Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
File: v5aJ0mM8sZFwKk5L480LMov9iDs.mft (raw, json)
Hash identifier: N6nq/JBIuIiV1g7VIGaJr8Q62HatgG6ZbLZGRlb9nBE=
Subject key identifier: 7E:A9:0F:F8:94:48:4D:9D:A4:6D:81:77:63:6D:2B:6C:BA:65:9D:CB
Authority key identifier: BF:96:89:D2:63:3C:B1:91:70:2A:4E:4B:E3:CD:0B:32:8B:FD:88:3B
Certificate issuer: /CN=bf9689d2633cb191702a4e4be3cd0b328bfd883b
Certificate serial: 019D39AF3BE58120C6E4CAF23343E2FFAD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5aJ0mM8sZFwKk5L480LMov9iDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
Manifest number: 0C
Signing time: Sun 29 Mar 2026 13:01:18 +0000
Manifest this update: Sun 29 Mar 2026 13:01:18 +0000
Manifest next update: Mon 30 Mar 2026 13:01:18 +0000
Files and hashes: 1: v5aJ0mM8sZFwKk5L480LMov9iDs.crl (hash: 7PzMegpqWHFLxKXbBJNRajkpGzESah5s4XHn4lu2Mxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5aJ0mM8sZFwKk5L480LMov9iDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3b:e5:81:20:c6:e4:ca:f2:33:43:e2:ff:ad:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9689d2633cb191702a4e4be3cd0b328bfd883b
Validity
Not Before: Mar 29 13:01:18 2026 GMT
Not After : Mar 30 13:01:18 2026 GMT
Subject: CN=7ea90ff894484d9da46d8177636d2b6cba659dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:31:9b:14:b1:5c:1f:b5:43:7f:27:9d:6e:3e:
37:fe:d7:85:3c:91:b5:a5:dc:b6:52:02:a4:ef:7e:
40:10:66:db:9a:98:1e:9e:2c:15:51:54:a3:24:53:
63:c1:bd:17:d2:ed:51:cf:cb:af:8f:bd:92:eb:b0:
2e:fe:29:be:a5:61:b0:4d:c4:ce:c5:e9:c0:69:26:
27:1c:4b:f7:54:6c:f8:47:41:82:3d:69:c3:ca:ee:
3c:58:59:49:fa:e8:5d:55:15:8e:ba:06:f6:8b:45:
b9:85:37:07:23:15:75:e1:09:95:fe:20:d4:a4:41:
24:96:de:57:ee:65:95:84:74:50:b3:10:f9:fe:28:
cd:3d:df:a9:1b:ea:b4:c2:fe:11:bb:37:86:ab:d1:
46:e9:6f:5d:ad:55:3b:19:b4:bd:11:df:78:8b:b2:
e4:08:b3:cd:d8:b3:52:d9:fe:ae:7b:79:e9:d2:47:
08:f3:37:00:d5:09:bd:b8:09:24:fe:9d:4a:1a:14:
bd:d5:d4:70:25:ee:58:b7:d5:ca:24:4d:73:a9:6d:
fe:a5:df:c9:68:9a:33:db:7b:75:eb:7b:e5:67:a1:
72:f4:1d:d4:de:04:6f:11:38:4f:44:51:d6:6c:24:
53:9e:30:61:ca:e4:12:52:77:88:ab:5b:30:ba:9f:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A9:0F:F8:94:48:4D:9D:A4:6D:81:77:63:6D:2B:6C:BA:65:9D:CB
X509v3 Authority Key Identifier:
keyid:BF:96:89:D2:63:3C:B1:91:70:2A:4E:4B:E3:CD:0B:32:8B:FD:88:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5aJ0mM8sZFwKk5L480LMov9iDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9c:f2:0f:fe:5e:f8:a1:ce:a7:f6:10:f5:6d:5d:fa:38:d6:
