Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: tE8h4ZAm1chCvv/dfl32HDvxnF0sGMOxENwDLhstKxM=
Subject key identifier: 3F:0B:33:95:E5:E0:AA:0A:EC:71:70:59:E9:13:41:B6:CB:66:3F:35
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 019DCE997A2282FF2951B54E9BE19A41D3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 10B0
Signing time: Mon 27 Apr 2026 11:00:57 +0000
Manifest this update: Mon 27 Apr 2026 11:00:57 +0000
Manifest next update: Tue 28 Apr 2026 11:00:57 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: gX7RWtXyANG8dWeWHyMumCwQqUy6cQbexUZUxtG3cu0=)
2: J_wTFK-Imelz3lo0EhalX7WkndE.roa (hash: LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=)
3: QE-p0DolLSe1YcERFi4pB7qqbME.roa (hash: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY=)
4: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (hash: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:7a:22:82:ff:29:51:b5:4e:9b:e1:9a:41:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Apr 27 11:00:57 2026 GMT
Not After : Apr 28 11:00:57 2026 GMT
Subject: CN=3f0b3395e5e0aa0aec717059e91341b6cb663f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:3f:bf:3c:d2:d9:c1:01:2f:62:37:2d:77:
a4:ac:5e:55:c0:39:ed:62:00:87:20:c9:f1:27:b3:
a7:de:94:51:af:e6:b8:72:5e:8e:ab:2b:d0:e5:f2:
ec:11:10:77:30:e2:fc:66:48:2c:a1:95:15:45:0d:
30:3e:59:e1:34:9f:29:7e:db:25:3a:65:cd:e6:29:
d7:6c:34:50:3e:01:bb:d5:0e:37:af:44:f9:25:f9:
25:b1:3a:46:17:27:36:18:8d:3c:4e:be:6b:68:23:
79:3a:9f:31:df:70:fa:5a:e5:e2:8a:c4:99:67:e2:
90:56:e0:e5:1e:58:ee:98:4d:00:64:4b:34:f8:a2:
0a:ed:5e:e8:00:aa:d9:e5:9c:99:84:97:28:19:31:
9e:83:47:dc:cd:03:1a:fb:52:10:3d:6b:7d:09:9b:
f9:69:98:57:cf:38:8c:e3:a8:d7:19:33:14:fa:7f:
9a:ca:5f:5a:6a:e9:49:ae:fd:27:e2:46:7c:2e:c3:
e9:1d:5b:1d:a4:1b:18:df:8d:ed:c2:db:9c:88:20:
e5:51:91:95:8f:13:bd:4b:33:22:63:4f:f7:81:79:
44:57:ad:c8:2f:7a:52:ad:f9:2a:1d:2c:62:c5:fc:
aa:c0:2c:29:0e:60:8a:c4:22:f0:81:5a:78:cb:b2:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0B:33:95:E5:E0:AA:0A:EC:71:70:59:E9:13:41:B6:CB:66:3F:35
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:41:04:e0:8a:cb:e4:5e:9b:71:35:a9:1e:5b:11:5e:1d:e4:
50:16:af:bb:7e:58:f7:e5:81:01:37:46:7a:0a:97:12:8e:cd:
27:35:db:7c:a0:91:b9:f8:73:af:2f:29:c5:35:67:b9:e3:d4:
c2:30:79:a5:6c:e2:db:8c:f2:60:6d:5f:00:08:72:b0:b8:67:
de:44:26:50:63:b0:d1:d5:e5:c4:9b:6f:88:d3:6f:b5:01:70:
66:a8:1f:5b:d9:f8:af:66:b8:8e:9e:6f:45:d8:5e:3f:81:b4:
eb:f5:e5:79:b1:13:77:d1:86:14:0e:60:45:18:f8:34:53:81:
00:98:e8:3d:cc:e8:d3:30:f7:45:46:60:a4:5c:3a:0c:1f:30:
b4:27:19:76:8f:a2:2e:75:58:ff:21:2b:1e:12:6c:92:90:69:
24:ea:fc:81:ec:c9:1e:7c:49:d7:cc:7b:19:04:df:fc:17:5a:
09:05:ab:69:b6:c6:aa:03:7c:ab:7e:e9:ec:10:ce:2d:bb:fa:
58:2d:be:fd:cb:c7:df:07:9a:d2:5d:46:10:fe:b2:a5:c8:c3:
e6:4b:57:ad:f9:f9:78:70:b4:60:21:fc:4a:b5:cf:b4:b2:0f:
75:4f:fb:ff:08:34:bd:fb:72:b4:4a:89:d8:82:1a:f0:5a:9c:
4a:e1:cf:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmXoigv8pUbVOm+GaQdPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3
NDVmNWUwHhcNMjYwNDI3MTEwMDU3WhcNMjYwNDI4MTEwMDU3WjAzMTEwLwYDVQQD
EygzZjBiMzM5NWU1ZTBhYTBhZWM3MTcwNTllOTEzNDFiNmNiNjYzZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMc/vzzS2cEBL2I3LXekrF5VwDnt
YgCHIMnxJ7On3pRRr+a4cl6OqyvQ5fLsERB3MOL8ZkgsoZUVRQ0wPlnhNJ8pftsl
OmXN5inXbDRQPgG71Q43r0T5JfklsTpGFyc2GI08Tr5raCN5Op8x33D6WuXiisSZ
Z+KQVuDlHljumE0AZEs0+KIK7V7oAKrZ5ZyZhJcoGTGeg0fczQMa+1IQPWt9CZv5
aZhXzziM46jXGTMU+n+ayl9aaulJrv0n4kZ8LsPpHVsdpBsY343twtuciCDlUZGV
jxO9SzMiY0/3gXlEV63IL3pSrfkqHSxixfyqwCwpDmCKxCLwgVp4y7KA4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8LM5Xl4KoK7HFwWekTQbbLZj81MB8GA1UdIwQY
MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt
ODVkODBhNTQ0YmViLzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi
LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUEE4IrL
5F6bcTWpHlsRXh3kUBavu35Y9+WBATdGegqXEo7NJzXbfKCRufhzry8pxTVnuePU
wjB5pWzi24zyYG1fAAhysLhn3kQmUGOw0dXlxJtviNNvtQFwZqgfW9n4r2a4jp5v
RdheP4G06/XlebETd9GGFA5gRRj4NFOBAJjoPczo0zD3RUZgpFw6DB8wtCcZdo+i
LnVY/yErHhJskpBpJOr8gezJHnxJ18x7GQTf/BdaCQWrabbGqgN8q37p7BDOLbv6
WC2+/cvH3wea0l1GEP6ypcjD5ktXrfn5eHC0YCH8SrXPtLIPdU/7/wg0vftytEqJ
2IIa8FqcSuHPyw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:56 2026 by rpki-client