Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json)
Hash identifier: m7W8NcVd5pEy9AIEwOGUtRhC04xRZMC9lBw0z6SEF/Y=
Subject key identifier: 21:EE:F4:3C:14:EB:E9:92:BD:1E:0B:A8:C0:DF:61:7E:EE:30:19:B6
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial: 019CAAFD6F5B2CCE52618EADD8E46EB519A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
Manifest number: 14D9
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: HgFja2bLpVL2qd4TnI1Z6oWyNO8.roa (hash: xWIulmmQRVp8Zbt+l6Hy12uHB1PLbHRuuRd4Ash/YeI=)
2: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: YYUn3ZdGySe/c4aKfJdLJHtNKjwR1bax0tEc6tUMnTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6f:5b:2c:ce:52:61:8e:ad:d8:e4:6e:b5:19:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=21eef43c14ebe992bd1e0ba8c0df617eee3019b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:46:1e:8a:8b:b0:05:47:3a:68:e6:d5:45:
24:e1:7a:a5:b7:af:82:fe:9b:c2:e8:52:50:7c:ec:
29:cc:2a:f6:bb:2f:e2:2d:1c:69:c2:f7:27:82:18:
a8:eb:5c:f8:69:52:ca:99:a9:b8:c9:2c:5b:e0:67:
67:b6:dd:a4:16:dc:ff:6b:6f:1e:c9:91:3f:c8:11:
ee:a7:ab:29:97:ca:db:91:95:7b:35:a2:22:03:cc:
57:dc:96:f2:ab:ad:5e:af:53:28:40:19:38:32:f2:
23:95:a9:9e:c3:46:f3:11:c0:0e:e0:81:31:bf:e6:
41:b9:da:35:31:98:16:80:b9:73:06:29:8e:4a:39:
e8:85:c4:e7:0b:55:17:54:21:ae:09:5a:0d:00:d3:
8d:91:85:f7:9b:73:95:32:58:61:83:e9:a9:70:ab:
da:4d:56:7f:de:c9:ff:60:59:83:2f:b5:b4:cd:fd:
48:be:9f:b7:5f:80:b9:3b:77:c1:44:8c:a5:79:61:
ef:66:50:aa:1a:17:bc:d6:59:83:d6:91:6e:3a:a5:
ac:35:a5:b3:c8:01:8c:2f:3e:7a:35:be:cd:be:0b:
ff:42:c5:7e:50:f1:12:ff:b6:ba:64:72:5e:fd:74:
31:b4:7c:13:7e:ef:0e:e9:a5:4a:d3:a3:74:79:c7:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:F4:3C:14:EB:E9:92:BD:1E:0B:A8:C0:DF:61:7E:EE:30:19:B6
X509v3 Authority Key Identifier:
keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:31:32:6b:41:62:5f:5b:cb:42:b9:39:74:ac:2c:75:f2:aa:
c7:96:53:d7:bb:f7:57:23:a2:eb:cf:2e:fd:de:e3:87:2d:3f:
95:86:d0:61:2b:0b:b9:71:05:03:98:70:74:31:b8:da:42:de:
40:b9:ba:04:67:88:ab:01:b4:75:cd:79:5a:40:47:54:83:f3:
8a:8d:9e:f4:3c:ab:fe:7a:a3:f0:d0:36:b7:2e:42:55:15:e6:
48:aa:b1:da:3c:b2:a3:91:86:13:b3:0b:fe:25:4b:a5:75:9e:
af:0b:af:98:f1:80:41:3f:2a:f1:0c:b9:56:30:f1:12:24:b7:
2e:9f:26:7f:72:0b:e0:b4:7e:5e:d0:1b:36:9c:a6:77:1d:67:
81:7c:c5:f0:58:89:7f:06:f5:eb:e0:10:c4:33:01:f1:e1:12:
b7:28:05:bd:8e:c7:28:9c:b2:f2:c5:8b:ca:13:21:5f:78:5f:
98:ee:8b:4d:7b:20:59:e9:37:b9:b4:90:b0:05:f2:a1:13:fb:
98:a7:14:61:3e:ae:19:a9:51:95:67:5d:77:fa:45:26:1d:4a:
9c:63:16:47:82:0d:54:0b:57:c5:c6:7d:7e:11:6f:97:77:b1:
f0:6f:37:a7:e4:d7:96:ff:4c:a5:ad:f5:7b:aa:1f:b9:59:73:
32:89:e9:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/W9bLM5SYY6t2ORutRmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYmU1MmJhZTRkNDhkZGRjOWNiZWMyMDc2YWJhOTFjOTUz
YWUxMmUwHhcNMjYwMzAxMjAwMTAxWhcNMjYwMzAyMjAwMTAxWjAzMTEwLwYDVQQD
EygyMWVlZjQzYzE0ZWJlOTkyYmQxZTBiYThjMGRmNjE3ZWVlMzAxOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZZGHoqLsAVHOmjm1UUk4Xqlt6+C
/pvC6FJQfOwpzCr2uy/iLRxpwvcnghio61z4aVLKmam4ySxb4Gdntt2kFtz/a28e
yZE/yBHup6spl8rbkZV7NaIiA8xX3Jbyq61er1MoQBk4MvIjlamew0bzEcAO4IEx
v+ZBudo1MZgWgLlzBimOSjnohcTnC1UXVCGuCVoNANONkYX3m3OVMlhhg+mpcKva
TVZ/3sn/YFmDL7W0zf1Ivp+3X4C5O3fBRIyleWHvZlCqGhe81lmD1pFuOqWsNaWz
yAGMLz56Nb7Nvgv/QsV+UPES/7a6ZHJe/XQxtHwTfu8O6aVK06N0ecf7ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHu9DwU6+mSvR4LqMDfYX7uMBm2MB8GA1UdIwQY
MBaAFDC+Urrk1I3dycvsIHarqRyVOuEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgt
ZDgwZjVlYTYyZDQ0LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgtZDgwZjVlYTYyZDQ0
LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDEya0Fi
X1vLQrk5dKwsdfKqx5ZT17v3VyOi688u/d7jhy0/lYbQYSsLuXEFA5hwdDG42kLe
QLm6BGeIqwG0dc15WkBHVIPzio2e9Dyr/nqj8NA2ty5CVRXmSKqx2jyyo5GGE7ML
/iVLpXWerwuvmPGAQT8q8Qy5VjDxEiS3Lp8mf3IL4LR+XtAbNpymdx1ngXzF8FiJ
fwb16+AQxDMB8eEStygFvY7HKJyy8sWLyhMhX3hfmO6LTXsgWek3ubSQsAXyoRP7
mKcUYT6uGalRlWddd/pFJh1KnGMWR4INVAtXxcZ9fhFvl3ex8G83p+TXlv9Mpa31
e6ofuVlzMonpiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:53 2026 by rpki-client