Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
File: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft (raw, json)
Hash identifier: PfAq3KXUmzES2FpdzWxs1yO9g5RzEJo3XiZFOURx2tY=
Subject key identifier: 8B:94:41:1D:71:EA:C8:16:C8:8B:B6:FD:E9:DC:45:7F:02:70:51:57
Authority key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
Certificate issuer: /CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Certificate serial: 019D378990666A81F9339F67D943E0E5841C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
Manifest number: B6
Signing time: Sun 29 Mar 2026 03:00:55 +0000
Manifest this update: Sun 29 Mar 2026 03:00:55 +0000
Manifest next update: Mon 30 Mar 2026 03:00:55 +0000
Files and hashes: 1: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl (hash: WYUT9OPe5SgguVSTnN0aE9QjSkUKRRaV2AVl4u9C4r8=)
2: A72vNYtrAqZwGwVdWSRVIoELlNU.roa (hash: HjnhtlX3seiaGTReSxKDFImzMbn8Z77fXG9LnqCmXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:90:66:6a:81:f9:33:9f:67:d9:43:e0:e5:84:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Validity
Not Before: Mar 29 03:00:55 2026 GMT
Not After : Mar 30 03:00:55 2026 GMT
Subject: CN=8b94411d71eac816c88bb6fde9dc457f02705157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:c4:dc:c9:44:f6:0e:75:22:f5:12:24:e4:
46:3d:86:50:a6:d0:c2:16:ad:e8:86:ec:8a:53:28:
cb:eb:85:38:9b:5c:67:31:67:46:5c:3e:df:87:d1:
da:f4:00:0b:1d:83:04:79:e6:f4:b8:f2:63:75:f3:
1a:4c:3f:05:22:fa:16:24:8f:9e:39:0c:43:a8:99:
ed:cf:f2:44:e4:79:42:6d:15:9b:cf:3f:3d:66:89:
0b:82:ed:cf:38:1e:ea:ef:cf:d7:a2:b9:c6:be:a6:
32:63:68:9a:4b:4a:1f:80:96:0e:56:ff:b9:89:55:
25:95:7c:05:e7:28:c5:6a:09:6f:67:80:b5:ac:9c:
40:ec:ad:32:ec:61:25:eb:d1:44:78:60:9b:6b:44:
b5:d0:07:3b:c4:6a:ad:58:06:65:80:64:52:fd:06:
7a:ab:e7:36:d9:b8:d2:60:8d:b3:e6:92:60:eb:e0:
9c:64:6f:f8:ae:74:68:e8:bb:38:9b:77:5b:6e:6b:
65:3d:c5:a3:cb:5c:f3:f5:10:8a:95:1d:6c:a9:b6:
65:02:38:0f:86:03:7b:b0:4c:78:00:18:d9:2b:6e:
10:db:ae:75:49:ea:5a:11:a3:f7:c9:a2:07:d1:a2:
02:b1:48:b8:df:a0:dd:60:bf:36:08:e6:71:de:cf:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:41:1D:71:EA:C8:16:C8:8B:B6:FD:E9:DC:45:7F:02:70:51:57
X509v3 Authority Key Identifier:
keyid:E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:60:1f:88:f1:2b:ea:ec:9f:4d:d7:93:b4:e6:3f:91:a0:97:
52:6d:51:db:03:fd:a8:3c:03:b0:66:8f:2f:58:59:fb:46:ae:
53:ec:a5:5f:05:5f:aa:4b:24:77:f3:af:c1:a8:fa:c4:74:7a:
ed:e5:20:06:a7:f1:7a:dd:9a:72:d6:d8:78:1b:5d:82:3c:1c:
27:e1:03:dd:98:c0:2a:52:91:d0:9e:11:07:90:dd:be:70:13:
92:1f:23:92:c6:12:c4:3e:62:45:f1:d3:54:92:58:60:b0:b7:
f2:06:75:b9:0b:c7:47:04:73:76:37:bc:2e:89:36:77:6f:eb:
19:10:60:cf:d3:e8:a6:a8:bc:84:4d:89:13:b7:7b:eb:5a:c9:
07:fe:00:d5:b7:8b:68:03:9f:a4:51:45:91:d5:99:bc:68:2f:
4b:f1:1c:0e:30:e4:f2:6d:6d:ab:6a:2e:fd:b9:e7:ef:63:87:
d3:34:c2:cf:15:5c:77:41:13:28:9d:97:dd:cb:d2:a9:d1:d0:
5c:65:40:5b:be:bc:e7:da:a9:ef:6b:64:f2:35:06:15:d8:e5:
b7:6c:5f:7a:06:81:bb:f0:c9:37:ec:cc:e4:fa:b1:0e:d1:56:
ea:c4:2d:b7:90:81:8b:0a:60:21:a2:bb:17:d2:da:ce:3e:f1:
f8:c9:42:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iZBmaoH5M59n2UPg5YQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YjVkYzk3YjgwMWZhMGZmYjkzMDA1Y2NiZjRkNjcyN2I3
NTE5MmEwHhcNMjYwMzI5MDMwMDU1WhcNMjYwMzMwMDMwMDU1WjAzMTEwLwYDVQQD
Eyg4Yjk0NDExZDcxZWFjODE2Yzg4YmI2ZmRlOWRjNDU3ZjAyNzA1MTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt/E3MlE9g51IvUSJORGPYZQptDC
Fq3ohuyKUyjL64U4m1xnMWdGXD7fh9Ha9AALHYMEeeb0uPJjdfMaTD8FIvoWJI+e
OQxDqJntz/JE5HlCbRWbzz89ZokLgu3POB7q78/XornGvqYyY2iaS0ofgJYOVv+5
iVUllXwF5yjFaglvZ4C1rJxA7K0y7GEl69FEeGCba0S10Ac7xGqtWAZlgGRS/QZ6
q+c22bjSYI2z5pJg6+CcZG/4rnRo6Ls4m3dbbmtlPcWjy1zz9RCKlR1sqbZlAjgP
hgN7sEx4ABjZK24Q2651SepaEaP3yaIH0aICsUi436DdYL82COZx3s/fWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuUQR1x6sgWyIu2/encRX8CcFFXMB8GA1UdIwQY
MBaAFOa13Je4AfoP+5MAXMv01nJ7dRkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOThiZGEtZDNjOS00ZDBjLWExOTUt
Njk5NjIxZTAwZjQ2LzEvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOThiZGEtZDNjOS00ZDBjLWExOTUtNjk5NjIxZTAwZjQ2
LzEvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGAfiPEr
6uyfTdeTtOY/kaCXUm1R2wP9qDwDsGaPL1hZ+0auU+ylXwVfqkskd/Ovwaj6xHR6
7eUgBqfxet2actbYeBtdgjwcJ+ED3ZjAKlKR0J4RB5DdvnATkh8jksYSxD5iRfHT
VJJYYLC38gZ1uQvHRwRzdje8Lok2d2/rGRBgz9Popqi8hE2JE7d761rJB/4A1beL
aAOfpFFFkdWZvGgvS/EcDjDk8m1tq2ou/bnn72OH0zTCzxVcd0ETKJ2X3cvSqdHQ
XGVAW76859qp72tk8jUGFdjlt2xfegaBu/DJN+zM5PqxDtFW6sQtt5CBiwpgIaK7
F9Lazj7x+MlC4A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:25 2026 by rpki-client