Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: cQxAOLb72qvjUfMSyts3rGx2aJeHnA0t1uRRESdUmWw=
Subject key identifier: B1:CE:42:A1:9A:85:BC:FB:55:10:6C:A6:B3:CC:56:AD:B3:EB:4E:92
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 019CAEA3704BED1C7CB9C82550B3543A417C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 045B
Signing time: Mon 02 Mar 2026 13:01:12 +0000
Manifest this update: Mon 02 Mar 2026 13:01:12 +0000
Manifest next update: Tue 03 Mar 2026 13:01:12 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: VOVub7m8eMeTcyrneAiGSMoe/WFJwQAL7Oru3juL9zo=)
2: DVxcthJ5zcZ8COkBA3rotGAlLFU.roa (hash: vJnipHRerz0UttumCZypDHr2IzvHL7fPbWoqduV1jL8=)
3: iDjUHReMaiMBvtjZdmRz4HvetFg.roa (hash: jPu0BoNWhKVwiGPpdPSY4iU5CH4YO6NsUMtetTUIS9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:70:4b:ed:1c:7c:b9:c8:25:50:b3:54:3a:41:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Mar 2 13:01:12 2026 GMT
Not After : Mar 3 13:01:12 2026 GMT
Subject: CN=b1ce42a19a85bcfb55106ca6b3cc56adb3eb4e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:18:85:26:a4:7f:eb:21:6e:1f:4c:61:e8:
27:93:1b:57:79:5c:5a:1e:b4:a5:80:ee:e7:7a:c8:
41:e4:5f:92:d4:8a:84:52:ee:15:3a:89:b3:21:15:
30:89:97:dc:fb:09:3c:aa:3a:f7:18:25:6a:51:ad:
62:63:f5:2a:58:e0:86:3a:48:5b:5d:d5:f9:c1:8e:
3e:a5:d7:65:65:63:91:fc:39:2a:f3:8c:7b:7e:66:
d6:3f:a7:6b:f5:21:8a:f6:fa:85:b4:a0:23:99:57:
d2:6b:04:8b:84:0b:6a:57:6f:e0:1f:65:dd:8c:a5:
ff:4f:48:99:c7:08:fb:1f:81:b5:c1:84:d8:12:70:
6b:d0:43:78:eb:6b:16:6f:26:a1:bf:6f:24:be:a1:
3b:b5:70:a9:b2:89:07:29:aa:94:59:99:46:05:91:
20:35:cb:20:c6:5b:cb:f2:11:6f:12:a9:b2:86:f1:
35:79:a8:c1:e4:0e:7c:b2:ac:7e:e6:3c:51:f5:83:
77:6e:fb:88:2e:04:a2:b7:f9:49:56:d1:f1:36:9c:
43:d6:0f:31:0b:d3:f4:6e:c7:c1:4e:e0:e3:3b:52:
ad:f0:69:bb:0d:59:f0:13:ee:d3:25:9c:8c:67:05:
66:40:aa:64:6e:78:46:79:f6:a7:d3:d3:76:ab:1f:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:42:A1:9A:85:BC:FB:55:10:6C:A6:B3:CC:56:AD:B3:EB:4E:92
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4a:fb:01:a5:9c:06:d7:cc:07:e7:d3:e2:a8:1b:a6:fa:9f:
9d:f6:4e:31:1a:8f:b1:73:55:40:7b:54:84:e2:18:dc:a9:09:
33:e4:b8:74:17:aa:9f:fc:1d:1b:67:00:63:72:8e:10:fd:5b:
a1:9d:03:2e:53:e9:12:a3:43:a3:7d:ee:90:0b:08:c8:56:52:
8f:1d:d2:d2:4b:12:27:f7:ad:03:8c:a1:82:60:13:48:bc:1f:
7e:7b:05:81:42:ff:ba:83:01:f6:5e:e8:84:b1:eb:df:58:02:
9b:28:0e:4c:b3:92:37:a4:26:93:a6:e4:e1:7a:94:1a:f1:78:
43:9e:e4:60:50:fc:bc:d0:52:fb:91:52:18:03:6e:04:b5:24:
38:f3:34:dd:d1:ea:c4:44:ae:32:82:18:62:89:a7:f6:8a:cc:
f3:e7:7f:45:c5:9e:34:ed:e2:57:13:ef:9a:95:c3:ef:09:4c:
bf:16:ff:97:ba:98:80:da:75:46:23:5a:f7:d9:f3:8b:da:17:
bb:86:63:7f:cd:e9:4e:01:2f:11:23:bb:d9:62:5a:88:ee:ff:
8a:99:e7:b4:4d:96:6d:60:98:b4:14:d4:f2:ab:b6:55:8c:c9:
e2:76:49:8d:97:b2:5b:bf:90:e7:a8:d9:3a:2a:46:eb:0e:b3:
d3:a2:a6:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo3BL7Rx8ucglULNUOkF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzI5ZWU4OTYzNmJhMzRmZTU2YmQ3MmU3NThmNTgyYWRl
NzBlNTIwHhcNMjYwMzAyMTMwMTEyWhcNMjYwMzAzMTMwMTEyWjAzMTEwLwYDVQQD
EyhiMWNlNDJhMTlhODViY2ZiNTUxMDZjYTZiM2NjNTZhZGIzZWI0ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jQYhSakf+shbh9MYegnkxtXeVxa
HrSlgO7neshB5F+S1IqEUu4VOomzIRUwiZfc+wk8qjr3GCVqUa1iY/UqWOCGOkhb
XdX5wY4+pddlZWOR/Dkq84x7fmbWP6dr9SGK9vqFtKAjmVfSawSLhAtqV2/gH2Xd
jKX/T0iZxwj7H4G1wYTYEnBr0EN462sWbyahv28kvqE7tXCpsokHKaqUWZlGBZEg
NcsgxlvL8hFvEqmyhvE1eajB5A58sqx+5jxR9YN3bvuILgSit/lJVtHxNpxD1g8x
C9P0bsfBTuDjO1Kt8Gm7DVnwE+7TJZyMZwVmQKpkbnhGefan09N2qx84awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHOQqGahbz7VRBsprPMVq2z606SMB8GA1UdIwQY
MBaAFOVynuiWNro0/la9cudY9YKt5w5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAt
YzEzOGJkMWMxNzFlLzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAtYzEzOGJkMWMxNzFl
LzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUr7AaWc
BtfMB+fT4qgbpvqfnfZOMRqPsXNVQHtUhOIY3KkJM+S4dBeqn/wdG2cAY3KOEP1b
oZ0DLlPpEqNDo33ukAsIyFZSjx3S0ksSJ/etA4yhgmATSLwffnsFgUL/uoMB9l7o
hLHr31gCmygOTLOSN6Qmk6bk4XqUGvF4Q57kYFD8vNBS+5FSGANuBLUkOPM03dHq
xESuMoIYYomn9orM8+d/RcWeNO3iVxPvmpXD7wlMvxb/l7qYgNp1RiNa99nzi9oX
u4Zjf83pTgEvESO72WJaiO7/ipnntE2WbWCYtBTU8qu2VYzJ4nZJjZeyW7+Q56jZ
OipG6w6z06KmVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:55 2026 by rpki-client