Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: H8uXdn2ncHQ7IY01uUog5kZZT05hERpWXSxgUaryJ/c=
Subject key identifier: 65:72:9C:AB:71:41:2A:0A:64:C5:ED:5E:BE:EF:03:18:1E:99:5A:27
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019EC06DBFB3C515D3285321DB174E0548DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 10:01:18 +0000
Manifest this update: Sat 13 Jun 2026 10:01:18 +0000
Manifest next update: Sun 14 Jun 2026 10:01:18 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: /GFYtLsm+jIxMVh8jWP3ErODNZ05fk3kAYkw7sfEzSY=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:bf:b3:c5:15:d3:28:53:21:db:17:4e:05:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jun 13 10:01:18 2026 GMT
Not After : Jun 14 10:01:18 2026 GMT
Subject: CN=65729cab71412a0a64c5ed5ebeef03181e995a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:3d:ee:f9:3a:f5:28:42:98:db:44:b5:ae:
71:12:52:96:16:e6:23:93:15:0f:4e:92:4d:cc:b0:
30:27:09:77:75:2f:01:9c:ae:39:ae:83:bf:20:f4:
99:62:9d:0d:99:99:72:74:ca:21:8f:83:f4:92:ce:
c4:bf:49:da:a0:58:06:17:f1:8f:9b:0f:00:b1:c0:
a7:56:8c:54:0a:83:72:5a:27:5c:77:d6:19:84:6f:
d1:04:1e:87:1e:35:cc:de:82:09:e7:8b:71:f3:60:
26:03:6e:41:19:03:0c:03:bc:66:78:72:fb:cd:59:
74:a2:ed:75:06:4d:de:1d:f8:80:20:8d:5d:29:d3:
f3:6f:cd:5f:35:9d:d7:50:d4:1b:b1:1a:5a:54:20:
48:74:0b:21:c1:d9:9c:f7:78:b0:38:f9:60:5a:78:
17:9e:41:29:fb:d4:4d:6e:c3:3f:a3:02:13:a5:bf:
08:d5:6e:f5:40:79:21:9c:c4:88:27:4b:80:0f:bb:
bf:e4:c8:36:0b:b3:a3:15:0d:46:82:3e:4f:99:c4:
dd:45:a5:cf:d3:b4:f6:48:9b:f8:dc:27:f5:8d:91:
dd:0f:08:16:f9:85:5a:9a:64:13:ca:c6:68:e9:28:
95:ae:6c:a6:18:b6:54:91:33:e1:b1:7f:4d:d7:98:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:72:9C:AB:71:41:2A:0A:64:C5:ED:5E:BE:EF:03:18:1E:99:5A:27
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:88:b8:cf:38:a8:8d:f4:83:15:8c:ca:39:23:59:23:1f:53:
6a:9b:a7:dc:a0:52:8c:1c:a0:cb:2f:27:4e:93:08:10:e0:5f:
d8:e5:c6:a7:ff:f3:20:df:09:9b:d7:6d:0e:8b:cc:ef:13:bf:
87:d4:10:f8:51:b3:bd:5e:f6:8a:10:3b:aa:49:9f:4d:92:8a:
bc:13:26:bc:c4:ff:ba:07:52:21:2f:d1:2d:0d:1f:6c:34:c5:
bf:0b:b8:68:d3:f9:44:a9:12:18:7e:75:55:60:bb:ec:44:9f:
75:31:0a:cf:a8:e0:fa:01:db:0b:94:64:10:78:d5:44:39:d0:
66:90:f5:2e:a9:18:02:7c:56:95:d8:c9:4c:74:fc:f7:79:1f:
b6:05:23:c1:bd:08:2b:a3:39:67:36:f6:9e:34:9f:a3:5b:7e:
7e:2a:5b:ac:e5:67:e3:37:41:e8:60:29:ad:2d:ba:be:97:38:
3b:09:be:42:d4:5c:77:41:d5:15:0c:27:c2:52:5e:81:e6:41:
85:78:3d:76:0c:c4:b4:35:c6:fd:c6:a2:c2:ea:90:dc:6b:6a:
f6:16:6d:4a:8d:03:c5:69:7f:bb:84:73:e7:f2:a9:c5:18:31:
46:36:f5:9d:ae:a3:a8:f1:1a:e6:03:b1:ce:3c:1b:73:27:39:
83:27:bd:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Abb+zxRXTKFMh2xdOBUjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3
Y2I3MmMwHhcNMjYwNjEzMTAwMTE4WhcNMjYwNjE0MTAwMTE4WjAzMTEwLwYDVQQD
Eyg2NTcyOWNhYjcxNDEyYTBhNjRjNWVkNWViZWVmMDMxODFlOTk1YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zY97vk69ShCmNtEta5xElKWFuYj
kxUPTpJNzLAwJwl3dS8BnK45roO/IPSZYp0NmZlydMohj4P0ks7Ev0naoFgGF/GP
mw8AscCnVoxUCoNyWidcd9YZhG/RBB6HHjXM3oIJ54tx82AmA25BGQMMA7xmeHL7
zVl0ou11Bk3eHfiAII1dKdPzb81fNZ3XUNQbsRpaVCBIdAshwdmc93iwOPlgWngX
nkEp+9RNbsM/owITpb8I1W71QHkhnMSIJ0uAD7u/5Mg2C7OjFQ1Ggj5PmcTdRaXP
07T2SJv43Cf1jZHdDwgW+YVammQTysZo6SiVrmymGLZUkTPhsX9N15i7sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVynKtxQSoKZMXtXr7vAxgemVonMB8GA1UdIwQY
MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt
MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi
LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4i4zzio
jfSDFYzKOSNZIx9Tapun3KBSjBygyy8nTpMIEOBf2OXGp//zIN8Jm9dtDovM7xO/
h9QQ+FGzvV72ihA7qkmfTZKKvBMmvMT/ugdSIS/RLQ0fbDTFvwu4aNP5RKkSGH51
VWC77ESfdTEKz6jg+gHbC5RkEHjVRDnQZpD1LqkYAnxWldjJTHT893kftgUjwb0I
K6M5Zzb2njSfo1t+fipbrOVn4zdB6GAprS26vpc4Owm+QtRcd0HVFQwnwlJegeZB
hXg9dgzEtDXG/caiwuqQ3Gtq9hZtSo0DxWl/u4Rz5/KpxRgxRjb1na6jqPEa5gOx
zjwbcyc5gye9oA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:18 2026 by rpki-client