Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier: FdF11hcEKh4aFIk2+ZSeicKUY94VQWwEPUz9jT3gSRs=
Subject key identifier: E9:20:AB:C3:92:A7:CB:89:EE:88:1D:AF:41:B5:FD:EE:B8:B5:3B:92
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 019D382DD73B447761EFB30F9E603917F22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number: 125B
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: NSKhyUya1x-PyKiiTfwVVTZVm6A.roa (hash: wduaY6yIGEaa6Q7/D9YyI5iy8gfW5slOIEt9QDoD1eQ=)
2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: Go6gc4lxBO7ZGQ3hXem683nEFA78WRf1Jk7yal2VxsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d7:3b:44:77:61:ef:b3:0f:9e:60:39:17:f2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=e920abc392a7cb89ee881daf41b5fdeeb8b53b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:40:23:80:9e:a1:3a:1c:95:19:31:00:77:
7b:dc:76:e5:7e:0b:fc:a1:fa:31:e7:e9:55:ab:34:
a4:c2:5b:fb:89:4c:7a:56:db:ed:60:f3:d1:c6:69:
62:5d:56:33:1e:f4:a4:4f:e4:c6:88:1f:2c:2d:f2:
96:e2:ce:de:25:d6:e2:18:c8:ad:57:9c:79:14:86:
5a:a4:15:80:5f:19:03:67:9a:78:4f:27:dd:86:9f:
dd:a3:e5:4d:69:10:d6:5b:c9:1d:fb:ee:a5:e5:ab:
87:ca:80:0c:b0:92:8d:d7:c2:5e:9d:98:ac:2f:53:
d1:a6:b2:8a:30:28:24:68:bd:d7:4a:ec:31:48:d1:
be:a6:25:ab:68:36:82:f8:1e:89:59:ad:4c:56:4c:
68:31:ea:f7:34:fa:5d:96:49:64:08:e0:97:04:bf:
0a:d4:73:fc:f0:9c:05:ea:d2:a6:b0:c6:e6:fe:1b:
a3:34:96:11:f3:c9:ce:8f:03:fd:cc:66:d5:8d:96:
d3:d0:d3:97:e0:f3:6e:91:06:9e:b3:75:75:38:31:
84:82:b4:cf:c2:36:2e:53:67:e5:d0:ae:86:b6:f8:
5f:e6:4c:57:fb:fd:36:03:3c:da:62:a3:37:39:48:
f0:42:4e:69:e5:cb:0c:88:b0:15:fd:ec:bd:32:69:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:AB:C3:92:A7:CB:89:EE:88:1D:AF:41:B5:FD:EE:B8:B5:3B:92
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9c:bd:64:e4:08:4c:a1:35:75:dd:9c:bb:c7:7a:53:e5:44:
1e:6c:45:24:04:44:ba:08:27:ab:04:eb:71:c4:2b:2b:56:ce:
46:57:66:49:d0:c0:4e:d5:fe:94:a3:6a:24:71:c1:87:c5:79:
65:8c:54:dc:e8:5d:f1:13:85:19:ec:bf:d4:fc:ce:70:7a:e6:
55:5b:c3:a4:08:b5:51:6d:ca:66:37:fb:be:8c:16:ad:af:c3:
08:da:ef:6b:5d:e6:09:8d:16:76:85:f3:06:f7:8a:5e:2c:f2:
db:1a:dd:a1:89:11:6d:1b:1b:7d:61:8f:70:38:00:e9:fa:4a:
93:5b:6a:63:1f:b4:a2:7f:77:78:e4:02:25:10:02:e2:14:e8:
5e:e7:78:bf:bb:fd:cd:d5:29:48:ea:88:66:2a:cb:ea:3f:57:
a9:7b:a9:c7:ff:77:0a:79:13:74:ab:37:f2:13:35:b8:5e:bf:
4c:41:98:7f:b4:75:e5:ec:70:5b:2a:5a:3c:97:7a:9b:b5:c6:
89:f5:15:a9:2d:dc:ac:4a:30:e0:f1:29:88:00:d6:3b:58:97:
2a:3a:9f:6a:c3:6b:f7:09:52:fe:25:5c:15:bc:e3:b3:8a:c6:
a8:0e:92:a6:60:f9:39:ed:a1:9e:22:3b:cb:f0:7e:1a:af:f4:
15:58:00:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ldc7RHdh77MPnmA5F/IvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTVhYWYwMzMwMDRjOTJkN2EyNmMyMzZjMTRkMzI1NTJk
NzhkOTQwHhcNMjYwMzI5MDYwMDIxWhcNMjYwMzMwMDYwMDIxWjAzMTEwLwYDVQQD
EyhlOTIwYWJjMzkyYTdjYjg5ZWU4ODFkYWY0MWI1ZmRlZWI4YjUzYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt61AI4CeoToclRkxAHd73Hblfgv8
ofox5+lVqzSkwlv7iUx6VtvtYPPRxmliXVYzHvSkT+TGiB8sLfKW4s7eJdbiGMit
V5x5FIZapBWAXxkDZ5p4Tyfdhp/do+VNaRDWW8kd++6l5auHyoAMsJKN18JenZis
L1PRprKKMCgkaL3XSuwxSNG+piWraDaC+B6JWa1MVkxoMer3NPpdlklkCOCXBL8K
1HP88JwF6tKmsMbm/hujNJYR88nOjwP9zGbVjZbT0NOX4PNukQaes3V1ODGEgrTP
wjYuU2fl0K6Gtvhf5kxX+/02AzzaYqM3OUjwQk5p5csMiLAV/ey9MmncXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkgq8OSp8uJ7ogdr0G1/e64tTuSMB8GA1UdIwQY
MBaAFLeVqvAzAEyS16JsI2wU0yVS142UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jNzUyYjItMThmOS00MTkxLTg4Zjgt
YzA2NWYyNDJmMDIwLzEvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jNzUyYjItMThmOS00MTkxLTg4ZjgtYzA2NWYyNDJmMDIw
LzEvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5y9ZOQI
TKE1dd2cu8d6U+VEHmxFJAREuggnqwTrccQrK1bORldmSdDATtX+lKNqJHHBh8V5
ZYxU3Ohd8ROFGey/1PzOcHrmVVvDpAi1UW3KZjf7vowWra/DCNrva13mCY0WdoXz
BveKXizy2xrdoYkRbRsbfWGPcDgA6fpKk1tqYx+0on93eOQCJRAC4hToXud4v7v9
zdUpSOqIZirL6j9XqXupx/93CnkTdKs38hM1uF6/TEGYf7R15exwWypaPJd6m7XG
ifUVqS3crEow4PEpiADWO1iXKjqfasNr9wlS/iVcFbzjs4rGqA6SpmD5Oe2hniI7
y/B+Gq/0FVgAhw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:28 2026 by rpki-client