Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: LVyfXXzqlkOg/+ic1t89C8xfmRyP1ocge7W+cSpmHjM=
Subject key identifier: DC:36:C1:A6:BF:FE:6F:8A:1B:58:77:43:D4:41:D5:93:60:44:B3:40
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 019D3865A03A8017C5BF0DD792BF9087B805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 1346
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: hAEFpz96VUZJzP1FyGIyIMmP7ivo6Xr4Xp9CkNA4fJQ=)
2: sZ_wJd4obInjvojttLVzF1c-iho.roa (hash: 3arQ7GDjRVulm35+QdBtPgi507F8KwHTfe7c2qEyJ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a0:3a:80:17:c5:bf:0d:d7:92:bf:90:87:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=dc36c1a6bffe6f8a1b587743d441d5936044b340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:a9:f4:b8:49:d2:b2:bf:aa:1b:c8:52:7b:
bd:4d:5b:6a:25:b9:b9:94:86:54:e6:0e:35:c0:4d:
80:0d:52:42:c0:55:ce:ec:41:01:74:6f:b9:8a:5f:
1e:85:f8:2a:b3:3a:08:d2:f4:da:ef:fa:17:64:70:
23:3d:a1:4e:ab:8f:53:29:94:41:5d:a6:93:c2:e6:
4b:cf:f5:8d:12:8d:aa:f3:e6:d3:c5:48:b2:e5:34:
e7:66:c1:43:0e:cf:6d:fe:62:b1:37:ab:05:35:0b:
61:d1:a5:7f:19:ff:2d:15:67:31:1a:93:5c:d6:3b:
d7:c7:e4:59:21:69:f9:ed:a4:e9:cb:91:8f:c0:8a:
09:8d:ef:35:dc:7b:30:2b:3a:c8:c8:11:18:9c:4f:
df:5a:89:fb:16:d2:a5:48:54:6b:ee:c7:ea:d7:64:
aa:67:1f:b1:86:de:80:cc:a2:c6:f8:03:f6:89:0e:
38:38:1a:1e:11:9e:dc:3f:e8:d7:d4:e3:e5:54:82:
3a:cb:c6:00:35:ee:70:03:dd:9b:c1:2b:ff:a0:c1:
df:2c:62:42:fb:c0:cf:45:4f:8e:b8:3b:23:58:71:
40:6f:37:a0:e1:5e:ad:fb:2e:a7:77:54:3b:99:b1:
1f:0e:95:05:e7:18:43:e4:f8:d5:26:c0:ce:4d:f2:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:36:C1:A6:BF:FE:6F:8A:1B:58:77:43:D4:41:D5:93:60:44:B3:40
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7e:cd:0d:78:58:b9:ba:07:51:c8:85:c1:c7:9d:83:68:33:
f2:b0:a3:73:cb:ae:55:37:89:f9:d8:40:90:11:7e:e4:82:fa:
d7:fe:6f:4f:23:5f:4d:65:23:a7:29:8e:64:02:61:8e:09:4b:
ee:78:79:00:95:8b:66:74:57:b2:9b:5f:42:7f:7a:1a:14:1f:
6b:67:70:b9:40:da:ad:5e:89:cf:fd:08:0c:88:33:d7:5c:bd:
08:65:de:21:75:d3:41:23:4a:54:4d:97:a2:f5:44:fb:e3:54:
20:2e:53:dc:8c:3b:d5:31:de:e7:08:c3:64:a2:30:02:fe:39:
83:2b:31:86:8e:49:43:2e:e4:2d:85:f7:76:93:55:bc:30:6c:
4a:b4:c3:59:b9:1a:dd:f9:b3:b5:6a:ad:b7:b6:c2:a0:62:59:
19:bf:5f:0a:89:c1:2e:d9:f6:4b:38:ab:f7:bd:4d:94:8d:f3:
d2:85:3e:d2:81:de:0a:84:6d:66:af:d1:88:08:47:b0:95:f2:
ec:ef:68:45:37:2b:e9:69:dc:33:e0:58:e0:a3:72:50:07:8d:
9b:db:01:1d:e0:b3:ce:56:e2:d9:0b:06:81:6b:22:07:88:4b:
df:ea:3a:e6:cb:56:98:58:4f:50:5d:85:cd:da:b2:24:3d:38:
00:44:95:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZaA6gBfFvw3Xkr+Qh7gFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0
NzQyMmYwHhcNMjYwMzI5MDcwMTE3WhcNMjYwMzMwMDcwMTE3WjAzMTEwLwYDVQQD
EyhkYzM2YzFhNmJmZmU2ZjhhMWI1ODc3NDNkNDQxZDU5MzYwNDRiMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPCp9LhJ0rK/qhvIUnu9TVtqJbm5
lIZU5g41wE2ADVJCwFXO7EEBdG+5il8ehfgqszoI0vTa7/oXZHAjPaFOq49TKZRB
XaaTwuZLz/WNEo2q8+bTxUiy5TTnZsFDDs9t/mKxN6sFNQth0aV/Gf8tFWcxGpNc
1jvXx+RZIWn57aTpy5GPwIoJje813HswKzrIyBEYnE/fWon7FtKlSFRr7sfq12Sq
Zx+xht6AzKLG+AP2iQ44OBoeEZ7cP+jX1OPlVII6y8YANe5wA92bwSv/oMHfLGJC
+8DPRU+OuDsjWHFAbzeg4V6t+y6nd1Q7mbEfDpUF5xhD5PjVJsDOTfKwvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw2waa//m+KG1h3Q9RB1ZNgRLNAMB8GA1UdIwQY
MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt
MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh
LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH7NDXhY
uboHUciFwcedg2gz8rCjc8uuVTeJ+dhAkBF+5IL61/5vTyNfTWUjpymOZAJhjglL
7nh5AJWLZnRXsptfQn96GhQfa2dwuUDarV6Jz/0IDIgz11y9CGXeIXXTQSNKVE2X
ovVE++NUIC5T3Iw71THe5wjDZKIwAv45gysxho5JQy7kLYX3dpNVvDBsSrTDWbka
3fmztWqtt7bCoGJZGb9fConBLtn2Szir971NlI3z0oU+0oHeCoRtZq/RiAhHsJXy
7O9oRTcr6WncM+BY4KNyUAeNm9sBHeCzzlbi2QsGgWsiB4hL3+o65stWmFhPUF2F
zdqyJD04AESVYw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:01 2026 by rpki-client