Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: 3Ky7QrQm+UelkfjFPl5Mibq3qOXqsOKEdxkE01CEMko=
Subject key identifier: 36:ED:43:39:6B:3E:1E:1C:90:31:E3:39:68:51:7D:39:7F:37:ED:9B
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019CE892821D2BFB3E67387BCCEEE49E2E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0E65
Signing time: Fri 13 Mar 2026 19:00:41 +0000
Manifest this update: Fri 13 Mar 2026 19:00:41 +0000
Manifest next update: Sat 14 Mar 2026 19:00:41 +0000
Files and hashes: 1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: GRPHtVYIyx1zd0zI9nzhLuypq+Ge047O9Qxh4csWldI=)
2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:92:82:1d:2b:fb:3e:67:38:7b:cc:ee:e4:9e:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Mar 13 19:00:41 2026 GMT
Not After : Mar 14 19:00:41 2026 GMT
Subject: CN=36ed43396b3e1e1c9031e33968517d397f37ed9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:7d:4a:b3:7a:c2:73:46:2c:91:fb:86:d9:
c0:4f:20:62:39:49:b3:d7:80:1e:4f:d7:f4:0c:09:
ef:fd:9c:f4:d4:6a:5f:92:36:1e:f7:20:d9:53:c5:
dc:ef:e1:7d:dc:75:98:25:25:d4:a8:d7:fd:6c:7b:
51:29:b3:56:20:ac:97:04:ac:46:1c:56:d8:73:92:
25:1f:45:b0:09:f5:c5:67:04:9c:3f:a0:b0:19:98:
da:2f:c1:9c:20:52:dd:fa:68:05:19:b9:bf:ba:08:
9c:61:32:89:ca:75:d8:5b:3f:fb:5b:3b:a2:a8:e3:
b2:52:0c:10:a8:23:55:ca:7b:ee:58:4b:13:73:dc:
28:c3:04:98:ef:60:cc:ab:f4:94:6e:a1:1d:88:4e:
34:59:44:fc:23:64:f6:26:35:94:8d:42:1d:1f:ac:
67:85:06:d3:b5:3a:fc:7a:f9:23:88:ac:48:38:8d:
e4:b6:98:89:76:da:5d:7e:38:e4:59:3c:4e:5a:de:
94:2c:21:67:29:df:92:80:e2:fd:b4:fd:78:28:f7:
c5:fd:74:2b:ca:65:44:16:03:9d:5c:41:13:b4:44:
fa:d6:4f:c8:cd:94:a8:9b:0a:f9:78:c3:7e:d4:3e:
cf:1c:c9:3b:f5:3e:da:c3:bd:e7:93:60:27:4f:9d:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:43:39:6B:3E:1E:1C:90:31:E3:39:68:51:7D:39:7F:37:ED:9B
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:74:c7:72:b3:a9:ad:b9:6a:46:43:92:45:c5:65:a6:c0:47:
97:92:8f:19:59:0f:72:d3:23:80:5f:a8:fd:8e:ff:ed:6f:49:
de:14:82:24:35:f3:1a:36:4e:b4:da:11:0e:80:c9:df:ef:04:
81:f6:97:b4:66:20:1a:63:4d:fd:ad:41:88:7c:36:17:fa:2b:
2e:49:ec:8b:88:a6:a0:05:cb:40:33:8e:b9:e9:3f:3b:e8:53:
66:7c:9e:97:fa:c3:c5:dd:d5:bc:ed:46:ef:6d:39:02:d7:e1:
46:33:b7:fb:a4:cd:3e:26:db:24:c2:25:b8:44:9c:b5:ec:43:
a6:dd:6e:01:da:ae:2e:dd:ed:e2:96:93:f7:ba:52:17:25:98:
c9:1d:68:c9:9b:ee:c3:13:da:0a:0d:b5:53:94:ab:0a:bb:5c:
8d:dd:91:a7:ff:5d:68:41:3f:00:1a:6a:35:ab:72:e8:88:9c:
f0:b3:4b:b9:6f:55:51:60:20:c2:04:99:04:c1:4a:a5:29:65:
57:38:37:b5:38:14:89:09:f4:87:0e:b5:8d:62:c9:90:c4:a1:
f4:f8:6e:b9:36:58:65:70:18:d6:a5:9a:6d:1f:8d:7b:de:c9:
9e:70:5a:28:53:ae:41:95:63:c8:4a:2e:67:e6:d5:42:77:17:
32:41:71:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzokoIdK/s+Zzh7zO7kni4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5
M2FjM2EwHhcNMjYwMzEzMTkwMDQxWhcNMjYwMzE0MTkwMDQxWjAzMTEwLwYDVQQD
EygzNmVkNDMzOTZiM2UxZTFjOTAzMWUzMzk2ODUxN2QzOTdmMzdlZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRR9SrN6wnNGLJH7htnATyBiOUmz
14AeT9f0DAnv/Zz01GpfkjYe9yDZU8Xc7+F93HWYJSXUqNf9bHtRKbNWIKyXBKxG
HFbYc5IlH0WwCfXFZwScP6CwGZjaL8GcIFLd+mgFGbm/ugicYTKJynXYWz/7Wzui
qOOyUgwQqCNVynvuWEsTc9wowwSY72DMq/SUbqEdiE40WUT8I2T2JjWUjUIdH6xn
hQbTtTr8evkjiKxIOI3ktpiJdtpdfjjkWTxOWt6ULCFnKd+SgOL9tP14KPfF/XQr
ymVEFgOdXEETtET61k/IzZSomwr5eMN+1D7PHMk79T7aw73nk2AnT50eoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbtQzlrPh4ckDHjOWhRfTl/N+2bMB8GA1UdIwQY
MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt
MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4
LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3THcrOp
rblqRkOSRcVlpsBHl5KPGVkPctMjgF+o/Y7/7W9J3hSCJDXzGjZOtNoRDoDJ3+8E
gfaXtGYgGmNN/a1BiHw2F/orLknsi4imoAXLQDOOuek/O+hTZnyel/rDxd3VvO1G
7205AtfhRjO3+6TNPibbJMIluESctexDpt1uAdquLt3t4paT97pSFyWYyR1oyZvu
wxPaCg21U5SrCrtcjd2Rp/9daEE/ABpqNaty6Iic8LNLuW9VUWAgwgSZBMFKpSll
Vzg3tTgUiQn0hw61jWLJkMSh9PhuuTZYZXAY1qWabR+Ne97JnnBaKFOuQZVjyEou
Z+bVQncXMkFxQg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 05:17:09 2026 by rpki-client