Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: jZpwiTKNz5aah38I95mNK7f4BH2TS453PMNOcnWVmJI=
Subject key identifier: FE:B2:3D:11:3E:C2:80:55:50:2C:76:75:D7:46:F1:B4:8D:C7:93:C5
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 019CACEBA4DA0F46B638ABDEF975A209AACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 182A
Signing time: Mon 02 Mar 2026 05:00:49 +0000
Manifest this update: Mon 02 Mar 2026 05:00:49 +0000
Manifest next update: Tue 03 Mar 2026 05:00:49 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: +72tcWmo3NBQyyMN+LOCdaP/4BSMWaopoi8+mbTfw/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a4:da:0f:46:b6:38:ab:de:f9:75:a2:09:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Mar 2 05:00:49 2026 GMT
Not After : Mar 3 05:00:49 2026 GMT
Subject: CN=feb23d113ec28055502c7675d746f1b48dc793c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:52:fa:e2:64:b2:5d:7e:ef:12:f8:de:a0:
5e:d7:d6:48:68:75:c4:2c:70:fd:a8:36:07:be:5c:
91:8c:d4:15:4f:11:c4:05:c7:bc:b3:68:29:37:3e:
ce:ec:99:04:85:68:73:0f:af:c2:a0:06:51:0c:00:
3d:6b:8f:36:46:30:a6:fc:a5:f4:71:97:21:ee:ee:
6a:6e:ad:7a:bf:c2:0e:20:d4:2e:12:64:09:9e:b7:
a7:7f:32:d6:0d:e9:f6:f7:29:ae:03:f0:d7:73:65:
76:98:98:e0:ba:a9:be:59:2b:37:7c:34:3d:0d:39:
f4:21:83:4a:ab:49:bf:ce:f1:78:9b:8b:c4:ec:6d:
0f:fb:b5:a9:c4:8c:0f:72:20:d4:42:50:01:87:98:
89:51:bf:f3:cd:c6:4f:f4:ff:34:e0:ba:d2:4b:ba:
1e:60:08:e7:c6:ef:59:81:52:7a:58:e3:57:8c:99:
cd:0b:aa:81:ee:ed:0d:94:20:03:ef:98:3f:5c:85:
97:99:70:d9:49:5d:1b:23:9d:dc:4e:25:8c:49:ee:
c7:da:75:cf:88:49:25:e0:07:4d:8d:ca:50:60:d5:
00:0e:0d:7e:22:74:1e:af:a8:60:b2:ef:65:18:d1:
77:04:de:d3:96:27:84:96:d2:94:d6:42:da:93:b4:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B2:3D:11:3E:C2:80:55:50:2C:76:75:D7:46:F1:B4:8D:C7:93:C5
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:34:41:5e:ae:df:e6:69:80:3b:17:d7:58:df:cf:37:bc:7c:
77:20:03:e5:e3:15:a7:0a:00:68:ac:86:aa:fc:9a:ac:fd:82:
59:07:fd:27:3c:aa:91:a8:42:5e:80:7f:9d:32:cc:ea:e2:8f:
03:2a:2c:f1:07:dd:55:a6:e7:eb:04:3f:e7:f8:40:fa:56:90:
15:96:0f:00:54:16:d6:b1:6c:fe:d5:ce:cf:a0:01:02:74:69:
52:ea:50:fc:88:70:e9:0b:09:cd:50:f4:6b:63:cd:ee:c3:ae:
05:e9:a4:8f:23:77:21:a2:02:b3:cd:e6:e8:35:bc:51:c7:69:
08:43:7d:ca:47:e7:8f:45:dd:a4:13:d1:e0:49:60:31:20:3d:
d4:30:54:26:b5:ed:04:ed:60:29:8a:cf:6a:49:8a:cd:0c:7b:
42:2e:9c:b2:fd:9e:e2:cf:02:9c:25:a9:ec:b9:31:4f:ed:9e:
0a:e8:8d:fd:56:b5:2c:b0:e6:5f:2a:43:c0:7b:4f:02:1d:cf:
2b:a6:4d:4e:18:ce:06:57:7e:4f:3f:b4:b4:40:b4:46:19:62:
ec:f7:2c:11:67:97:84:06:13:f9:a6:04:58:04:87:d7:a4:d4:
28:34:a9:66:20:3b:89:c4:1c:2b:6e:96:74:1a:1e:7e:61:e5:
bd:4c:5e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys66TaD0a2OKve+XWiCarOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OWNkNjdjMGMxODk1OTIzOTM1ODU1MzIyOWU5MWY1NDNj
YzVhNWYwHhcNMjYwMzAyMDUwMDQ5WhcNMjYwMzAzMDUwMDQ5WjAzMTEwLwYDVQQD
EyhmZWIyM2QxMTNlYzI4MDU1NTAyYzc2NzVkNzQ2ZjFiNDhkYzc5M2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix1S+uJksl1+7xL43qBe19ZIaHXE
LHD9qDYHvlyRjNQVTxHEBce8s2gpNz7O7JkEhWhzD6/CoAZRDAA9a482RjCm/KX0
cZch7u5qbq16v8IOINQuEmQJnrenfzLWDen29ymuA/DXc2V2mJjguqm+WSs3fDQ9
DTn0IYNKq0m/zvF4m4vE7G0P+7WpxIwPciDUQlABh5iJUb/zzcZP9P804LrSS7oe
YAjnxu9ZgVJ6WONXjJnNC6qB7u0NlCAD75g/XIWXmXDZSV0bI53cTiWMSe7H2nXP
iEkl4AdNjcpQYNUADg1+InQer6hgsu9lGNF3BN7TlieEltKU1kLak7SQ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6yPRE+woBVUCx2dddG8bSNx5PFMB8GA1UdIwQY
MBaAFDec1nwMGJWSOTWFUyKekfVDzFpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYt
OTliYmJhZmU5YzRiLzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYtOTliYmJhZmU5YzRi
LzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDRBXq7f
5mmAOxfXWN/PN7x8dyAD5eMVpwoAaKyGqvyarP2CWQf9JzyqkahCXoB/nTLM6uKP
Ayos8QfdVabn6wQ/5/hA+laQFZYPAFQW1rFs/tXOz6ABAnRpUupQ/Ihw6QsJzVD0
a2PN7sOuBemkjyN3IaICs83m6DW8UcdpCEN9ykfnj0XdpBPR4ElgMSA91DBUJrXt
BO1gKYrPakmKzQx7Qi6csv2e4s8CnCWp7LkxT+2eCuiN/Va1LLDmXypDwHtPAh3P
K6ZNThjOBld+Tz+0tEC0Rhli7PcsEWeXhAYT+aYEWASH16TUKDSpZiA7icQcK26W
dBoefmHlvUxeVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:23 2026 by rpki-client