Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
File: v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json)
Hash identifier: K06tUd1ByvlUSXkeuHNYMQz1CPd0qSoNe/gqo2+zPhw=
Subject key identifier: 1D:F3:96:31:D8:C7:52:E5:3D:63:9E:67:EA:AA:80:D9:CE:82:81:DB
Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
Certificate issuer: /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Certificate serial: 019D3A54A8A3A33D5B5F65C2C6656CF0DFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
Manifest number: 1454
Signing time: Sun 29 Mar 2026 16:01:59 +0000
Manifest this update: Sun 29 Mar 2026 16:01:59 +0000
Manifest next update: Mon 30 Mar 2026 16:01:59 +0000
Files and hashes: 1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: QFDU0HiMBTpEtfM0t/q/e1d9Fz71pBisSIWJ/zVVikA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:a8:a3:a3:3d:5b:5f:65:c2:c6:65:6c:f0:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Validity
Not Before: Mar 29 16:01:59 2026 GMT
Not After : Mar 30 16:01:59 2026 GMT
Subject: CN=1df39631d8c752e53d639e67eaaa80d9ce8281db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:75:7e:29:a1:6d:6e:c8:0a:88:c0:6c:4d:
af:6e:76:8a:58:80:04:e9:f5:fc:b5:fb:25:04:39:
ee:e2:25:65:8f:2e:9a:ec:7a:e9:42:28:a7:a7:c7:
fd:b5:6f:a9:73:fa:48:f7:dc:d3:81:29:31:b3:d4:
19:25:f5:b2:ad:bc:1d:eb:97:f4:0e:76:87:61:40:
f2:41:50:50:77:ec:7b:e7:94:98:91:e8:a7:1f:c2:
3d:29:e0:34:35:5b:54:82:db:ce:03:44:b0:32:b3:
49:c8:90:b7:7e:2f:df:4c:ee:ae:d5:1e:00:ea:85:
26:dc:41:a5:b2:62:09:e6:45:61:84:98:5c:a3:fd:
5b:08:59:60:00:d5:78:63:48:c0:fc:85:f1:5c:b3:
44:d2:c5:c2:88:68:e7:c8:0c:e4:ae:37:9a:38:a0:
da:f5:fe:48:9f:f3:69:bd:41:7f:74:33:ce:64:d9:
a0:8d:8b:7f:89:34:5a:d8:72:30:7f:31:b0:81:f0:
44:3b:99:5d:b6:3b:db:85:65:97:54:48:fc:0d:9e:
f7:33:8c:b0:33:fc:8b:6c:b1:36:21:34:2c:47:17:
19:6d:e9:13:1b:24:74:4a:61:7c:e9:5d:54:72:fa:
eb:10:42:e7:7f:bf:0c:2e:fe:9c:d4:8a:73:ae:25:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:96:31:D8:C7:52:E5:3D:63:9E:67:EA:AA:80:D9:CE:82:81:DB
X509v3 Authority Key Identifier:
keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c9:72:e8:c8:46:35:0f:ef:58:44:ec:15:b7:34:16:66:00:
51:bd:f0:45:c5:43:09:13:d7:f4:2b:5f:9d:e2:91:92:ed:49:
43:02:eb:b9:16:f4:e0:53:38:e0:8b:40:07:3a:ff:35:28:76:
25:4e:57:8b:9b:99:d2:0f:eb:13:75:2d:85:9b:29:7c:ff:e2:
e0:1d:84:18:e2:0e:08:d9:ae:05:ef:c0:7a:97:87:d4:88:88:
c3:1b:00:d9:74:8a:93:ca:9c:e9:2f:88:b8:fa:36:ab:9f:30:
c0:5b:40:bd:3e:7a:41:82:20:ed:73:0a:ae:89:e9:d0:59:53:
ed:43:f3:c9:81:cf:8c:3e:ff:1d:8f:6a:7d:ef:e0:df:c4:95:
7d:08:8e:58:21:75:8d:55:2d:14:cb:c3:65:1c:03:85:61:0a:
ec:43:cd:2a:3c:cc:07:4b:02:2a:8c:b7:ae:5c:7f:4e:f1:ca:
93:c4:63:8c:ee:a5:0e:fe:6e:41:9c:da:31:23:1f:f5:18:b9:
19:15:58:ec:19:7f:cb:ee:5d:fb:ba:d3:72:b0:2a:70:c0:92:
e4:a0:bc:6e:d2:01:ac:a4:91:16:89:b1:51:4f:29:3a:cf:d8:
04:94:34:55:fb:64:c7:26:49:ab:2e:35:73:13:25:ea:01:75:
23:10:5f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VKijoz1bX2XCxmVs8N/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOWJhNTgyMWMwODVhNThlM2UxZDMzYTRlZjQxZTliNzYx
MDVlZTUwHhcNMjYwMzI5MTYwMTU5WhcNMjYwMzMwMTYwMTU5WjAzMTEwLwYDVQQD
EygxZGYzOTYzMWQ4Yzc1MmU1M2Q2MzllNjdlYWFhODBkOWNlODI4MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pt1fimhbW7ICojAbE2vbnaKWIAE
6fX8tfslBDnu4iVljy6a7HrpQiinp8f9tW+pc/pI99zTgSkxs9QZJfWyrbwd65f0
DnaHYUDyQVBQd+x755SYkeinH8I9KeA0NVtUgtvOA0SwMrNJyJC3fi/fTO6u1R4A
6oUm3EGlsmIJ5kVhhJhco/1bCFlgANV4Y0jA/IXxXLNE0sXCiGjnyAzkrjeaOKDa
9f5In/NpvUF/dDPOZNmgjYt/iTRa2HIwfzGwgfBEO5ldtjvbhWWXVEj8DZ73M4yw
M/yLbLE2ITQsRxcZbekTGyR0SmF86V1UcvrrEELnf78MLv6c1IpzriVkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3zljHYx1LlPWOeZ+qqgNnOgoHbMB8GA1UdIwQY
MBaAFL+bpYIcCFpY4+HTOk70Hpt2EF7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mYmM4YjUtYzVmNS00MGI4LThhNzQt
YmZhZmIyOTM3MWNmLzEvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mYmM4YjUtYzVmNS00MGI4LThhNzQtYmZhZmIyOTM3MWNm
LzEvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMly6MhG
NQ/vWETsFbc0FmYAUb3wRcVDCRPX9CtfneKRku1JQwLruRb04FM44ItABzr/NSh2
JU5Xi5uZ0g/rE3UthZspfP/i4B2EGOIOCNmuBe/AepeH1IiIwxsA2XSKk8qc6S+I
uPo2q58wwFtAvT56QYIg7XMKronp0FlT7UPzyYHPjD7/HY9qfe/g38SVfQiOWCF1
jVUtFMvDZRwDhWEK7EPNKjzMB0sCKoy3rlx/TvHKk8RjjO6lDv5uQZzaMSMf9Ri5
GRVY7Bl/y+5d+7rTcrAqcMCS5KC8btIBrKSRFomxUU8pOs/YBJQ0VftkxyZJqy41
cxMl6gF1IxBfTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:41 2026 by rpki-client