cc:b9:bb:37:db:b5:ef:2d:c6:61:ef:24:85:a1:b9:5c:ba:15:
82:28:ec:8b:37:c0:43:47:02:20:bf:62:d5:27:ea:11:07:ec:
db:83:6f:03:ae:6c:52:e7:9d:7b:94:fa:7a:67:4f:a2:d8:b3:
07:33:dd:c2:80:49:32:88:2a:18:1c:fd:99:9c:dd:a4:a9:35:
90:5d:dd:34:27:2f:dd:0b:b0:0b:e5:ea:54:56:f8:09:93:82:
4d:ed:f0:cd:69:a8:5a:7d:69:57:21:6b:a7:37:76:aa:39:5c:
a9:fb:7a:cd:3f:3d:6b:bb:eb:e3:ac:93:21:2e:9f:7f:6d:42:
53:58:97:88:e5:b3:e8:38:5f:bd:29:3b:12:c1:ba:d0:fa:e1:
aa:3f:f0:0b:2b:8f:b7:e4:4b:95:51:42:7a:cc:be:87:d8:57:
70:b9:50:12:78:e0:23:93:42:49:88:aa:5e:34:86:6e:69:e6:
8a:03:a1:33:d0:87:4e:58:66:22:93:41:38:1e:26:b2:3d:42:
24:44:7b:47:ec:52:26:e9:f9:db:d4:5e:9a:47:ea:a8:61:81:
d2:13:f5:a9:91:de:c7:5b:50:c0:e3:8b:71:b3:ad:a4:7e:76:
04:f4:0e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rzvlgSDG5MryM0Pi/61bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOTY4OWQyNjMzY2IxOTE3MDJhNGU0YmUzY2QwYjMyOGJm
ZDg4M2IwHhcNMjYwMzI5MTMwMTE4WhcNMjYwMzMwMTMwMTE4WjAzMTEwLwYDVQQD
Eyg3ZWE5MGZmODk0NDg0ZDlkYTQ2ZDgxNzc2MzZkMmI2Y2JhNjU5ZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jGbFLFcH7VDfyedbj43/teFPJG1
pdy2UgKk735AEGbbmpgeniwVUVSjJFNjwb0X0u1Rz8uvj72S67Au/im+pWGwTcTO
xenAaSYnHEv3VGz4R0GCPWnDyu48WFlJ+uhdVRWOugb2i0W5hTcHIxV14QmV/iDU
pEEklt5X7mWVhHRQsxD5/ijNPd+pG+q0wv4RuzeGq9FG6W9drVU7GbS9Ed94i7Lk
CLPN2LNS2f6ue3np0kcI8zcA1Qm9uAkk/p1KGhS91dRwJe5Yt9XKJE1zqW3+pd/J
aJoz23t163vlZ6Fy9B3U3gRvEThPRFHWbCRTnjBhyuQSUneIq1swup/WGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6pD/iUSE2dpG2Bd2NtK2y6ZZ3LMB8GA1UdIwQY
MBaAFL+WidJjPLGRcCpOS+PNCzKL/Yg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVhSjBtTThzWkZ3S2s1TDQ4MExNb3Y5aURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS84NDVhMGEtMmEyNi00YmI4LTk3ZTMt
OTUyYmE2Zjc1NTEzLzEvdjVhSjBtTThzWkZ3S2s1TDQ4MExNb3Y5aURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS84NDVhMGEtMmEyNi00YmI4LTk3ZTMtOTUyYmE2Zjc1NTEz
LzEvdjVhSjBtTThzWkZ3S2s1TDQ4MExNb3Y5aURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZzyD/5e
+KHOp/YQ9W1d+jjWzLm7N9u17y3GYe8khaG5XLoVgijsizfAQ0cCIL9i1SfqEQfs
24NvA65sUuede5T6emdPotizBzPdwoBJMogqGBz9mZzdpKk1kF3dNCcv3QuwC+Xq
VFb4CZOCTe3wzWmoWn1pVyFrpzd2qjlcqft6zT89a7vr46yTIS6ff21CU1iXiOWz
6DhfvSk7EsG60Prhqj/wCyuPt+RLlVFCesy+h9hXcLlQEnjgI5NCSYiqXjSGbmnm
igOhM9CHTlhmIpNBOB4msj1CJER7R+xSJun529RemkfqqGGB0hP1qZHex1tQwOOL
cbOtpH52BPQO1A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:29 2026 by rpki-client