Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier: 0z21Ibmz4USzv/CfZFxc35FIaXxMtSgZG8P4XyoRmDg=
Subject key identifier: F2:D9:8B:44:15:55:8F:7D:B1:A3:B0:75:B7:93:12:BD:D6:2E:23:72
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial: 019CABA1F114FAF9414B0EE49EC6678747B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number: 06F9
Signing time: Sun 01 Mar 2026 23:00:42 +0000
Manifest this update: Sun 01 Mar 2026 23:00:42 +0000
Manifest next update: Mon 02 Mar 2026 23:00:42 +0000
Files and hashes: 1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: cyLJYq/PjJqUuUbcKgs1PV+EALBAxzOJfGx8dLnrdN0=)
2: vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa (hash: Ft3k1GMH35DD813n5Ke6tEuRDCxpQCa27sS+PQPuKK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f1:14:fa:f9:41:4b:0e:e4:9e:c6:67:87:47:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Validity
Not Before: Mar 1 23:00:42 2026 GMT
Not After : Mar 2 23:00:42 2026 GMT
Subject: CN=f2d98b4415558f7db1a3b075b79312bdd62e2372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:e4:6b:78:d3:b8:85:ab:87:bc:e6:f7:d1:
4d:48:cc:47:8a:3e:a7:58:d0:be:e9:cf:79:51:3c:
35:c8:03:83:e6:62:3e:e3:04:68:12:61:51:1b:9d:
61:ab:f7:bf:86:36:37:d5:f0:ae:db:e3:e9:7d:2f:
78:64:73:a2:8f:31:a0:54:cf:b5:7f:f3:27:17:9a:
df:91:83:3e:4e:64:e3:f0:1e:2f:9c:df:5b:19:a4:
3d:e2:03:c8:1c:78:ec:47:0b:bb:b3:8a:de:3a:85:
1e:1f:12:b5:f8:dc:2a:f5:43:76:1f:9b:3b:82:f0:
8a:d4:78:fe:1a:4a:0e:f8:1b:c1:80:8e:42:6a:f6:
9e:29:b2:c1:b4:68:13:15:7a:ae:6f:53:0a:71:f3:
d8:f8:ee:71:b6:a5:8b:2e:95:46:fe:88:76:2e:88:
b5:f6:d0:a3:7e:b7:82:15:54:39:a7:3a:f9:1a:1c:
93:f6:13:56:b0:2f:9f:e6:26:ec:89:69:31:4e:cd:
30:9d:a4:ff:03:eb:34:01:e8:a5:79:cd:50:fc:bf:
96:83:5a:6e:c9:80:72:53:8a:91:10:9b:66:78:60:
a0:21:85:02:fd:e1:e4:c4:3d:57:c2:09:05:fb:07:
f7:72:7b:92:2b:ad:2f:c8:a8:f1:0f:8d:66:5f:70:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:8B:44:15:55:8F:7D:B1:A3:B0:75:B7:93:12:BD:D6:2E:23:72
X509v3 Authority Key Identifier:
keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:63:bb:6e:fd:e7:06:2e:e4:79:4f:00:96:3e:ab:7e:f9:a7:
37:6e:d8:4c:b3:77:f2:ee:35:45:1f:0b:e2:db:22:f9:cf:b0:
c8:24:6d:ca:d4:68:11:ea:7a:db:f1:05:da:c4:15:e5:db:bd:
08:d0:93:65:d1:86:24:c0:0b:b0:e2:ee:9e:16:c4:2b:b4:01:
b6:5e:2a:73:a5:8d:89:72:c8:15:a2:59:c3:a7:ec:2c:0a:a1:
e6:1b:98:c2:c9:07:d6:7d:cd:90:96:2b:c1:87:43:53:7b:65:
a7:fe:c8:51:af:14:5b:b6:c3:13:f6:58:3a:f2:6d:6b:f2:69:
80:15:1d:c9:68:90:8b:9b:52:2c:29:d5:82:08:de:4a:35:ab:
92:70:6a:95:93:92:67:62:f5:3b:fe:5a:96:ac:75:23:da:a3:
86:41:b6:da:22:4b:d8:c7:fd:b2:7e:05:1f:e3:72:35:0c:d1:
c1:48:cf:97:1b:d0:82:1d:47:09:a3:a6:25:3f:fa:ef:a6:bc:
04:1f:f7:1f:ef:7c:c2:4c:6d:20:83:01:68:e3:a3:c8:cc:0d:
1b:e4:37:0e:f1:c8:47:48:ad:04:80:0e:14:d5:18:d8:a7:56:
c1:5e:63:35:9c:b0:98:80:c8:f2:5e:65:ea:2a:ba:f3:2d:4a:
83:7f:68:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofEU+vlBSw7knsZnh0e0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDYwOGUwZjdhMTA4NmM4NDUxZGU1ZDYzNzg0N2I1MjIx
N2FiYjQwHhcNMjYwMzAxMjMwMDQyWhcNMjYwMzAyMjMwMDQyWjAzMTEwLwYDVQQD
EyhmMmQ5OGI0NDE1NTU4ZjdkYjFhM2IwNzViNzkzMTJiZGQ2MmUyMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly/ka3jTuIWrh7zm99FNSMxHij6n
WNC+6c95UTw1yAOD5mI+4wRoEmFRG51hq/e/hjY31fCu2+PpfS94ZHOijzGgVM+1
f/MnF5rfkYM+TmTj8B4vnN9bGaQ94gPIHHjsRwu7s4reOoUeHxK1+Nwq9UN2H5s7
gvCK1Hj+GkoO+BvBgI5CavaeKbLBtGgTFXqub1MKcfPY+O5xtqWLLpVG/oh2Loi1
9tCjfreCFVQ5pzr5GhyT9hNWsC+f5ibsiWkxTs0wnaT/A+s0Aeilec1Q/L+Wg1pu
yYByU4qREJtmeGCgIYUC/eHkxD1XwgkF+wf3cnuSK60vyKjxD41mX3Dl6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLZi0QVVY99saOwdbeTEr3WLiNyMB8GA1UdIwQY
MBaAFOTWCOD3oQhshFHeXWN4R7UiF6u0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYt
YjdiYmY1YTFhYzczLzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYtYjdiYmY1YTFhYzcz
LzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWO7bv3n
Bi7keU8Alj6rfvmnN27YTLN38u41RR8L4tsi+c+wyCRtytRoEep62/EF2sQV5du9
CNCTZdGGJMALsOLunhbEK7QBtl4qc6WNiXLIFaJZw6fsLAqh5huYwskH1n3NkJYr
wYdDU3tlp/7IUa8UW7bDE/ZYOvJta/JpgBUdyWiQi5tSLCnVggjeSjWrknBqlZOS
Z2L1O/5alqx1I9qjhkG22iJL2Mf9sn4FH+NyNQzRwUjPlxvQgh1HCaOmJT/676a8
BB/3H+98wkxtIIMBaOOjyMwNG+Q3DvHIR0itBIAOFNUY2KdWwV5jNZywmIDI8l5l
6iq68y1Kg39oiw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:29 2026 by rpki-client