Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: 2UY2fb/WHtjod0b50up0W9egKaBtXHCqBRYTtxfms64=
Subject key identifier: 5B:4C:24:A8:D8:E8:8A:7C:D7:09:5C:7D:61:C8:BD:72:7B:C5:43:1A
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019D3A1C4EDB375D6DE881380E2AD4993686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 15:00:26 +0000
Manifest this update: Sun 29 Mar 2026 15:00:26 +0000
Manifest next update: Mon 30 Mar 2026 15:00:26 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: mjSI1EbCQmMUuUEbl9dMEWDNhGXTLDxqzbXOuVgfPLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:4e:db:37:5d:6d:e8:81:38:0e:2a:d4:99:36:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Mar 29 15:00:26 2026 GMT
Not After : Mar 30 15:00:26 2026 GMT
Subject: CN=5b4c24a8d8e88a7cd7095c7d61c8bd727bc5431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:75:3d:c9:34:4b:cc:b5:7d:9d:8e:ff:54:e4:
aa:d6:33:50:b4:c9:d0:47:3c:65:a1:50:e4:15:4e:
63:07:f4:37:b2:2f:a4:63:1d:41:4d:af:69:f5:fc:
15:9e:3b:1d:38:a7:7b:d6:c7:19:4f:bd:08:90:fa:
54:08:f6:8d:10:d5:58:87:d7:2b:47:cd:2b:c6:33:
47:f4:ae:33:32:48:6e:9f:5b:37:2c:2b:ef:d5:a4:
60:aa:fd:54:f4:45:72:cf:71:9f:12:79:72:3f:f5:
e4:73:5e:93:7d:09:8d:b8:a5:7c:2c:f6:9e:ee:c5:
f7:22:5f:ff:97:ea:ba:c6:f1:33:12:30:48:ef:11:
37:33:9b:5e:48:c4:25:8c:79:7e:49:df:d4:a4:fe:
32:e2:64:55:d3:a8:4d:f8:57:45:aa:06:01:2f:43:
33:42:57:f7:00:e8:09:83:92:0f:0f:7a:68:3c:80:
b9:48:b5:6c:bf:e5:9a:68:1d:af:c8:e7:da:71:66:
a4:75:b6:80:81:a8:63:0b:28:ef:06:2d:d1:56:15:
c9:db:2f:9e:4c:74:35:d9:35:a5:65:c2:6d:61:bb:
e1:88:a2:e8:69:03:9c:95:8f:1a:83:ff:12:d0:30:
7a:6c:5b:ab:44:c3:b8:34:f2:8b:f9:a7:f5:6c:9d:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:24:A8:D8:E8:8A:7C:D7:09:5C:7D:61:C8:BD:72:7B:C5:43:1A
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:62:99:f5:89:56:6a:04:75:69:7b:8a:34:ce:98:39:97:03:
b3:f8:da:42:47:ea:e4:e4:3c:33:ab:79:e9:b9:cf:42:bc:db:
3f:97:14:a5:b6:d2:65:2a:49:8a:7c:ee:78:1e:be:4d:37:e7:
c9:5d:92:b0:40:50:d1:d0:eb:1a:ec:2b:3d:fe:53:8b:6d:a9:
8a:50:2b:96:6d:35:59:11:3b:8a:be:0a:fd:69:69:48:2f:31:
4d:32:d5:64:db:01:8d:79:61:ff:de:16:94:e6:45:7d:67:90:
37:80:fa:73:ac:32:8d:c3:8e:70:f0:f9:2a:45:57:14:ae:e8:
94:32:5c:a1:76:98:8e:65:07:8e:e1:47:47:04:aa:70:1d:cd:
85:fe:03:11:51:e2:dd:d7:78:c0:d2:8e:68:cd:55:92:e6:bb:
08:2a:92:6e:e7:b8:bc:61:82:6c:82:d1:22:14:ad:0d:8a:43:
b8:ac:47:4c:64:e9:a3:83:f1:d2:d1:11:f4:93:0b:1d:a3:d0:
3e:76:f7:d3:46:dc:27:3d:33:a2:56:e5:55:be:32:cd:7b:83:
f6:cf:a3:ca:89:ff:c8:82:4f:a9:25:97:57:75:7b:62:62:7f:
81:02:a7:a9:98:bc:ad:1d:0d:0f:11:ce:94:43:1a:64:3c:f0:
b2:76:1b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HE7bN11t6IE4DirUmTaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl
YTUwN2YwHhcNMjYwMzI5MTUwMDI2WhcNMjYwMzMwMTUwMDI2WjAzMTEwLwYDVQQD
Eyg1YjRjMjRhOGQ4ZTg4YTdjZDcwOTVjN2Q2MWM4YmQ3MjdiYzU0MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XU9yTRLzLV9nY7/VOSq1jNQtMnQ
RzxloVDkFU5jB/Q3si+kYx1BTa9p9fwVnjsdOKd71scZT70IkPpUCPaNENVYh9cr
R80rxjNH9K4zMkhun1s3LCvv1aRgqv1U9EVyz3GfEnlyP/Xkc16TfQmNuKV8LPae
7sX3Il//l+q6xvEzEjBI7xE3M5teSMQljHl+Sd/UpP4y4mRV06hN+FdFqgYBL0Mz
Qlf3AOgJg5IPD3poPIC5SLVsv+WaaB2vyOfacWakdbaAgahjCyjvBi3RVhXJ2y+e
THQ12TWlZcJtYbvhiKLoaQOclY8ag/8S0DB6bFurRMO4NPKL+af1bJ1wowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtMJKjY6Ip81wlcfWHIvXJ7xUMaMB8GA1UdIwQY
MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt
NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz
LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWKZ9YlW
agR1aXuKNM6YOZcDs/jaQkfq5OQ8M6t56bnPQrzbP5cUpbbSZSpJinzueB6+TTfn
yV2SsEBQ0dDrGuwrPf5Ti22pilArlm01WRE7ir4K/WlpSC8xTTLVZNsBjXlh/94W
lOZFfWeQN4D6c6wyjcOOcPD5KkVXFK7olDJcoXaYjmUHjuFHRwSqcB3Nhf4DEVHi
3dd4wNKOaM1Vkua7CCqSbue4vGGCbILRIhStDYpDuKxHTGTpo4Px0tER9JMLHaPQ
Pnb300bcJz0zolblVb4yzXuD9s+jyon/yIJPqSWXV3V7YmJ/gQKnqZi8rR0NDxHO
lEMaZDzwsnYb4Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:48 2026 by rpki-client