Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: jjIvyJzeTVMltXJfH+ZxXv0hgRMcsgmJBgRCvA0nqtI=
Subject key identifier: 97:CC:59:43:CF:78:0F:40:B6:15:E1:38:B0:B4:51:DE:F8:76:13:00
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019CABD982E23F6C497C68E7B8BEE3493060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 05C5
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: u9mr0l5xg5DEnMlE/W1QS3KsBOGlbrDBWbfmLhjXlgg=)
2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:82:e2:3f:6c:49:7c:68:e7:b8:be:e3:49:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=97cc5943cf780f40b615e138b0b451def8761300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:b0:69:ca:fb:0d:31:e2:4a:2f:1b:26:17:
b8:96:75:ee:1f:19:71:e9:f2:89:d2:1d:75:db:00:
01:e9:2d:6f:36:89:8c:23:81:56:96:c5:31:81:1b:
63:e2:5c:e9:56:77:b0:6a:a5:dc:30:20:3e:18:07:
42:38:2a:b6:54:db:01:5a:e5:70:52:66:24:b0:2a:
75:b9:fe:34:7f:53:47:1a:c9:f6:74:09:a5:93:5b:
54:e0:cd:7f:84:4b:08:88:40:70:cc:a0:af:b0:88:
dc:0a:04:5c:1f:5b:b3:ea:84:b4:f7:91:28:ac:30:
bd:25:0f:64:ff:c7:31:61:f4:b9:02:77:23:31:57:
0b:4d:b1:f1:86:4d:f0:03:28:ae:1d:9a:fd:b0:df:
30:8a:a6:a6:36:2b:af:4e:bc:a2:c5:c4:69:8b:e8:
b0:0c:ce:d6:c7:bc:fe:1d:a4:83:4c:98:e8:bd:1a:
f0:a2:81:a6:a7:4f:b4:71:58:dd:d7:7c:2c:b1:b9:
b5:4d:e6:6a:5e:be:e2:77:8e:6a:e5:a0:6d:df:f4:
7f:59:52:e3:8d:e4:f9:0a:e1:0a:7e:05:9c:d3:0f:
fa:69:0a:71:2a:aa:bc:b2:be:b3:73:e4:36:de:9c:
19:52:5b:6e:41:e3:da:01:10:bb:74:d1:f0:ba:d4:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CC:59:43:CF:78:0F:40:B6:15:E1:38:B0:B4:51:DE:F8:76:13:00
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:07:38:db:22:ef:1b:76:d0:c5:1c:4e:c9:6b:6f:d0:3c:24:
bc:c6:51:8d:5f:06:58:66:d6:49:2a:d8:87:e0:de:22:94:f1:
7e:9c:b3:21:a5:99:f0:9e:d3:e4:a0:55:f6:c5:85:b0:29:e5:
b2:27:37:d9:77:56:bf:34:77:58:3b:a9:e9:18:6f:60:6c:9a:
4c:43:c8:dc:57:6a:8e:61:62:f0:ad:3a:8e:c0:fc:1b:eb:e5:
4b:54:26:cd:7d:64:a0:5f:00:ad:35:aa:33:6c:1f:92:fc:35:
6c:52:37:34:a3:05:89:90:75:a6:61:c1:f6:61:f5:e7:1b:6f:
8d:f5:d1:4c:7e:19:26:55:62:47:c9:77:84:18:1c:bb:d9:df:
59:40:c6:73:5d:56:ac:7d:02:fc:6e:86:70:f9:51:b2:28:5d:
bd:e2:93:36:f7:a6:73:70:5f:94:ed:47:b1:73:ad:a7:bc:21:
ab:eb:9a:00:7d:ff:56:ca:ae:f4:0d:b0:fe:f6:ad:a1:be:48:
89:5e:6c:3d:15:3c:7d:6d:3a:46:dc:fe:11:0e:61:fb:7e:60:
db:65:26:8b:58:35:cb:a5:32:6a:f4:5b:0d:0d:87:36:33:6b:
35:73:76:7d:d5:d8:f5:df:49:12:52:23:4f:95:21:9d:02:7f:
df:45:f9:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2YLiP2xJfGjnuL7jSTBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMzEzNzRlYjk2NzkxMDllOTFhMzhlMjhiMTdiZjI2MGFi
OWQzYWIwHhcNMjYwMzAyMDAwMTI0WhcNMjYwMzAzMDAwMTI0WjAzMTEwLwYDVQQD
Eyg5N2NjNTk0M2NmNzgwZjQwYjYxNWUxMzhiMGI0NTFkZWY4NzYxMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkimwacr7DTHiSi8bJhe4lnXuHxlx
6fKJ0h112wAB6S1vNomMI4FWlsUxgRtj4lzpVnewaqXcMCA+GAdCOCq2VNsBWuVw
UmYksCp1uf40f1NHGsn2dAmlk1tU4M1/hEsIiEBwzKCvsIjcCgRcH1uz6oS095Eo
rDC9JQ9k/8cxYfS5AncjMVcLTbHxhk3wAyiuHZr9sN8wiqamNiuvTryixcRpi+iw
DM7Wx7z+HaSDTJjovRrwooGmp0+0cVjd13wssbm1TeZqXr7id45q5aBt3/R/WVLj
jeT5CuEKfgWc0w/6aQpxKqq8sr6zc+Q23pwZUltuQePaARC7dNHwutSJHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfMWUPPeA9AthXhOLC0Ud74dhMAMB8GA1UdIwQY
MBaAFHAxN065Z5EJ6Ro44osXvyYKudOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmIt
MmMyMTgwNzE0ZTcxLzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmItMmMyMTgwNzE0ZTcx
LzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQc42yLv
G3bQxRxOyWtv0DwkvMZRjV8GWGbWSSrYh+DeIpTxfpyzIaWZ8J7T5KBV9sWFsCnl
sic32XdWvzR3WDup6RhvYGyaTEPI3FdqjmFi8K06jsD8G+vlS1QmzX1koF8ArTWq
M2wfkvw1bFI3NKMFiZB1pmHB9mH15xtvjfXRTH4ZJlViR8l3hBgcu9nfWUDGc11W
rH0C/G6GcPlRsihdveKTNvemc3BflO1HsXOtp7whq+uaAH3/Vsqu9A2w/vatob5I
iV5sPRU8fW06Rtz+EQ5h+35g22Umi1g1y6UyavRbDQ2HNjNrNXN2fdXY9d9JElIj
T5UhnQJ/30X5UQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:40 2026 by rpki-client