Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File: 5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier: SGuZw5EfTBxp/hN4+2o7PWLK4j3prOcpcKH5LCkrV+M=
Subject key identifier: 84:DF:B4:92:F4:49:76:39:ED:C1:87:81:26:16:38:9F:1C:13:99:11
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 019D371B578685C96F63D5EF64C920A79B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number: 07BD
Signing time: Sun 29 Mar 2026 01:00:31 +0000
Manifest this update: Sun 29 Mar 2026 01:00:31 +0000
Manifest next update: Mon 30 Mar 2026 01:00:31 +0000
Files and hashes: 1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: ISrALC6fMgmQQsDTO1ULvtGaxVrMnoXIhACv06CxkFI=)
2: BcnRkRAQbZZ4INOqkTUCmGkxNks.roa (hash: vEctQxHlPIQWjpN3HvX2dAISZ0kY4iShspHvCFlft/Q=)
3: kxVaEM_ahIi-CuS_Cu_luJkuGJA.roa (hash: o7lX99+57a7A2fFvf3mYlJql65akn3ASYMdyC0ZxFGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:57:86:85:c9:6f:63:d5:ef:64:c9:20:a7:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Mar 29 01:00:31 2026 GMT
Not After : Mar 30 01:00:31 2026 GMT
Subject: CN=84dfb492f4497639edc187812616389f1c139911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:2e:9a:db:db:98:c5:ba:75:0e:37:a0:c1:
3d:e8:28:61:4d:6d:3d:56:fe:50:f2:06:a4:5e:b6:
6d:61:9e:f5:4d:75:d0:94:d1:97:25:28:05:40:3a:
be:f2:9d:cb:66:e2:c2:2e:e5:9d:55:07:f6:8a:2c:
91:e8:a6:0c:8e:7a:ab:db:a1:47:ee:0b:d5:6b:2c:
5e:04:8f:f4:f0:66:b2:62:95:59:ae:94:f8:15:8e:
ed:51:72:5c:bf:60:dd:8d:f2:a3:25:64:30:e8:24:
54:02:c2:99:c7:ac:ea:f9:4d:8b:14:6d:54:94:bf:
9a:67:98:3b:a4:69:a7:ed:59:cf:ad:e6:0d:f1:63:
72:14:ee:9e:b2:93:cd:41:4a:d9:c0:8b:89:a4:2c:
9a:89:01:16:6c:d8:ec:4d:4c:01:41:24:dd:f4:41:
51:40:12:7d:15:6d:e8:7d:be:70:3a:94:43:58:55:
7f:8e:73:4f:05:5f:3b:ca:8f:c6:d9:d9:8a:19:43:
72:0c:fe:47:e3:6c:90:a2:70:3a:f4:3b:57:14:f1:
e2:7f:c6:70:a4:a2:53:cd:f9:31:0e:69:b9:1b:f1:
be:82:fc:45:94:77:27:eb:e5:8c:8e:d0:52:79:db:
5a:d0:19:e3:ed:7c:22:ba:aa:60:df:31:a3:0f:25:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:B4:92:F4:49:76:39:ED:C1:87:81:26:16:38:9F:1C:13:99:11
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:36:4a:9e:82:77:cf:1c:1f:dd:1b:4c:69:1f:52:9e:32:f3:
07:ee:47:40:b2:83:0e:6d:0d:29:cb:65:28:18:bd:c5:48:ee:
73:fc:05:73:f0:6e:51:ae:54:2a:d1:84:14:c9:f5:70:7c:9e:
18:1c:d9:6c:8c:cf:c3:87:90:e7:62:08:ce:a2:39:94:7a:fe:
3e:be:fa:e2:f1:31:80:ef:76:79:cf:70:e0:6f:89:7a:99:37:
f1:d8:fc:d7:50:7d:4a:e7:62:92:cd:71:45:b2:d6:04:48:fe:
a3:4f:17:4b:cd:a4:cf:85:4b:9d:b8:51:c2:cf:a6:6a:83:53:
28:26:a9:52:18:14:71:51:65:72:3e:f8:ee:35:96:e1:64:b2:
48:57:02:b4:67:0e:d8:a6:6f:26:4e:af:62:76:a3:99:5c:c6:
84:d9:ac:e8:cb:81:ec:c7:65:a4:73:cb:3a:0c:70:7e:90:ce:
b5:cc:bc:9a:b0:6d:20:8d:2d:89:32:2d:63:10:23:04:1e:f0:
8b:92:91:84:ec:a2:f0:3d:35:71:c7:79:42:a5:89:ff:39:f7:
2d:75:28:b7:31:95:98:cf:7e:e4:7b:8c:51:42:2f:e4:4c:8b:
f3:c6:f6:73:ec:75:97:75:d1:1d:80:44:ae:a4:60:ef:55:f1:
fb:93:51:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G1eGhclvY9XvZMkgp5tZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDdhYWEzZDI1YzJmOWViYmVjNzRjODMwY2MwY2RlOTMx
OGM4ZjgwHhcNMjYwMzI5MDEwMDMxWhcNMjYwMzMwMDEwMDMxWjAzMTEwLwYDVQQD
Eyg4NGRmYjQ5MmY0NDk3NjM5ZWRjMTg3ODEyNjE2Mzg5ZjFjMTM5OTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC4umtvbmMW6dQ43oME96ChhTW09
Vv5Q8gakXrZtYZ71TXXQlNGXJSgFQDq+8p3LZuLCLuWdVQf2iiyR6KYMjnqr26FH
7gvVayxeBI/08GayYpVZrpT4FY7tUXJcv2DdjfKjJWQw6CRUAsKZx6zq+U2LFG1U
lL+aZ5g7pGmn7VnPreYN8WNyFO6espPNQUrZwIuJpCyaiQEWbNjsTUwBQSTd9EFR
QBJ9FW3ofb5wOpRDWFV/jnNPBV87yo/G2dmKGUNyDP5H42yQonA69DtXFPHif8Zw
pKJTzfkxDmm5G/G+gvxFlHcn6+WMjtBSedta0Bnj7Xwiuqpg3zGjDyWo/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITftJL0SXY57cGHgSYWOJ8cE5kRMB8GA1UdIwQY
MBaAFOTXqqPSXC+eu+x0yDDMDN6TGMj4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2Yt
ZWY2M2I4MTZkZDM1LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2YtZWY2M2I4MTZkZDM1
LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjZKnoJ3
zxwf3RtMaR9SnjLzB+5HQLKDDm0NKctlKBi9xUjuc/wFc/BuUa5UKtGEFMn1cHye
GBzZbIzPw4eQ52IIzqI5lHr+Pr764vExgO92ec9w4G+Jepk38dj811B9Sudiks1x
RbLWBEj+o08XS82kz4VLnbhRws+maoNTKCapUhgUcVFlcj747jWW4WSySFcCtGcO
2KZvJk6vYnajmVzGhNms6MuB7MdlpHPLOgxwfpDOtcy8mrBtII0tiTItYxAjBB7w
i5KRhOyi8D01ccd5QqWJ/zn3LXUotzGVmM9+5HuMUUIv5EyL88b2c+x1l3XRHYBE
rqRg71Xx+5NRuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:03 2026 by rpki-client