Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: YIrC1rtZg7R2QM9RTTR5BZwGr+G+Ptuo8MDtebzkGcg=
Subject key identifier: A9:D6:4A:A6:40:1C:4F:AC:C5:D8:03:8D:CF:A7:DD:61:CC:72:85:57
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019CABD9628A767A0DFF1451CDE138659110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:16 +0000
Manifest this update: Mon 02 Mar 2026 00:01:16 +0000
Manifest next update: Tue 03 Mar 2026 00:01:16 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: j9ee0gsGnzBo/FindWEnGMkbdtgX+SQmwulN5Pws7uk=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:62:8a:76:7a:0d:ff:14:51:cd:e1:38:65:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Mar 2 00:01:16 2026 GMT
Not After : Mar 3 00:01:16 2026 GMT
Subject: CN=a9d64aa6401c4facc5d8038dcfa7dd61cc728557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:3d:2a:ae:0a:8a:8e:c3:6b:c8:c7:02:a4:
c6:af:6a:06:37:50:b1:bc:48:0f:ec:08:78:2b:47:
fc:df:75:b9:dd:c0:1f:9b:1d:82:75:70:ff:56:c0:
4e:c1:c1:da:5e:ac:14:9b:23:7a:f7:da:ca:a2:11:
82:e4:f1:f8:52:46:1a:03:e2:60:0f:8d:62:82:1a:
93:fc:9f:e1:0e:a9:1a:7a:ae:aa:bc:ae:c6:89:b3:
f4:ff:a7:72:44:19:61:af:51:0d:d1:15:b0:c3:84:
47:52:b8:74:56:64:fb:50:98:80:0f:a5:cd:7e:88:
30:55:e7:a3:27:d8:97:ff:00:8f:f9:47:8a:e7:ed:
fe:29:67:c9:40:e8:c1:65:82:12:94:91:6c:f3:ba:
35:42:89:2d:cc:06:28:67:60:df:f6:24:43:21:12:
80:eb:78:36:b5:f8:74:84:41:62:0f:ee:d9:2f:26:
e4:2a:7b:b3:dd:93:05:dc:46:54:be:7f:fc:8a:17:
8d:c1:42:4d:78:31:67:ac:e5:31:2c:2c:bd:11:0a:
64:ee:b5:dc:89:93:36:b2:e4:8d:35:9c:e2:f0:20:
09:31:ff:6e:5f:29:00:6b:a3:bd:7c:4f:ab:5c:b0:
51:bc:05:3b:93:24:68:37:f8:fd:88:6f:58:97:c3:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D6:4A:A6:40:1C:4F:AC:C5:D8:03:8D:CF:A7:DD:61:CC:72:85:57
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:fb:0f:3b:e6:5d:d9:0e:9d:e2:7f:4a:e0:44:81:0a:13:bf:
98:f4:59:5b:92:f9:0f:14:f0:52:6b:51:2c:31:79:6d:8f:6a:
60:86:89:43:52:62:9d:20:f1:81:51:52:f9:cf:31:c1:0c:d7:
0a:44:2c:66:ad:29:fa:9c:ee:e0:2d:34:b3:76:a2:ed:54:44:
44:4b:e6:6b:cf:a5:e0:e7:f3:d7:93:a7:c0:d3:c7:eb:30:5d:
46:36:c3:74:58:30:20:e8:c9:3a:3d:ca:9d:29:49:6d:d3:32:
82:bb:af:6f:a1:57:2d:c5:33:57:e0:09:eb:ca:93:ca:10:48:
24:36:e9:d2:5c:6f:8e:aa:f3:6a:d3:08:a8:e4:8a:b2:50:52:
aa:62:0c:72:18:a5:2f:ec:92:2c:0a:67:fe:09:69:47:d9:05:
68:61:8d:51:be:34:2b:9a:c1:2b:25:7f:00:91:e8:27:15:65:
30:30:7a:bf:83:8e:2b:77:9a:55:b2:4f:2d:5a:df:31:dc:91:
43:98:4d:7e:00:07:7c:66:a0:1d:72:62:bc:ac:ef:9e:8f:45:
02:a9:81:6c:bc:43:cf:1c:49:e2:b3:ab:e0:fc:7b:90:2d:7c:
3a:1b:51:45:c7:23:39:1f:a4:f0:1b:bf:b4:fd:7a:5d:fd:f7:
f7:97:1a:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2WKKdnoN/xRRzeE4ZZEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj
MjdiZmEwHhcNMjYwMzAyMDAwMTE2WhcNMjYwMzAzMDAwMTE2WjAzMTEwLwYDVQQD
EyhhOWQ2NGFhNjQwMWM0ZmFjYzVkODAzOGRjZmE3ZGQ2MWNjNzI4NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPM9Kq4Kio7Da8jHAqTGr2oGN1Cx
vEgP7Ah4K0f833W53cAfmx2CdXD/VsBOwcHaXqwUmyN699rKohGC5PH4UkYaA+Jg
D41ighqT/J/hDqkaeq6qvK7GibP0/6dyRBlhr1EN0RWww4RHUrh0VmT7UJiAD6XN
fogwVeejJ9iX/wCP+UeK5+3+KWfJQOjBZYISlJFs87o1QoktzAYoZ2Df9iRDIRKA
63g2tfh0hEFiD+7ZLybkKnuz3ZMF3EZUvn/8iheNwUJNeDFnrOUxLCy9EQpk7rXc
iZM2suSNNZzi8CAJMf9uXykAa6O9fE+rXLBRvAU7kyRoN/j9iG9Yl8OMWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnWSqZAHE+sxdgDjc+n3WHMcoVXMB8GA1UdIwQY
MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et
YzMxZmE3MWUyNjM1LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1
LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0fsPO+Zd
2Q6d4n9K4ESBChO/mPRZW5L5DxTwUmtRLDF5bY9qYIaJQ1JinSDxgVFS+c8xwQzX
CkQsZq0p+pzu4C00s3ai7VREREvma8+l4Ofz15OnwNPH6zBdRjbDdFgwIOjJOj3K
nSlJbdMygruvb6FXLcUzV+AJ68qTyhBIJDbp0lxvjqrzatMIqOSKslBSqmIMchil
L+ySLApn/glpR9kFaGGNUb40K5rBKyV/AJHoJxVlMDB6v4OOK3eaVbJPLVrfMdyR
Q5hNfgAHfGagHXJivKzvno9FAqmBbLxDzxxJ4rOr4Px7kC18OhtRRccjOR+k8Bu/
tP16Xf3395cafA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:20 2026 by rpki-client