Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
File: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json)
Hash identifier: 9AR6d2Ue9F0qh7bKpc+XPRYeycKm8CiH+NqpoBuTq1g=
Subject key identifier: 03:61:79:31:EB:47:17:B1:09:51:F7:CD:4F:43:F4:90:C7:C2:DD:1F
Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Certificate serial: 019D3752AD5FABDED7E02B7E1BD6859E0343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
Manifest number: 0B47
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: E5GImDzXsSwar/vjVGuxaRk3DW7NMjZ8xX10ipHWKws=)
2: xc5xrWodv2gFZRKSAH7N3QLmArg.roa (hash: d0lBtchfHuWBGmCrcDkn15hRm8o0/JbHM7LE2mVw2TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ad:5f:ab:de:d7:e0:2b:7e:1b:d6:85:9e:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=03617931eb4717b10951f7cd4f43f490c7c2dd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:8f:5b:89:22:8a:7c:af:51:fb:52:b1:03:
21:1b:52:d0:37:2e:1c:3b:d0:9a:28:b7:6a:ab:4c:
e7:be:79:88:02:62:ac:7b:09:bd:6b:dd:67:e0:af:
34:94:3e:40:a6:76:47:68:13:0a:b4:ce:dd:d7:f3:
ba:b0:c9:5a:e0:a5:d8:71:31:90:cf:69:af:2d:25:
99:6b:88:60:6b:cb:0b:88:63:42:b6:d4:f0:87:a8:
04:4f:40:f4:d5:9e:ca:ff:08:37:ff:1b:ba:32:3b:
81:32:92:b2:15:32:bc:f0:90:f9:67:55:f3:ec:35:
a0:fe:76:2f:4d:3f:b6:81:40:0b:8e:a9:c5:c3:c1:
6e:22:06:06:56:fa:33:14:97:70:07:45:50:4d:d1:
c4:dc:6f:ad:37:47:a6:8a:35:a5:98:1a:eb:70:6a:
53:88:25:b7:fa:b3:51:19:00:d9:72:80:7b:98:4b:
d0:ae:c4:30:d1:b5:cf:b9:cf:a4:59:7b:4b:b3:e5:
16:2f:d4:7d:a5:2a:2a:e5:95:c3:61:bf:80:0e:97:
6f:55:03:bc:96:a3:90:b1:81:96:00:72:c2:38:f0:
cd:1a:7b:c8:df:3f:13:5f:70:c5:a0:b2:0e:86:87:
87:76:e4:a4:05:52:71:b4:6a:1e:ec:66:f9:15:fb:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:61:79:31:EB:47:17:B1:09:51:F7:CD:4F:43:F4:90:C7:C2:DD:1F
X509v3 Authority Key Identifier:
keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:37:31:4c:b2:5d:d4:93:9e:54:f1:7f:14:aa:9b:79:e6:d3:
7f:2f:ad:eb:73:3f:f4:05:ee:9e:35:de:47:31:61:ca:4b:63:
03:bb:33:9b:e3:1c:ff:e7:c1:ef:61:e5:ce:69:df:d8:ad:83:
1b:55:73:d7:75:de:a6:54:f4:95:5c:34:8d:bc:5a:73:36:b7:
28:4f:8c:97:1b:d6:cc:65:59:4f:01:37:b2:ca:11:45:54:3f:
05:1f:1f:4b:46:93:a4:48:e4:62:f0:66:8c:8e:04:92:da:5f:
4f:b0:10:fc:2e:f1:f4:bb:4f:6d:2f:32:64:6b:bb:56:c5:74:
b1:e0:4d:0c:34:c8:62:00:1b:b8:ad:41:cb:c3:6c:e0:63:ba:
5d:c0:91:67:99:7d:0c:aa:0f:7e:22:a6:e8:fc:8d:28:d1:39:
f0:84:b2:11:60:8e:94:ea:de:28:1c:6b:97:01:23:73:75:d2:
68:4b:a7:cc:a2:5f:da:ee:62:c1:ec:4b:e7:1a:ae:5c:56:ff:
5e:4d:ed:28:eb:48:67:4a:d9:a6:71:be:e4:e5:25:96:71:46:
9e:50:48:86:bf:bd:71:52:0f:2c:f1:0c:97:ce:6e:a2:dc:67:
74:04:05:8d:19:27:a8:89:0f:79:bd:70:fc:74:c4:61:cb:f3:
5f:4a:ae:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uq1fq97X4Ct+G9aFngNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Y2Q2ZTYxYzE0ZTgzOTEwMDVhODE3YjI3MjJmN2M0YTgx
ZWI5OTMwHhcNMjYwMzI5MDIwMDU4WhcNMjYwMzMwMDIwMDU4WjAzMTEwLwYDVQQD
EygwMzYxNzkzMWViNDcxN2IxMDk1MWY3Y2Q0ZjQzZjQ5MGM3YzJkZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHmPW4kiinyvUftSsQMhG1LQNy4c
O9CaKLdqq0znvnmIAmKsewm9a91n4K80lD5ApnZHaBMKtM7d1/O6sMla4KXYcTGQ
z2mvLSWZa4hga8sLiGNCttTwh6gET0D01Z7K/wg3/xu6MjuBMpKyFTK88JD5Z1Xz
7DWg/nYvTT+2gUALjqnFw8FuIgYGVvozFJdwB0VQTdHE3G+tN0emijWlmBrrcGpT
iCW3+rNRGQDZcoB7mEvQrsQw0bXPuc+kWXtLs+UWL9R9pSoq5ZXDYb+ADpdvVQO8
lqOQsYGWAHLCOPDNGnvI3z8TX3DFoLIOhoeHduSkBVJxtGoe7Gb5FfuCXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANheTHrRxexCVH3zU9D9JDHwt0fMB8GA1UdIwQY
MBaAFOTNbmHBToORAFqBeyci98SoHrmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYt
YzVhZDE2YTU1YzVmLzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYtYzVhZDE2YTU1YzVm
LzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDcxTLJd
1JOeVPF/FKqbeebTfy+t63M/9AXunjXeRzFhyktjA7szm+Mc/+fB72Hlzmnf2K2D
G1Vz13XeplT0lVw0jbxacza3KE+MlxvWzGVZTwE3ssoRRVQ/BR8fS0aTpEjkYvBm
jI4EktpfT7AQ/C7x9LtPbS8yZGu7VsV0seBNDDTIYgAbuK1By8Ns4GO6XcCRZ5l9
DKoPfiKm6PyNKNE58ISyEWCOlOreKBxrlwEjc3XSaEunzKJf2u5iwexL5xquXFb/
Xk3tKOtIZ0rZpnG+5OUllnFGnlBIhr+9cVIPLPEMl85uotxndAQFjRknqIkPeb1w
/HTEYcvzX0qu0A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:18 2026 by rpki-client