Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: 2l06wOp0s6e4c08mSi2rd2v+6wOSqQHE50tXnvgTVvc=
Subject key identifier: 9D:A3:60:ED:F3:4C:9A:52:A4:AE:43:A8:02:63:5C:AB:A1:01:41:B9
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 019DD20861B3F83369DF55FFAF551736E982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: 038F
Signing time: Tue 28 Apr 2026 03:00:57 +0000
Manifest this update: Tue 28 Apr 2026 03:00:57 +0000
Manifest next update: Wed 29 Apr 2026 03:00:57 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: vkuL1QzC0LbHnGZ5L5jzAz8BN6ggaaltIALEv5hlZwM=)
2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:08:61:b3:f8:33:69:df:55:ff:af:55:17:36:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: Apr 28 03:00:57 2026 GMT
Not After : Apr 29 03:00:57 2026 GMT
Subject: CN=9da360edf34c9a52a4ae43a802635caba10141b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:df:7c:9d:d2:ed:d3:24:eb:6c:2d:1c:26:
36:60:62:b5:00:6a:fe:38:b0:9e:b9:07:2b:a6:dd:
b2:4d:5b:9c:df:c3:bc:2a:32:1d:78:61:e3:b6:26:
13:b6:89:f9:95:fd:2e:13:b6:12:fa:a1:6d:39:43:
aa:a9:c2:4f:26:11:74:aa:6a:a1:cf:45:59:b3:f2:
17:7d:2b:14:44:09:3e:c9:ce:c1:b9:d1:79:05:51:
ee:5b:ca:4c:ca:76:48:6b:e5:a4:7e:c2:f9:d0:7f:
56:04:05:86:4b:8b:5e:af:92:14:73:64:5c:70:a1:
a6:02:b7:dc:55:18:33:18:5e:02:b4:87:f2:7f:34:
a6:0c:7f:5d:9d:1d:15:8a:93:61:1e:bd:a8:b8:b6:
c5:ae:9b:8b:19:a1:05:48:71:88:43:18:02:61:3e:
ae:b3:8d:5e:3f:fd:75:53:83:cb:2e:d5:c7:f3:a5:
e3:0b:c7:4f:35:28:6f:d9:70:d0:98:ce:e3:3a:2d:
2c:4f:67:dc:75:51:b7:af:a5:80:d1:29:28:c0:33:
c3:3a:d0:37:8c:2c:9b:da:67:f7:9b:96:5f:ea:c3:
7f:7b:35:ca:0f:03:e3:d8:3d:19:91:2d:ed:2c:6b:
a4:1c:3f:bf:e5:46:52:a5:42:20:88:8d:35:ab:17:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A3:60:ED:F3:4C:9A:52:A4:AE:43:A8:02:63:5C:AB:A1:01:41:B9
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:26:76:80:6c:e6:35:32:86:37:2a:01:b5:c7:b7:e4:b2:c2:
f2:f1:e7:02:9d:f8:10:c1:6e:4f:fc:41:9d:b5:61:a0:ae:3f:
77:5c:1e:9d:3e:7e:17:91:e8:36:18:28:f1:2e:36:f4:a9:4d:
0c:3a:b3:6a:5b:ca:14:25:76:10:1b:1c:d7:ff:30:f3:bc:aa:
84:f1:67:af:34:a6:f2:0f:5c:60:2c:34:d0:73:9d:d3:d7:5d:
16:cc:90:e1:cb:84:68:35:0e:a9:d9:0c:8a:53:da:92:cd:2c:
57:7f:fa:66:36:93:d1:c4:69:39:aa:a8:cb:8c:38:b2:d1:2d:
5b:39:33:30:3d:73:04:e4:37:f3:bb:3f:8b:30:80:a2:c0:f3:
c1:ac:18:9a:3a:62:cd:83:2c:70:e6:26:16:e4:68:27:81:51:
07:2d:eb:62:40:41:41:4a:83:07:92:d8:e7:f5:4a:c2:f6:b0:
ca:d9:57:1e:0f:4b:4b:aa:fe:f6:0b:69:7d:b9:8c:f6:2d:38:
96:25:7c:c9:3a:53:13:01:96:1a:ea:30:db:cb:75:95:6b:ef:
15:f7:0c:d1:9d:ad:5e:e2:d1:c8:a4:eb:9a:85:f5:57:b2:c6:
ea:3b:07:25:61:c8:2f:dd:ad:a6:53:52:57:dc:9c:54:53:b7:
52:97:ee:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3SCGGz+DNp31X/r1UXNumCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ4YzA3NmI1M2E3MTIxYjU0MTc4ZjViNmE3ZTI5MTM1
YmNjZWMwHhcNMjYwNDI4MDMwMDU3WhcNMjYwNDI5MDMwMDU3WjAzMTEwLwYDVQQD
Eyg5ZGEzNjBlZGYzNGM5YTUyYTRhZTQzYTgwMjYzNWNhYmExMDE0MWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2arffJ3S7dMk62wtHCY2YGK1AGr+
OLCeuQcrpt2yTVuc38O8KjIdeGHjtiYTton5lf0uE7YS+qFtOUOqqcJPJhF0qmqh
z0VZs/IXfSsURAk+yc7BudF5BVHuW8pMynZIa+WkfsL50H9WBAWGS4ter5IUc2Rc
cKGmArfcVRgzGF4CtIfyfzSmDH9dnR0VipNhHr2ouLbFrpuLGaEFSHGIQxgCYT6u
s41eP/11U4PLLtXH86XjC8dPNShv2XDQmM7jOi0sT2fcdVG3r6WA0SkowDPDOtA3
jCyb2mf3m5Zf6sN/ezXKDwPj2D0ZkS3tLGukHD+/5UZSpUIgiI01qxenlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2jYO3zTJpSpK5DqAJjXKuhAUG5MB8GA1UdIwQY
MBaAFOf9jAdrU6cSG1QXj1tqfikTW8zsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMt
MTZjNjNjNDI2YzMzLzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMtMTZjNjNjNDI2YzMz
LzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSZ2gGzm
NTKGNyoBtce35LLC8vHnAp34EMFuT/xBnbVhoK4/d1wenT5+F5HoNhgo8S429KlN
DDqzalvKFCV2EBsc1/8w87yqhPFnrzSm8g9cYCw00HOd09ddFsyQ4cuEaDUOqdkM
ilPaks0sV3/6ZjaT0cRpOaqoy4w4stEtWzkzMD1zBOQ387s/izCAosDzwawYmjpi
zYMscOYmFuRoJ4FRBy3rYkBBQUqDB5LY5/VKwvawytlXHg9LS6r+9gtpfbmM9i04
liV8yTpTEwGWGuow28t1lWvvFfcM0Z2tXuLRyKTrmoX1V7LG6jsHJWHIL92tplNS
V9ycVFO3Upfu0A==
-----END CERTIFICATE-----
Generated at Tue Apr 28 05:10:01 2026 by rpki-client