3d:14:b5:27:09:a4:
b0:23:21:fa:9b:c8:60:86:28:6b:56:e4:ad:18:1e:b9:62:12:
74:c6:23:50:ec:fa:08:cf:14:dc:96:39:fd:03:20:34:3c:1a:
54:01:cc:b5:a0:67:83:0c:28:7b:36:83:93:bd:ab:8b:1b:f9:
d7:83:1d:29:df:57:92:df:ee:71:26:84:0b:2c:11:d8:d3:6c:
06:20:87:97:14:f0:44:28:2e:f4:70:ed:aa:27:13:d7:fa:77:
3a:a2:87:b2:b0:16:db:a2:6d:83:0d:e1:9d:66:b7:b5:30:28:
3f:a1:32:df:4d:dc:73:ad:a3:d6:a5:a5:98:79:44:57:49:7a:
e6:c5:9c:c6:4c:3c:ed:0b:8e:4b:8f:cd:2e:89:e9:a4:ef:3b:
de:15:7d:ab:96:c6:89:8a:75:6c:8a:79:a4:e5:ad:10:c5:3d:
80:ee:bb:38:d3:6b:7f:b4:87:9b:4d:a2:32:c9:38:e0:88:3a:
23:e4:c9:7f:88:37:a7:7e:e6:93:aa:a8:1a:fd:51:be:82:48:
bf:95:3a:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj8FAPMQONxNj62aWK/7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy
ZjU3NWUwHhcNMjYwMzAxMTgwMTEzWhcNMjYwMzAyMTgwMTEzWjAzMTEwLwYDVQQD
EyhkMDE4YjQ5MWJkNmM2ZTY3MWRiZmNiMGY1MTUyZjg2MmU5ZTY1NTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiER8IhTlZpm9g7tu+odJfheRGOef
MsZqoJ047v7y2k1ySEhGQ87Ii4+24Km6g+AfyCcSayLlVLLT9dcRN8CVxUqp4UQq
tm6m3VexhSMKjaMo0eUSpIgmF/GY+shLBDrVRkhACGDIXR0dn1ZDaCqEElX8tY7k
Scqt9iQYBFaoaoIkL4cY7HCwsOT0ZIr2zP/DTmtoKXUKhyBbEwd6GFLel0gyvJon
eaACCTGcVYkTTD/I2leSNgSRnzG1S/dseJ3/8R9qLZmgDNvlSon8a2wl2uD0pQlr
QQXmJXU+BVQgJmXa9PYAhLWQdwcYBpkEWzsQ6J1PBGgcLZZdTIefd3djTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAYtJG9bG5nHb/LD1FS+GLp5lWZMB8GA1UdIwQY
MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt
YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj
LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7D277f1
KoVzjQXrg3Q01J6rOokaid6BPeY399M3DPxsQijXUCTAzVXmU8nLBwGiPRS1Jwmk
sCMh+pvIYIYoa1bkrRgeuWISdMYjUOz6CM8U3JY5/QMgNDwaVAHMtaBngwwoezaD
k72rixv514MdKd9Xkt/ucSaECywR2NNsBiCHlxTwRCgu9HDtqicT1/p3OqKHsrAW
26Jtgw3hnWa3tTAoP6Ey303cc62j1qWlmHlEV0l65sWcxkw87QuOS4/NLonppO87
3hV9q5bGiYp1bIp5pOWtEMU9gO67ONNrf7SHm02iMsk44Ig6I+TJf4g3p37mk6qo
Gv1RvoJIv5U6Ig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:27 2026 by rpki-client