Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: 0Tm9R+M/9wBbrMClln7lA8qpGP7BAut8u7hwoAwjHI8=
Subject key identifier: 08:6D:7E:6C:C5:A5:42:52:A3:32:DD:0D:68:4E:C9:31:D9:1B:CC:FC
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019CADFEA5A23ACB32B27BDB3094668685BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 052B
Signing time: Mon 02 Mar 2026 10:01:12 +0000
Manifest this update: Mon 02 Mar 2026 10:01:12 +0000
Manifest next update: Tue 03 Mar 2026 10:01:12 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: rP04GhIDsqbErGnK6Vl2UJ3wfEz8lGw4LkN1IG+po8w=)
2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a5:a2:3a:cb:32:b2:7b:db:30:94:66:86:85:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Mar 2 10:01:12 2026 GMT
Not After : Mar 3 10:01:12 2026 GMT
Subject: CN=086d7e6cc5a54252a332dd0d684ec931d91bccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:8e:f4:2a:93:29:b5:d5:28:82:e4:11:95:
eb:4d:52:57:db:b5:01:6e:17:45:66:b0:19:55:5e:
f2:9f:0b:43:66:85:9e:01:4a:04:1c:8a:d9:18:85:
9b:91:58:15:67:ac:64:6c:3b:c5:1f:b0:31:f6:a7:
9a:93:83:9f:ed:ba:46:e6:c7:61:7d:95:67:e9:66:
61:e7:ec:fe:1e:b5:9b:c4:e8:68:8f:47:c0:84:2e:
b6:00:40:28:c1:85:ba:9c:ee:73:c0:ce:12:db:2b:
8c:f4:36:7a:28:cd:2b:31:e6:7f:bc:ab:ad:48:76:
83:fd:cd:7d:10:a5:a6:5e:a6:20:ef:8b:de:e3:b2:
3d:af:8c:b8:0a:85:dc:60:d2:ad:6b:07:10:3d:c6:
7d:58:24:13:e8:2a:5e:eb:40:83:a9:d1:60:f4:8f:
96:04:26:1a:ba:d1:de:70:70:db:6e:a8:98:98:1d:
4f:95:2d:be:90:c7:07:0c:5a:e0:34:db:0f:eb:15:
78:0e:4e:fb:d0:db:ea:e8:f2:f3:0b:5c:1d:5f:d6:
e0:98:6b:41:6c:93:e8:13:0f:90:6f:3f:0a:4f:34:
77:51:28:7d:c3:84:c0:bd:99:f4:35:04:79:0f:05:
83:de:85:f0:c1:e8:85:17:0e:72:27:24:8a:c3:8b:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6D:7E:6C:C5:A5:42:52:A3:32:DD:0D:68:4E:C9:31:D9:1B:CC:FC
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9c:7b:92:c9:ee:f0:be:32:78:b8:26:09:14:2c:45:ad:63:
4d:1a:e9:9a:8f:32:98:c3:79:37:b3:2b:4c:74:ff:14:b7:6e:
d3:a3:26:ac:32:39:71:7c:62:7e:0d:1d:4c:4b:e8:92:3b:84:
34:00:28:67:5f:43:4b:16:68:c0:49:14:2b:f4:70:4c:b0:ac:
4b:e3:22:37:1f:27:d7:71:b6:45:82:85:c4:5d:0b:b5:e1:d5:
4f:9b:4b:8a:96:a1:cc:be:9b:5d:30:ce:ac:26:32:d8:1d:70:
f4:d0:9e:e0:ed:36:06:e0:fd:fb:e5:1d:5d:eb:20:cc:f9:3c:
33:61:97:e0:a3:f6:44:a7:b1:80:e8:b6:c7:9b:40:ca:bb:74:
84:fa:91:7a:4f:9c:c4:a4:60:82:80:c3:0e:59:09:3c:ad:b8:
aa:a6:06:00:ec:7b:60:7f:fb:9c:46:da:68:34:d2:8d:7a:db:
fe:36:14:94:d9:96:2f:df:99:f6:c6:79:c1:22:cc:25:11:64:
6e:4e:c6:b4:66:3d:f4:da:17:19:0e:f0:51:e9:aa:aa:46:ba:
a8:cb:cd:b8:2a:33:57:4e:48:16:18:27:8d:9e:51:c0:4a:98:
4a:a0:ac:70:f2:fd:8a:84:7a:d5:7f:6a:9f:15:2f:e0:fd:93:
69:d7:bd:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/qWiOssysnvbMJRmhoW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5
YmQ3MTAwHhcNMjYwMzAyMTAwMTEyWhcNMjYwMzAzMTAwMTEyWjAzMTEwLwYDVQQD
EygwODZkN2U2Y2M1YTU0MjUyYTMzMmRkMGQ2ODRlYzkzMWQ5MWJjY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslCO9CqTKbXVKILkEZXrTVJX27UB
bhdFZrAZVV7ynwtDZoWeAUoEHIrZGIWbkVgVZ6xkbDvFH7Ax9qeak4Of7bpG5sdh
fZVn6WZh5+z+HrWbxOhoj0fAhC62AEAowYW6nO5zwM4S2yuM9DZ6KM0rMeZ/vKut
SHaD/c19EKWmXqYg74ve47I9r4y4CoXcYNKtawcQPcZ9WCQT6Cpe60CDqdFg9I+W
BCYautHecHDbbqiYmB1PlS2+kMcHDFrgNNsP6xV4Dk770Nvq6PLzC1wdX9bgmGtB
bJPoEw+Qbz8KTzR3USh9w4TAvZn0NQR5DwWD3oXwweiFFw5yJySKw4tLJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhtfmzFpUJSozLdDWhOyTHZG8z8MB8GA1UdIwQY
MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct
YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1
LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpx7ksnu
8L4yeLgmCRQsRa1jTRrpmo8ymMN5N7MrTHT/FLdu06MmrDI5cXxifg0dTEvokjuE
NAAoZ19DSxZowEkUK/RwTLCsS+MiNx8n13G2RYKFxF0LteHVT5tLipahzL6bXTDO
rCYy2B1w9NCe4O02BuD9++UdXesgzPk8M2GX4KP2RKexgOi2x5tAyrt0hPqRek+c
xKRggoDDDlkJPK24qqYGAOx7YH/7nEbaaDTSjXrb/jYUlNmWL9+Z9sZ5wSLMJRFk
bk7GtGY99NoXGQ7wUemqqka6qMvNuCozV05IFhgnjZ5RwEqYSqCscPL9ioR61X9q
nxUv4P2Tade9ZA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:02 2026 by rpki-client