Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: Z9J4+hCMsEj7jQoUpMXgdnCPB5mYYd0l3TxLjwU9nJg=
Subject key identifier: B6:9B:F3:F6:56:95:41:AD:6B:FB:A1:94:D0:31:CA:65:A4:A3:F3:35
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 019D3752E702956896819AB9BE3AB6098C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 04FF
Signing time: Sun 29 Mar 2026 02:01:12 +0000
Manifest this update: Sun 29 Mar 2026 02:01:12 +0000
Manifest next update: Mon 30 Mar 2026 02:01:12 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: tkBTVEKVZixfooE+cd/gJ+EcntVvxmEe/p8FtUip500=)
2: VRLe_vrVUBu7hrug_AwRCwsEDDw.roa (hash: 1ZW4YMZPRX134FBX/m+hkmhqXkoGgUz70QQefV/wFo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e7:02:95:68:96:81:9a:b9:be:3a:b6:09:8c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Mar 29 02:01:12 2026 GMT
Not After : Mar 30 02:01:12 2026 GMT
Subject: CN=b69bf3f6569541ad6bfba194d031ca65a4a3f335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:26:e0:34:1a:73:a7:f1:79:61:43:c9:47:
82:48:a9:86:c8:9d:d1:ff:ff:07:7a:91:71:14:b7:
08:04:d8:81:e2:bd:c4:37:5d:1a:47:5e:1f:8b:bc:
34:b8:39:71:c8:47:56:4a:18:24:35:ba:4d:f1:49:
09:a1:3e:a3:be:e7:a9:c5:5c:33:95:7e:6c:22:dc:
89:66:cc:d3:da:c1:ef:c0:cc:cc:8b:27:20:74:07:
23:4d:b5:d6:8a:dd:5a:ae:cb:45:c8:f4:56:b1:b4:
c8:79:30:22:74:5c:4f:e4:61:82:29:00:3c:9a:4b:
a7:ab:67:8f:10:c3:6f:09:a4:4a:fe:09:95:c0:f6:
87:9a:5e:c2:9f:86:b8:23:33:28:65:65:f4:47:88:
f1:52:45:ed:24:b1:1c:d7:32:6b:cd:18:61:ce:29:
28:e0:00:e4:23:c4:cb:2d:0f:dc:64:06:79:f3:57:
52:db:36:67:50:e7:90:b9:e9:ea:42:0b:37:90:94:
5e:8c:ca:ec:15:4e:90:56:01:38:d3:c5:ac:d1:dd:
6f:a2:46:1f:15:74:d1:aa:9d:d1:2c:aa:28:42:90:
90:c1:6d:a4:49:69:ad:b1:98:af:ba:51:85:0e:c1:
b9:fe:b7:4e:eb:1b:fb:d9:d9:5f:71:37:45:89:f2:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:F3:F6:56:95:41:AD:6B:FB:A1:94:D0:31:CA:65:A4:A3:F3:35
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:00:ee:60:61:9a:0f:63:0e:6f:13:3a:12:67:d5:49:49:9f:
03:3b:fd:18:78:a4:70:50:6d:32:49:91:67:81:15:e0:b7:3d:
6e:3b:89:0a:1b:69:e5:44:ad:57:86:3e:ef:65:3a:bb:e2:df:
91:97:be:30:23:7f:cd:97:eb:73:06:84:f8:4a:09:34:ec:a9:
fe:5d:fb:2d:2b:2d:65:a4:3b:42:01:af:a2:51:78:f8:7d:95:
2f:5c:38:f0:a2:ff:6c:84:12:e5:51:84:98:8b:78:52:e9:5e:
8a:78:4c:3a:46:21:7e:3e:59:f6:f9:6e:e5:bb:e9:50:19:44:
c8:c8:4f:d4:fe:51:a2:c7:7e:32:b8:42:39:cb:63:26:c4:82:
ca:4f:33:45:33:71:a3:56:fa:ff:c5:1c:64:11:46:43:3d:e7:
12:d9:1c:c8:44:44:1e:18:b0:75:68:62:58:18:c2:5e:45:26:
e3:f4:da:62:95:75:79:b0:aa:f5:dd:78:20:91:e3:f2:bd:85:
1b:dd:d6:a8:0a:27:08:2c:f7:c6:8f:f8:a2:3d:52:8c:dd:f8:
5d:bd:45:e9:74:93:93:33:b8:6c:19:c4:ea:8f:05:34:77:4a:
c1:8b:20:8c:98:ba:c1:57:f3:25:b0:39:30:f5:18:f9:a9:ae:
cb:6e:09:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UucClWiWgZq5vjq2CYx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmIzZDYxZmU0M2FiNjgwNGI2ZjFlMzI5N2E4Y2RjYzI2
YjlkNmMwHhcNMjYwMzI5MDIwMTEyWhcNMjYwMzMwMDIwMTEyWjAzMTEwLwYDVQQD
EyhiNjliZjNmNjU2OTU0MWFkNmJmYmExOTRkMDMxY2E2NWE0YTNmMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPYm4DQac6fxeWFDyUeCSKmGyJ3R
//8HepFxFLcIBNiB4r3EN10aR14fi7w0uDlxyEdWShgkNbpN8UkJoT6jvuepxVwz
lX5sItyJZszT2sHvwMzMiycgdAcjTbXWit1arstFyPRWsbTIeTAidFxP5GGCKQA8
mkunq2ePEMNvCaRK/gmVwPaHml7Cn4a4IzMoZWX0R4jxUkXtJLEc1zJrzRhhziko
4ADkI8TLLQ/cZAZ581dS2zZnUOeQuenqQgs3kJRejMrsFU6QVgE408Ws0d1vokYf
FXTRqp3RLKooQpCQwW2kSWmtsZivulGFDsG5/rdO6xv72dlfcTdFifKRnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLab8/ZWlUGta/uhlNAxymWko/M1MB8GA1UdIwQY
MBaAFORrPWH+Q6toBLbx4yl6jNzCa51sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQt
YWY5YmIzZDEyNWQ4LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQtYWY5YmIzZDEyNWQ4
LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYADuYGGa
D2MObxM6EmfVSUmfAzv9GHikcFBtMkmRZ4EV4Lc9bjuJChtp5UStV4Y+72U6u+Lf
kZe+MCN/zZfrcwaE+EoJNOyp/l37LSstZaQ7QgGvolF4+H2VL1w48KL/bIQS5VGE
mIt4UuleinhMOkYhfj5Z9vlu5bvpUBlEyMhP1P5Rosd+MrhCOctjJsSCyk8zRTNx
o1b6/8UcZBFGQz3nEtkcyEREHhiwdWhiWBjCXkUm4/TaYpV1ebCq9d14IJHj8r2F
G93WqAonCCz3xo/4oj1SjN34Xb1F6XSTkzO4bBnE6o8FNHdKwYsgjJi6wVfzJbA5
MPUY+amuy24JoA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:42 2026 by rpki-client