Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: zpL8x+sGgopaHp/eokDdymn8wHF7llaLYk9JnkjnwUQ=
Subject key identifier: E4:E0:86:DA:69:D8:6E:49:A0:BD:26:F0:72:48:F2:56:85:ED:0E:4A
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 019D389BA888A61B25E2E0469E6CFEFF6617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 07C6
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: x+A34FJuG4Al/bbnRHvQtB7OivB/KS93zCGpOFo9qoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a8:88:a6:1b:25:e2:e0:46:9e:6c:fe:ff:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=e4e086da69d86e49a0bd26f07248f25685ed0e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:2f:1e:67:7a:60:8a:7f:5d:7e:d7:63:c2:
89:6b:79:2e:15:e4:82:98:9a:7c:21:6e:f9:2b:64:
ac:c7:03:e1:35:84:4a:5b:01:52:33:ad:a3:1c:e7:
9d:74:a9:01:3a:f7:9d:79:75:f4:bd:78:93:56:66:
8a:57:9f:3a:f1:10:e7:0c:96:5f:16:03:94:a7:8d:
7f:0a:45:fd:13:59:e9:5d:45:ca:5c:55:55:af:ea:
31:d4:a0:03:59:91:fd:5c:43:51:47:17:ee:69:25:
e6:49:a7:3b:2d:5c:07:fa:d2:4b:3a:3a:b0:3f:e6:
b6:2d:f4:9e:3c:7d:e1:c0:6b:12:2b:c7:dc:e9:f4:
95:64:b5:94:2d:e0:ed:c8:7e:b4:08:67:3a:db:da:
91:eb:0a:48:ab:bc:b6:67:68:f9:f4:5d:09:30:9c:
cd:7e:24:42:e7:5d:4b:01:a6:33:3d:29:15:5c:6b:
91:a5:de:66:98:4d:cd:5c:a8:8f:be:fc:76:c3:a0:
ee:98:ac:7f:9d:70:a9:16:6f:62:a0:32:05:cb:c5:
2b:04:6b:37:35:20:ea:f8:10:ea:0a:6c:a0:e4:ea:
87:cb:64:a0:6c:6d:bd:ae:da:3b:3e:ab:e6:7c:af:
12:92:df:1e:ed:a5:da:e1:34:9c:71:86:e5:a4:82:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E0:86:DA:69:D8:6E:49:A0:BD:26:F0:72:48:F2:56:85:ED:0E:4A
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2e:21:f9:5b:99:f8:ff:f3:c4:4f:f2:57:3e:e2:54:73:c6:
f3:b8:27:7e:c3:9e:10:04:14:b2:63:d1:22:0f:1d:14:e1:bc:
44:e7:3a:6c:9f:5d:97:42:a8:36:ed:13:93:da:55:fd:86:73:
89:8c:fc:e4:b6:94:cd:91:7a:39:42:57:ef:9a:52:6d:29:14:
c2:ea:e5:44:c0:03:61:58:0d:5d:c5:df:f6:44:8e:60:98:fa:
67:68:7c:7a:d8:6e:a9:2a:6c:6c:23:80:9a:50:47:37:3d:19:
1b:cf:fc:d4:6b:e6:ed:c4:e5:6a:71:f2:fb:8c:0e:6b:00:c2:
2c:2e:b0:c6:fe:40:1f:e7:53:d2:90:88:7d:b4:b7:7d:ff:6a:
e5:2d:c5:0c:b0:1a:21:ee:4a:b6:0a:9c:3a:e9:00:3a:09:88:
79:d6:b2:42:5f:e9:c5:5a:b2:27:09:c1:b4:d9:b9:2e:83:c2:
55:a6:14:fa:a4:9c:74:be:3e:6c:fb:5d:48:ec:1e:93:54:92:
91:da:a0:b6:13:0a:78:e5:cf:cf:40:6f:85:f8:3f:f7:c6:fb:
fc:ac:c9:64:22:26:ab:90:d6:3d:f5:09:f9:43:db:7e:b3:d3:
63:61:be:c0:a7:8e:f8:66:93:f6:64:8b:4f:d0:02:e6:78:62:
69:19:4c:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6iIphsl4uBGnmz+/2YXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz
ZTVmNzAwHhcNMjYwMzI5MDgwMDE4WhcNMjYwMzMwMDgwMDE4WjAzMTEwLwYDVQQD
EyhlNGUwODZkYTY5ZDg2ZTQ5YTBiZDI2ZjA3MjQ4ZjI1Njg1ZWQwZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uovHmd6YIp/XX7XY8KJa3kuFeSC
mJp8IW75K2SsxwPhNYRKWwFSM62jHOeddKkBOvedeXX0vXiTVmaKV5868RDnDJZf
FgOUp41/CkX9E1npXUXKXFVVr+ox1KADWZH9XENRRxfuaSXmSac7LVwH+tJLOjqw
P+a2LfSePH3hwGsSK8fc6fSVZLWULeDtyH60CGc629qR6wpIq7y2Z2j59F0JMJzN
fiRC511LAaYzPSkVXGuRpd5mmE3NXKiPvvx2w6DumKx/nXCpFm9ioDIFy8UrBGs3
NSDq+BDqCmyg5OqHy2SgbG29rto7PqvmfK8Skt8e7aXa4TSccYblpILa0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTghtpp2G5JoL0m8HJI8laF7Q5KMB8GA1UdIwQY
MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt
NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1
LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACi4h+VuZ
+P/zxE/yVz7iVHPG87gnfsOeEAQUsmPRIg8dFOG8ROc6bJ9dl0KoNu0Tk9pV/YZz
iYz85LaUzZF6OUJX75pSbSkUwurlRMADYVgNXcXf9kSOYJj6Z2h8ethuqSpsbCOA
mlBHNz0ZG8/81Gvm7cTlanHy+4wOawDCLC6wxv5AH+dT0pCIfbS3ff9q5S3FDLAa
Ie5KtgqcOukAOgmIedayQl/pxVqyJwnBtNm5LoPCVaYU+qScdL4+bPtdSOwek1SS
kdqgthMKeOXPz0Bvhfg/98b7/KzJZCImq5DWPfUJ+UPbfrPTY2G+wKeO+GaT9mSL
T9AC5nhiaRlM5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:39 2026 by rpki-client