Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
File: 5ADgGnlalXLPsazYWWya0zxhJlk.mft (raw, json)
Hash identifier: Ncit3f0hzU01Cnb7aqLWmtwdxNaywIi+PzoFd8zeHDc=
Subject key identifier: F0:6D:28:98:A2:D4:67:5E:1C:87:F9:97:E3:EC:86:53:D1:E0:31:88
Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
Certificate issuer: /CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Certificate serial: 019D397814D0C37C53C6843164069F187FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
Manifest number: 0223
Signing time: Sun 29 Mar 2026 12:01:04 +0000
Manifest this update: Sun 29 Mar 2026 12:01:04 +0000
Manifest next update: Mon 30 Mar 2026 12:01:04 +0000
Files and hashes: 1: 5ADgGnlalXLPsazYWWya0zxhJlk.crl (hash: +mBeN+2+Y8oPsdcEw8hDBuKqVRzWfjx1nV+bQkcEdrM=)
2: NUAjVMxo6Ucd4xsIT8RtOeLkos4.roa (hash: RLlBvyKQk7ZpNWvbBgNGnwpHL3NkcCrqlw1bbIkW97k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:14:d0:c3:7c:53:c6:84:31:64:06:9f:18:7f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Validity
Not Before: Mar 29 12:01:04 2026 GMT
Not After : Mar 30 12:01:04 2026 GMT
Subject: CN=f06d2898a2d4675e1c87f997e3ec8653d1e03188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:7a:16:60:21:df:7e:43:da:6b:dc:a1:96:
52:2f:b5:25:af:09:8c:e1:e5:69:0b:20:c3:a7:7f:
4a:a8:b8:a2:b3:65:ee:18:63:d6:01:49:39:fa:67:
b2:2f:5c:04:11:82:80:82:e1:70:de:f2:f2:a4:eb:
83:71:09:2e:f3:de:d0:ed:83:de:95:c0:a6:af:19:
15:da:b7:d2:1b:af:59:e0:87:84:bd:b0:a8:a3:72:
ee:10:3f:f9:ef:98:2a:6c:a4:7f:27:2c:7d:82:5d:
ce:4f:d5:45:bf:9d:59:76:5c:f4:67:a1:d0:0c:2a:
53:f6:a7:2b:10:93:32:d5:fe:c7:92:2b:02:13:bd:
e2:a6:37:d4:31:cf:93:1f:de:fe:21:c2:08:e5:82:
94:7a:a3:9c:6d:55:e8:cb:60:84:0d:c8:f1:c9:ec:
1e:58:3e:34:d2:4f:7a:f2:2d:21:e2:60:0b:25:f3:
8d:82:b8:71:b0:ea:04:eb:74:b2:e6:a6:69:eb:1b:
ee:13:ef:09:2c:7e:ae:00:33:73:6f:b3:75:74:ea:
21:37:7d:ef:77:c2:f8:26:a4:46:c6:10:4f:0e:15:
f1:f8:2b:11:c2:fe:22:cd:90:eb:6f:3e:46:dd:7a:
6a:d3:cd:d1:6e:15:6a:8c:48:8c:94:d6:42:2d:1e:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6D:28:98:A2:D4:67:5E:1C:87:F9:97:E3:EC:86:53:D1:E0:31:88
X509v3 Authority Key Identifier:
keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:9c:1a:3e:1c:bd:46:d4:bd:b0:18:5e:f2:f8:19:ae:8b:
3e:e6:04:de:d2:0a:1e:3d:5b:f5:c9:45:83:f3:f4:10:29:73:
cc:57:58:20:63:1d:c4:85:e3:93:53:07:bf:f4:9d:8b:7e:09:
08:29:0c:24:8d:ff:89:b2:de:ee:c0:24:54:cd:e6:84:22:cc:
41:e8:64:b3:07:a8:d6:82:93:1b:bb:27:85:9c:1b:7a:3c:09:
89:fa:6f:7e:38:b8:80:a7:c1:6e:a8:b7:83:32:92:02:0c:98:
b4:d1:e1:c5:ec:ec:55:a9:00:cd:fa:d2:9f:35:e1:3a:5c:f9:
56:60:ce:a6:80:25:47:1a:ee:2e:08:5f:5b:eb:e2:d5:b5:a5:
dc:19:8e:ea:65:8a:37:41:79:11:f7:8b:c7:ec:d0:20:30:b1:
44:68:55:b2:e1:83:40:4b:51:1c:21:fb:3e:40:08:e6:82:ca:
15:48:7a:97:11:2d:02:66:f8:dc:24:ec:27:62:48:42:c9:50:
b7:01:f4:6d:f5:5b:ed:9f:5b:64:33:ce:fb:2c:ac:95:55:e3:
23:03:8a:74:8a:cc:4b:af:ce:7d:f0:3a:48:38:9f:00:d3:c4:
78:06:b5:d5:1a:ed:6c:ce:ab:c3:76:d3:be:52:01:c0:a0:cb:
9e:2f:02:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eBTQw3xTxoQxZAafGH/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MDBlMDFhNzk1YTk1NzJjZmIxYWNkODU5NmM5YWQzM2M2
MTI2NTkwHhcNMjYwMzI5MTIwMTA0WhcNMjYwMzMwMTIwMTA0WjAzMTEwLwYDVQQD
EyhmMDZkMjg5OGEyZDQ2NzVlMWM4N2Y5OTdlM2VjODY1M2QxZTAzMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkN6FmAh335D2mvcoZZSL7UlrwmM
4eVpCyDDp39KqLiis2XuGGPWAUk5+meyL1wEEYKAguFw3vLypOuDcQku897Q7YPe
lcCmrxkV2rfSG69Z4IeEvbCoo3LuED/575gqbKR/Jyx9gl3OT9VFv51Zdlz0Z6HQ
DCpT9qcrEJMy1f7HkisCE73ipjfUMc+TH97+IcII5YKUeqOcbVXoy2CEDcjxyewe
WD400k968i0h4mALJfONgrhxsOoE63Sy5qZp6xvuE+8JLH6uADNzb7N1dOohN33v
d8L4JqRGxhBPDhXx+CsRwv4izZDrbz5G3Xpq083RbhVqjEiMlNZCLR555wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBtKJii1GdeHIf5l+PshlPR4DGIMB8GA1UdIwQY
MBaAFOQA4Bp5WpVyz7Gs2FlsmtM8YSZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZWQyNjEtOTNiYy00YjBmLTk1Zjkt
MGMzZWIxYTBkZDgwLzEvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hZWQyNjEtOTNiYy00YjBmLTk1ZjktMGMzZWIxYTBkZDgw
LzEvNUFEZ0dubGFsWExQc2F6WVdXeWEwenhoSmxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh02cGj4c
vUbUvbAYXvL4Ga6LPuYE3tIKHj1b9clFg/P0EClzzFdYIGMdxIXjk1MHv/Sdi34J
CCkMJI3/ibLe7sAkVM3mhCLMQehksweo1oKTG7snhZwbejwJifpvfji4gKfBbqi3
gzKSAgyYtNHhxezsVakAzfrSnzXhOlz5VmDOpoAlRxruLghfW+vi1bWl3BmO6mWK
N0F5EfeLx+zQIDCxRGhVsuGDQEtRHCH7PkAI5oLKFUh6lxEtAmb43CTsJ2JIQslQ
twH0bfVb7Z9bZDPO+yyslVXjIwOKdIrMS6/OffA6SDifANPEeAa11RrtbM6rw3bT
vlIBwKDLni8CTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:37 2026 by rpki-client